987

By Jeremy Hsu on September 24, 2024


Popular smart TV models made by Samsung and LG can take multiple snapshots of what you are watching every second – even when they are being used as external displays for your laptop or video game console.

Smart TV manufacturers use these frequent screenshots, as well as audio recordings, in their automatic content recognition systems, which track viewing habits in order to target people with specific advertising. But researchers showed this tracking by some of the world’s most popular smart TV brands – Samsung TVs can take screenshots every 500 milliseconds and LG TVs every 10 milliseconds – can occur when people least expect it.

“When a user connects their laptop via HDMI just to browse stuff on their laptop on a bigger screen by using the TV as a ‘dumb’ display, they are unsuspecting of their activity being screenshotted,” says Yash Vekaria at the University of California, Davis. Samsung and LG did not respond to a request for comment.

Vekaria and his colleagues connected smart TVs from Samsung and LG to their own computer server. Their server, which was equipped with software for analysing network traffic, acted as a middleman to see what visual snapshots or audio data the TVs were uploading.

They found the smart TVs did not appear to upload any screenshots or audio data when streaming from Netflix or other third-party apps, mirroring YouTube content streamed on a separate phone or laptop or when sitting idle. But the smart TVs did upload snapshots when showing broadcasts from the TV antenna or content from an HDMI-connected device.

The researchers also discovered country-specific differences when users streamed the free ad-supported TV channel provided by Samsung or LG platforms. Such user activities were uploaded when the TV was operating in the US but not in the UK.

By recording user activity even when it’s coming from connected laptops, smart TVs might capture sensitive data, says Vekaria. For example, it might record if people are browsing for baby products or other personal items.

Customers can opt out of such tracking for Samsung and LG TVs. But the process requires customers to either enable or disable between six and 11 different options in the TV settings.

“This is the sort of privacy-intrusive technology that should require people to opt into sharing their data with clear language explaining exactly what they’re agreeing to, not baked into initial setup agreements that people tend to speed through,” says Thorin Klosowski at the Electronic Frontier Foundation, a digital privacy non-profit based in California.

https://www.newscientist.com/article/2449198-smart-tvs-take-snapshots-of-what-you-watch-multiple-times-per-second/ (paywall!!)

top 50 comments
sorted by: hot top controversial new old
[-] Mobiledecay@lemmy.world 8 points 40 minutes ago

They're eating the dogs. 😊

[-] Blackmist@feddit.uk 29 points 2 hours ago

Actual paper here.

https://arxiv.org/html/2409.06203v1

It is not sending full screenshots as anybody technical would already have guessed. It's a few KB over an hour, so it's content recognition hashes.

Opt out anyway. Their study shows the opt out option does indeed opt you out of it.

[-] melroy@kbin.melroy.org 6 points 2 hours ago

So the data is still captured every 500ms. But it batches the data together and indeed only send data of around 8kb every minute back to the centralized server. But 8kb can not be full screenshots of MBs of course, so this is some kind of meta / fingerprint data. The original author (Jeremy Hsu) is misleading here with the term "screenshot every 500ms".

the remaining scenarios exhibit consistent peak values occurring every minute, accompanied by additional smaller traffic one minute following each peak. Samsung’s official documentation (Canada, 2022a) mentions that its ACR captures the frames every 500ms, suggesting that Samsung batches the captures as well and sends the fingerprints every minute. The differences in ACR capture frequency explains the different network behavior across the two brands.

[-] Blackmist@feddit.uk 4 points 2 hours ago

Yeah, it'll grab a few frame, crunch them up, post back something like "ac8c986ffcb770d460151b20c1cfe628612247ac2d284c780761af3b544bfea7" to the servers and from there it likely gets binned as "not recognised" but might match a segment from Star Wars 4K77.

It sounds like the sort of thing that should be off by default (and it probably is, I haven't bought a new one for years), but what we've learnt since GDPR is that if a big box comes up over what you're trying to do and it has an "Accept" button, people will generally click it and read nothing just to get back to another riveting episode of America's Deadliest Home Shootouts or something.

[-] Omgpwnies@lemmy.world 2 points 38 minutes ago

America’s Deadliest Home Shootouts

Does that come on before or after "Ow! My Balls!"?

[-] ameancow@lemmy.world 1 points 30 minutes ago* (last edited 30 minutes ago)

Right after "People Falling Down And Suffering Serious Injuries: Oops! All slide Whistles Edition!"

[-] letsgo2themall@lemmy.world 13 points 2 hours ago

Sceptre still sells dumb TVs'. If you are in the US, Walmart sells them. I have one and it's pretty good. No frills.

[-] Ibaudia@lemmy.world 25 points 3 hours ago

Do not connect your Smart TVs to network people, seriously. Just a bad idea. Use a media center PC or some other device that allows you to stream content, and make sure the TV itself is just a big monitor, nothing more.

[-] kalpol@lemmy.world 12 points 2 hours ago

I hear but have not verified that they will connect to an open network without letting you know.

[-] Ibaudia@lemmy.world 6 points 2 hours ago

I have definitely had to forget networks, then have them connect to that network weeks later at random, then having to forget the network again. Don't know how that's legal.

[-] melroy@kbin.melroy.org 5 points 2 hours ago

Forgetting a network is only when your wifi is password protected. If the TV can find an open wifi access point, it could just automatically connect to the internet. "Forgetting" a network doesn't help here..! Since there is nothing to forget (there are wifi points without password). But it should be forbidden IMO to automatically connect to these kind of access points. But even your mobile phone might do the same thing.

load more comments (1 replies)
[-] TriflingToad@lemmy.world 8 points 2 hours ago

i genuinely do not understand how TVs are so corrupt and greedy. You just display pixels, that's it! The entire purpose is to convert 1s and 0s to pretty color

[-] Emerald@lemmy.world 6 points 1 hour ago* (last edited 1 hour ago)

Imagine if your computer monitor just displayed ads on top of the hdmi signal

[-] higgsboson@dubvee.org 2 points 43 minutes ago

I believe that is patented

[-] sandbox@lemmy.world 2 points 1 hour ago

“Oh right, it’s money!!” — Hbomberguy

[-] MonkderVierte@lemmy.ml 31 points 3 hours ago

Btw, is there a firmware hacking/flashing scene for smart TVs?

[-] Lumisal@lemmy.world 10 points 2 hours ago* (last edited 2 hours ago)

Unfortunately no.

The best option if you want a new tv without this stuff is buying a business display, such as here:

https://www.sharpnecdisplays.us/products/displays/m651-2

This one even comes with a Raspberry Pi compute module.

You have to specifically search display and not TV.

[-] ConsistentAlgae@reddthat.com 4 points 2 hours ago

Yes there is, believe it or not. It just depends on the kind of TV you have.

I setup my LG to be “jailbroken” so I could have it inject a python script into a PS4 to mod that.

https://youtu.be/zYoesrUsIj8?feature=shared

Interesting stuff.

The other option is to setup a PiHole and find the telemetry they are using to send the info off and blocking that.

[-] Blxter@lemmy.zip 6 points 3 hours ago

I would love to able to able to put a different OS that does nothing but what I actually tell it to so on my smart TV...

load more comments (1 replies)
[-] TheObviousSolution@lemm.ee 1 points 1 hour ago

Don't buy them, they are excessively expensive and tt's a better idea to separate the smart functionality into an HDMI device of your choice anyway.

[-] Blisterexe@lemmy.zip 1 points 1 hour ago

Most new tv's are smart tv's by default, yo uave to pay extra for dumbness

[-] TheObviousSolution@lemm.ee 1 points 57 minutes ago* (last edited 57 minutes ago)

If I ever have to get a new one, I will madboi it with a monitor and DTV HDMI decoder.

[-] celsiustimeline@lemmy.dbzer0.com 14 points 3 hours ago

The divide between the tech savvy and the tech illiterate grows deeper.

[-] BigBrainBrett2517@lemmy.world 3 points 2 hours ago
[-] Corporate_Hippie@lemm.ee 24 points 4 hours ago

Use a pihole people, don't go barebacking the internet

[-] Onsotumenh@discuss.tchncs.de 21 points 3 hours ago

Doesn't help if the device has a baked in DNS address and just ignores your settings tho. Amazon and Google devices seem prone to that. After blocking everything on the common DNS ports except the PiHole, some of my devices have been acting kinda sluggish.

[-] thatsnothowyoudoit@lemmy.ca 7 points 3 hours ago* (last edited 3 hours ago)

Easy to block that - though not with pihole exclusively.

We use another tool at our network edge to block all 53/853 traffic and redirect all port 53 traffic to our internal DNS resolver (works much like pihole).

Then we also block all DoH.

Only two devices have failed using this strategy: Chromecast - which refuses to work if it can’t access googles DNS. And Philips Hue bridges. Both lie and say “internet offline”. Every other device - even some of the questionable ones on a special VLAN for devices we trust work just fine and fall back to the router-specified DNS.

[-] Onsotumenh@discuss.tchncs.de 2 points 1 hour ago

I wanted to do that as well, but I can't redirect outgoing traffic on my router, just block it entirely. Sadly it was the only device of that series not supporting OpenWRT (sigh)... Next one will either have to support that or be a DIY project... Have been starting to self host my stuff already and I'm not planning to stop there!

load more comments (1 replies)
[-] InternetPerson@lemmings.world 112 points 6 hours ago

For example, it might record if people are browsing for baby products or other personal items.

Don't mind baby products and dildos or whatever.

They could see bank activity and even login credentials when someone is temporarily displaying their own passwords.

This basically ignores all security measures regarding everything. Sensitive communication, company secrets and so on.

That's fucking seriously huge. What the fuck?!

[-] Altofaltception@lemmy.world 5 points 3 hours ago

Right? But we've been convinced the Chinese government spying on us through Huawei is a problem.

[-] melroy@kbin.melroy.org 4 points 2 hours ago

Every major tech major brands and business, even cars like BMW and now also TVs like Samsung or LG are all spying on their customers. And why isn't this forbidden by lawn already?

[-] MouseKeyboard@ttrpg.network 2 points 1 hour ago

They're both problems.

[-] melroy@kbin.melroy.org 7 points 3 hours ago

I know right!?? I connected my htpc to my Samsung tv. Omg!

[-] sumguyonline@lemmy.world 2 points 2 hours ago

If you have a smart device, someone is doing this with it. Best options to reduce their ability to access your devices: smart TV's - don't connect them to the internet unless you're updating the firmware. Use a streaming stick for streaming services, and then your privacy violations are minimized to the streaming stick that doesn't have a mic, or camera. Some controllers do have a mic, it's only a problem with who is making the tech. Other smart devices like fridge, microwave, oven, washer, etc, just never connect them to the internet, they likely will work fine their entire life without a network connection. Personal smart devices such as smart phones, remove google, and apple. Neither can truly be trusted, however apple does have a track record of keeping their snooping to themselves for what that's worth. For robots, they will likely need a network connection, I recommend supporting home automation projects that will allow us to replace the OS on our robot vacuums, and food delivery devices with one that connects to a home based server that doesn't need an internet connection. But never, ever, trust a smart device that is within hearing, seeing, or is touching you. It is a monitoring device, and it is being used that way by anyone with enough power.

load more comments
view more: next ›
this post was submitted on 26 Sep 2024
987 points (99.0% liked)

Technology

58269 readers
4971 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS