LG智能电视在屏幕关闭时记录音频并窥探本地设备
LG smart TVs caught logging audio with screen off and snooping on local devices

原始链接: https://www.notebookcheck.net/LG-smart-TVs-caught-logging-audio-with-screen-off-and-snooping-on-local-devices.1391214.0.html

《Gamers Nexus》与安全研究人员最近的一项调查揭露了LG智能电视令人担忧的数据收集行为。测试显示,这些设备会持续扫描局域网以映射连接的硬件(如手机和智能手表),并收集附近的Wi-Fi数据。这些信息会被汇总至LG的广告部门,用于追踪数以百万计的关联设备。 此外,研究人员发现这些电视利用“自动内容识别”(ACR)技术监控观看习惯,甚至能在待机模式下捕捉麦克风音频。如果网络连接中断,设备会将语音数据本地存储,并在恢复连接后上传。该报告还指出,webOS系统中存在严重的、未修复的远程代码执行漏洞。 鉴于这种默认开启的监控规模,研究人员建议彻底切断LG电视的网络连接,并使用外部流媒体设备以保护隐私。LG尚未就此调查结果发表评论。

一份最新报告指出,LG 智能电视即便在屏幕关闭的情况下,也可能存在录音及扫描本地设备的风险,这引发了广泛关注。 Hacker News 上的讨论反映出用户对各大电视制造商隐私政策的强烈不满。评论者们正在探讨这些数据收集行为的规模,以及它们在《通用数据保护条例》(GDPR)框架下可能面临的法律责任。 许多精通技术的用户正采取防御措施以降低风险。常见的策略包括:将智能电视隔离在受限的物联网(IoT)网络中、使用防火墙阻断出站网络流量、部署 Pi-hole 等 DNS 过滤工具,以及完全弃用电视内置软件,转而使用注重隐私的流媒体设备(如 Apple TV)。虽然有人认为这些企业已将潜在的监管罚款视为“经营成本”,但也有人强调,在智能技术大肆入侵的时代,保持电视处于“非智能”状态是确保隐私的唯一可靠途径。
相关文章

原文
Voice prompts in plain text, stylized

ⓘ Gamers Nexus on YouTube - edited

Testing revealed webOS logging user voice prompts in plain text.

An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then upload data once reconnected to the internet.

LG smart TVs continuously sweep home networks, map secondary devices, and log microphone audio while appearing to be turned off, according to a new 135-minute-long video published by Gamers Nexus (see below).

In more detail, Steve had been working with Level1Techs and independent security researchers. Together, they tested retail LG OLED models including the G5. Network packet captures taken through Wireshark showed the TVs actively scanning the local area network for unrelated hardware, including phones and smartwatches. Apart from internal IP addresses, the sets also gathered the names and signal strengths of neighboring Wi-Fi networks along with location data.

This data collection pool is fed into into LG Ad Solutions (the company’s targeted advertising arm). LG claims they have roughly 216 million smart TV sales globally. On the other hand, the ad division says it has access to 363 million secondary addressable devices in the US alone by tracking other hardware on the same network. The sets also run Automated Content Recognition (ACR). It samples on-screen audio and video into digital fingerprints to log what users watch across inputs. While ACR has been well documented in the past, new testing shows the data collection goes much further than just that.

During bench tests, they found the TV could capture clean microphone audio while the screen was (or at least looked to be) powered down in standby mode. When the team disconnected the TV from Ethernet, the set continued saving voice input locally and uploaded the stored files once network access was restored.

The researchers also documented remote code execution vulnerabilities in webOS that are currently moving through the responsible disclosure process. Because of the fact that the TV uses broad network listeners and data sweeps out of the box, the team's recommendation was straight-up disconnecting LG sets from the internet and using external streaming devices instead.

LG has not commented on any of this as of writing.

联系我们 contact @ memedata.com