GoKawiilLG TVs are facing scrutiny due to a video seemingly showing the devices’ capability to track users when the TVs are off.
YouTube channel Gamers Nexus worked with Level1Techs, a technology-focused YouTube channel, and security researchers to analyze LG TVs’ tracking capabilities. They shared packet captures that pointed to the TVs, including LG’s pricey G5 OLED TV, scanning the LAN for other devices.
“The [G5] crawled our entire network and found dozens of unrelated devices, including smartwatches and phones of our staff who didn’t even know we were working on this,” Steve Burke, Gamers Nexus’ editor-in-chief, said.
Credit: GamersNexus/YouTube Gamers Nexus’ video shows results from Wireshark testing of LG’s OLED65G3PUA, which currently has a starting MSRP of $2,500. Credit: GamersNexus/YouTube Gamers Nexus’ video shows results from Wireshark testing of LG’s OLED65G3PUA, which currently has a starting MSRP of $2,500.
LG’s ad business, LG Ad Solutions, has said in recent marketing materials that it can reach 363 million “addressable secondary devices” in the US.
The YouTube channel used Wireshark, a network protocol analyzer tool, and inspected the TV’s firmware and found that LG TVs “are capable of identifying your IP address, geographic location, name of every Wi-Fi network in the vicinity and signal strength, channel numbers of neighboring Wi-Fi networks in range, and other devices on the network, even if not connected to the TV in any way, and the internal IP address of other devices on the network, alongside others.”
It’s unclear if LG TVs use this functionality for any purposes beyond advertising, such as diagnostics, or if this information is all sent to LG. It remains concerning, however, that devices with this technology are sitting in unsuspecting owners’ homes.
“This is the TV’s native functionality. This didn’t require vulnerabilities,” Burke noted.
Burke pointed out that “even using an LG smart TV as a dumb monitor doesn’t necessarily stop all of the functionality we’re talking about today,” while pointing to broader implications for non-LG smart TVs. He explained further:
Internet service providers sometimes have dual SSIDs that include open neighborhood Wi-Fi broadcast from customer routers, such as with Comcast’s Xfinity neighborhood hotspot and AT&T’s public hotspots, which are sometimes autoconnected to by devices when they discover the open network, such as in an apartment building from neighbors using such routers. So this is a concern broadly speaking and future looking for smart TVs regardless of the brand.
... continue reading