GoKawiilWTF?! An investigation by YouTube channel Gamers Nexus has found that LG's smart OLED TVs track users' viewing patterns across streaming platforms, cable, and local media. The televisions also reportedly scan users' home Wi-Fi network, collect information about connected devices without permission, and transmit the data to LG Ad Solutions to push targeted advertising.
The investigators found that LG was using Automatic Content Recognition (ACR) technology to track not only users' viewing habits but also any content played through the TVs' HDMI, USB, RJ45, optical, RCA, and coaxial ports. However, using ACR to track content is not just a problem limited to LG but an industry-wide practice used by almost all major smart TV manufacturers globally.
The investigation, which was conducted in collaboration with fellow tech YouTubers Level1Tech and multiple independent security researchers, also found that the TVs have a major security loophole that can be used by hackers and other malicious actors to surreptitiously record audio through the built-in microphone, even when the device is switched off.
Alarmingly, unplugging the TV from the power socket and shutting off the internet don't automatically delete the recordings or prevent the data from being transmitted. According to the researchers, the recorded audio files can be safely stored on the TVs' local storage and sent to third-party servers once it's powered on and reconnected to the internet.
As if the risk of hacking and unauthorized data harvesting aren't troubling enough, the researchers also found the TVs harbor critical remote-code-execution vulnerabilities that could potentially be exploited to steal user data. The report did not reveal details about the RCEs as the researchers are still in the process of reporting them to LG in accordance with industry practices.
It is worth noting that this is not the first time Gamers Nexus has called out LG for unsavory business practices. Earlier this year, the channel reported that several popular LG monitors were automatically installing a sketchy Windows app without permission. The monitors were also reportedly collecting user data and displaying pop-up ads for McAfee antivirus and other software.
Microsoft's executive VP of Windows and Devices, Pavan Davuluri, later confirmed that Redmond had to intervene and force LG to remove the controversial app from the Windows Store after a massive outcry from users complaining about the pop-up ads and automatic app installations.
LG has since denied most of the claims. In a statement to Tom's Hardware, it said: