Also debunked in the Gamer Nexus video. The TV will scan for public wifis and connect. Watching the video, it also seemed like a "missed opportunity" for LG to not create a mesh network of LG devices that would help eachother connect to the internet. So the LG device on your neighbours wifi might help your not connected TV to some tasty internet access. Or at least to unload its cache of A(V)CR fingerprints.
There are so many misunderstandings about that video. Which ain’t surprising as it was longer than a movie and mainly nonsense about what it can do rather than what it does do.
Agreed. I’ve come to believe that the video’s benefit from bringing awareness to the issue is outweighed by how misleading it is. Massive amounts of the video were “we hacked the TV and made it do [bad thing]” and was reported as “LG TVs do [bad thing]!”
I don't think it's unreasonable to think that the television would search for unsecured wi-fi or other ways of connecting to the internet without user input.
I agree, it would be easy for a security research to discover if a TV tried to do that and would result in an even greater stuffstorm than LG is dealing with now or that Samsung dealt with in the past.
It’s absolutely unreasonable. Each subscriber has a certain amount of fixed bandwidth available to them, and there are other devices connected to their network. By connecting an unauthorized device, that device now has both the ability to consume bandwidth to which it’s not entitled, and potentially scan the network for vulnerabilities.
It’s basically stealing.
Would you want some device connecting to your network that is not under your control?
And before you answer “well, you should lock it down,” yes, that’s true, but we do not blame the victim if they fail to do so. An unlocked door is not an invitation.
I'm not sure if any TVs currently do this, but they could connect to unsecured public WiFi without the user doing anything, if one were available with no password. Fortunately such networks aren't that common most places, but it's not a big leap from the sketchy things LG and other companies do. They could also put SIMs in them if they wanted. Again, I don't know that any do that, but I wouldn't put it past them. I'm not that paranoid, but I don't trust them to be up front and ethical.
A TV not on the Internet is basically worthless these days, unless you have a third-party streaming device like a Fire or Shield--and then you're just moving the trust point from the TV itself to the streaming device, and the same concerns exist. Do you trust Amazon any more than you trust LG?
I'm not sure of the current state of it, but a few years back specturm was selling access to a private network based on consumer routers. Tmobile could partner with them so that one of their customers could go through spectrum instead of the cell towers in cases where connections were spotty.
That's exactly the sort of thing I could see LG piggy backing on. Your neighbor might have spectrum so the LG TV connects to it's private network to phone home.
Xfinity/Comcast does the same thing. By default, the router they provide has a separate WiFi network supporting their distributed WiFi service. It's only for their customers, and it's not an open no-password network, but I'm certain they would offer it to any company that paid for access. They also have WiFi APs on telephone poles to broaden coverage.
If you live in a dense city, there's a good chance you can reach an open network. When I lived in midtown Manhattan, there were around 500 SSIDs reachable from my apartment.
> A TV not on the Internet is basically worthless these days, unless you have a third-party streaming device like a Fire or Shield--and then you're just moving the trust point from the TV itself to the streaming device, and the same concerns exist.
We use a Kubuntu Linux laptop behind the TV with a wireless mouse and keyboard (for searching and stuff), stream in Chrome, works great. And yes, we trust this combination.
> Do you trust Amazon any more than you trust LG?
We don't use Amazon device products just because we use Kubuntu Linux on PC's in our home but yes based on LG's behavior we trust Amazon more and we don't put our LG TV or any of our LG appliances we bought a few years ago, on the Internet.
I have a 10-year-old LG TV that runs webOS 3. The first update slowed it down - not that it was particularly fast to begin with - and every subsequent update made it even slower.
It also constantly nags you to update the firmware. You can’t just refuse once; every time you turn on the TV, it asks you again.
I won’t make the same mistake the next time I go shopping for a TV.
Forgot to mention - there were no improvements whatsoever in terms of functionality.
Agreed. I leave my tv disconnected from the internet, and connect my Apple TV instead… the default UX on most tvs is so much slower and add-riddled than Apple’s
Also debunked in the Gamer Nexus video. The TV will scan for public wifis and connect. Watching the video, it also seemed like a "missed opportunity" for LG to not create a mesh network of LG devices that would help eachother connect to the internet. So the LG device on your neighbours wifi might help your not connected TV to some tasty internet access. Or at least to unload its cache of A(V)CR fingerprints.
LG is truly an adversial party in all of this.
They didn't actually say it does that. They said it could do that. It doesn't (yet).
There are so many misunderstandings about that video. Which ain’t surprising as it was longer than a movie and mainly nonsense about what it can do rather than what it does do.
Agreed. I’ve come to believe that the video’s benefit from bringing awareness to the issue is outweighed by how misleading it is. Massive amounts of the video were “we hacked the TV and made it do [bad thing]” and was reported as “LG TVs do [bad thing]!”
3 replies →
I don't think it's unreasonable to think that the television would search for unsecured wi-fi or other ways of connecting to the internet without user input.
I agree, it would be easy for a security research to discover if a TV tried to do that and would result in an even greater stuffstorm than LG is dealing with now or that Samsung dealt with in the past.
More advertising money (the irony) by conflating capabilities of a Turing complete OS with actual behaviour
It’s absolutely unreasonable. Each subscriber has a certain amount of fixed bandwidth available to them, and there are other devices connected to their network. By connecting an unauthorized device, that device now has both the ability to consume bandwidth to which it’s not entitled, and potentially scan the network for vulnerabilities.
It’s basically stealing.
Would you want some device connecting to your network that is not under your control?
And before you answer “well, you should lock it down,” yes, that’s true, but we do not blame the victim if they fail to do so. An unlocked door is not an invitation.
I'm not sure if any TVs currently do this, but they could connect to unsecured public WiFi without the user doing anything, if one were available with no password. Fortunately such networks aren't that common most places, but it's not a big leap from the sketchy things LG and other companies do. They could also put SIMs in them if they wanted. Again, I don't know that any do that, but I wouldn't put it past them. I'm not that paranoid, but I don't trust them to be up front and ethical.
A TV not on the Internet is basically worthless these days, unless you have a third-party streaming device like a Fire or Shield--and then you're just moving the trust point from the TV itself to the streaming device, and the same concerns exist. Do you trust Amazon any more than you trust LG?
I'm not sure of the current state of it, but a few years back specturm was selling access to a private network based on consumer routers. Tmobile could partner with them so that one of their customers could go through spectrum instead of the cell towers in cases where connections were spotty.
That's exactly the sort of thing I could see LG piggy backing on. Your neighbor might have spectrum so the LG TV connects to it's private network to phone home.
Xfinity/Comcast does the same thing. By default, the router they provide has a separate WiFi network supporting their distributed WiFi service. It's only for their customers, and it's not an open no-password network, but I'm certain they would offer it to any company that paid for access. They also have WiFi APs on telephone poles to broaden coverage.
If you live in a dense city, there's a good chance you can reach an open network. When I lived in midtown Manhattan, there were around 500 SSIDs reachable from my apartment.
> A TV not on the Internet is basically worthless these days, unless you have a third-party streaming device like a Fire or Shield--and then you're just moving the trust point from the TV itself to the streaming device, and the same concerns exist.
We use a Kubuntu Linux laptop behind the TV with a wireless mouse and keyboard (for searching and stuff), stream in Chrome, works great. And yes, we trust this combination.
> Do you trust Amazon any more than you trust LG?
We don't use Amazon device products just because we use Kubuntu Linux on PC's in our home but yes based on LG's behavior we trust Amazon more and we don't put our LG TV or any of our LG appliances we bought a few years ago, on the Internet.
I’ve had TVs that had important firmware updates that improved hdmi/atmos/etc compatibility
I have a 10-year-old LG TV that runs webOS 3. The first update slowed it down - not that it was particularly fast to begin with - and every subsequent update made it even slower. It also constantly nags you to update the firmware. You can’t just refuse once; every time you turn on the TV, it asks you again. I won’t make the same mistake the next time I go shopping for a TV.
Forgot to mention - there were no improvements whatsoever in terms of functionality.
Yeah, I find the LGs to be really annoying. The Sony seems to be much better.
Agreed. I leave my tv disconnected from the internet, and connect my Apple TV instead… the default UX on most tvs is so much slower and add-riddled than Apple’s