Remix.run Logo
throw93947309 11 hours ago

This. Why would you even connect TV to the network?

It is well known for like 5 years. Smsrt TVs go through your movies library, and upload screenshots and filenames to internet.

Some will start showing ads after firmware upgrade.

wavesplash 9 hours ago | parent | next [-]

Watch the video the article is based on - not connecting to the internet doesn't keep you safe in many cases: https://www.youtube.com/watch?v=6IFVTcM28KA

account42 7 hours ago | parent | next [-]

"Watch this two hour long video" is not a particularly useful reply. If you think the TV can exfiltrate your data without an internet connection then you should be able to explain how it could do that in your own words.

jandrese 6 hours ago | parent [-]

Just because you didn't allow it on your local WiFi doesn't mean it did not connect to the Internet. Your neighbors might have a guest WiFi it can use. Or maybe it has a built-in cell modem. Your data is valuable, there's reason to put effort into getting it.

dataflow 5 hours ago | parent [-]

Wouldn't using a neighbor's Wi-Fi without anyone's permission or instruction violate CFAA or some other law?

Also, wouldn't this be trivial to test by just setting up your own network and seeing if the TV connects?

bubblemoth 4 hours ago | parent | next [-]

Xfinity (aka Comcast) routers broadcast a separate network for Comcast subscribers do use from their phone. I don't think it's unreasonable to think that Comcast and TV manufacturer's could have an agreement that would allow TVs to connect.

mixmastamyk 5 hours ago | parent | prev | next [-]

They have permission from the provider, why they are able to log in.

joquarky 3 hours ago | parent | prev [-]

Laws aren't enforced against large companies.

p0lychromatic 9 hours ago | parent | prev [-]

This is because they rooted the TV.

They can just start a capture, record to RAM / storage, and retrieve it later when it is reconnected to the network.

Otherwise if it's disconnected, it is still hard to exfiltrate the data somewhere. Maybe they could get creative via Bluetooth, but then you would need a cooperating device in proximity of the device.

ezst 11 hours ago | parent | prev | next [-]

> This. Why would you even connect TV to the network?

I happen to have a NAS with family pictures I like to display. I can (and do) firewall that thing, but then you hit other issues like the apps you need to show pictures and movies in the first place not to install/run.

I've yet to hear of a reasonable recipe to isolate and secure such connected TVs. And don't get me started on Chromecast or other Android dongles, I've no reason to expect better treatment from Google. Some open source hacked-together box, then?

theshrike79 8 hours ago | parent | next [-]

Apple TV is the best one. No ads, full OS updates for a long time.

roboror 6 hours ago | parent [-]

There are ads for ATV content.

Arainach 5 hours ago | parent [-]

No, there really aren't.

I turn on the device, the app in the upper left is selected and showing some content from that.

The device sits idle, I get drone footage of landscapes.

If I accidentally bump the wrong button on the remote and get sent into the Apple TV (streaming service) app, sure it advertises producte, but in general there are no ads.

In comparison, Google TV's homescreen is giant ads for content on services I don't subscribe to, Roku is at least as bad, Amazon is worse, and Samsung and LG......oof.

switchbak 5 hours ago | parent [-]

And the Nvidia Shield is also hot garbage in this regard.

I suppose my next device is an Apple TV or some kind of home brew Linux box.

dahdum an hour ago | parent | next [-]

The shield was great until Google forced ads into it, switched to Apple TV back then and no complaints since.

Larrikin an hour ago | parent | prev [-]

The shield is vastly superior to the Apple TV. You aren't trapped in Apples wall garden and can install any apps on it. Android TV comes with an awful launcher, but that is easily replaced. There's no sponsor block on Apple TV and there never will be.

Arainach an hour ago | parent [-]

No, it's not. Let's start with the disclaimer that I work for Google, not the Android TV team, all words my own, etc.

The Shield at launch was an amazing product - premium UX and hardware, premium price point. Google changed the experience to an ad-loaded mess without providing an opt out for those who had spent hundreds of dollars on the Shield.

I was dogfooder, a huge advocate of the product, and someone who had convinced others to buy the Shield and Android TV devices. That UX revamp and how the team treated their customers (internal and external) turned me off the product for life. I tried the various competitors (XBox, Roku, Amazon) before landing on Apple TV. I now own two Apple TV devices - both of which are still getting updates many years after I bought them - and will continue using them for as long as the product line is maintained.

People in this thread have talked about Apple's clean beautiful ad-free UX, but the apps themselves are far better. Apple sets customer-friendly App Store requirements *and enforces them*. That means:

* The back button always works. It will bring you back to the home page of the app and then to the system launcher. It will not get stuck in an endless loop of "are you sure you want to quit?" and just dismissing that dialog like multiple Android apps do

* No loud obtrusive sounds on app startup (YouTube, Netflix)

* The apps are first-class priorities for developers. Circa 2019, the Paramount+ app was an inconsistent mess where subtitles were broken on some platforms. The Plex app wouldn't transcode certain formats on the XBox, and so on. None of these issues are a problem on Apple TV. Not every app is perfect (Dropout, I love your content, but your app is awful), but none of them are worse than on any competing platform.

Apple TV is a truly incredible product and ecosystem and one that feels like a joy to use. That's not the case for Android TV (now Google TV, I think?) even with a custom launcher.

layer8 5 hours ago | parent | prev | next [-]

You can always just connect your laptop (or some spare laptop) to the TV via HDMI. Not sure why you’d need to “hack together” something. A dedicated HTPC is nicer if you want to use IR remotes and the like.

ezst 2 hours ago | parent [-]

Yeah, perhaps "hack together" is unnecessarily dismissive, but the experience to match is that of a single peripheral to control everything. The other area I have no interest expanding my knowledge into is the minefield of codecs, HDMI cables, GPU and drivers combos to have something outputting HDR and whatever Dolby's flavour of the month proprietary invention I inevitably come across.

rossy 9 hours ago | parent | prev | next [-]

Obviously, as an advertising company, Google should have your utmost scrutiny. But as far as I know, their TV boxes don't ACR your content. If they were the only two options, sticking with your smart TV software instead of using a Google TV box would be a privacy mistake.

ppbbii 7 hours ago | parent [-]

Typically you will get sambatv or such installed, and technicians for whatever reason tend to click accept/approve during installations. Happened to me n my Google TV thing

delecti 6 hours ago | parent [-]

What technicians? When my TV was delivered they pretty much just unboxed it and set it on the floor, not even being willing to help mount it, let alone plugging it in.

jojobas 9 hours ago | parent | prev | next [-]

Any SBC like Radxa Rock (cheap) to Orange Pi (powerful). 4k output, a linux you control, play retro games or stream torrent movies.

mapontosevenths 8 hours ago | parent [-]

Not well.

If you only care about file playback, bit still care about things like HDR and quality audio I would recommend something like the OSMC Vero V instead.

It's still relatively cheap, and open source, but also let's you playback something like a blu-ray rip without loss of quality.

It has the other bonus of not requiring any real setup or maintenance.

pessimizer 9 hours ago | parent | prev | next [-]

> Some open source hacked-together box, then?

I've just used an old Intel NUC with Debian stable, a remote mini-keyboard and an automounted Samba share on the network forever. It's no more hacked together than any other computer. I do make the mouse pointer and the fonts real big. No apps required. Don't really need the keyboard except for mplayer hotkey presses - just the touchpad on it; if I need to do something that involves typing other than typing a password, I usually ssh in.

I think people are lowkey addicted to having shit sliding in and out and constantly being advertised to. How do you know what to watch unless somebody is constantly bombarding you with options? If it doesn't look like a star trek control panel, is it really TV?

If you like that, you can install Kodi. I haven't tried it since it was XBMC because I found the interfaces annoying and it had trouble dealing with networks, but I'm sure it's better.

> I've yet to hear of a reasonable recipe to isolate and secure such connected TVs

I don't even try. I overpay for dumb tvs in the present, or underpay for 10 year old tvs pre-Applefication. I've never owned a network capable television, or one with apps. I wouldn't.

edit: if your NAS is a separate box that can sit in proximity to your television, you could probably just run all of this stuff directly from the NAS. They spend most of their time doing nothing at all.

MiddleEndian 5 hours ago | parent | prev | next [-]

Just hook up a PC to it?

givinguflac 10 hours ago | parent | prev [-]

No idea what NAS you’re using, but I would recommend the Apple TV box.

amelius 11 hours ago | parent | prev | next [-]

Did you know that ethernet can run over HDMI? It's called HDMI Ethernet Channel (HEC).

emsixteen 8 hours ago | parent | next [-]

Surely it still needs to be connected to something that has a network connection, though? Doesn't really mean much here.

amelius 5 hours ago | parent [-]

I'm saying that "it is connected only via a HDMI cable" does not imply "it is not connected to the Internet".

bzzzt 10 hours ago | parent | prev | next [-]

Yes, but support in devices and cables is very limited.

wolrah 9 hours ago | parent | next [-]

Support in cables is nearly universal, because the same pins in the cable are used for the Audio Return Channel feature that allows a TV to pass audio from its internal apps back out to a soundbar or receiver via the same HDMI cable it takes signals in on from other devices. As far as I'm aware no one has made a cable lacking those pins since 1080p was still the high end.

But yes, support for the ethernet mode as far as I'm aware was never actually implemented in any devices that reached retail availability.

iamtedd 10 hours ago | parent | prev [-]

How much would support increase when manufacturers realise how few of their TVs don't get connected to the network?

_flux 10 hours ago | parent | next [-]

Even if it did support it, nobody connects their TV to their local network via HDMI, they connect it to their PC. And, as far as I'm aware, no PCs automatically start sharing networking with whichever networks they are connected to.

That could of course change. Could be even a nice feature for connecting your TV to the network via your multi media center, if the bandwidth is good.

notabotiswear 6 hours ago | parent [-]

LG was caught abusing (although it's hard to argue that it isn't intended behaviour) Windows automatic installation of hardware-related software to install adware. Doesn't take too many tinfoil wraps around one's head to imagine them doing the same to enable network sharing (assuming hardware support is ubiqtuous enough).

https://www.techspot.com/news/113031-lg-alienware-monitors-c...

rcxdude 10 hours ago | parent | prev | next [-]

Their solution to that is to either use the cell phone network or services like amazon sidewalk where they connect in through your (or a neighbour's) internet-connected device.

Dan_- 9 hours ago | parent [-]

I think it’s also possible to piggyback on other devices signed with the same certificate to exfiltrate using BLE. Maybe I’m wrong though.

bookofjoe 8 hours ago | parent | prev | next [-]

Proportion of HN users whose TVs don't connect to the internet? Significant

Proportion of non-HN users whose TVs don't connect to the internet? Negligible

wolrah 9 hours ago | parent | prev | next [-]

Not at all, because it uses the same pins as ARC, so the two features can't operate at the same time, and a lot of people use ARC to get audio from TV apps back to a soundbar or receiver.

HDMI Ethernet is dead, it's never going to happen in consumer televisions because it has a hard conflict with a feature a lot of people actually use.

jayknight 9 hours ago | parent | prev | next [-]

If people really start not connecting them. TV makers will just start including a cellular modem.

numpad0 8 hours ago | parent | prev | next [-]

Not even game consoles, PCs, even Raspberry Pi don't support it. Which is odd, so there are probably reasons why it's not worth the troubles.

eks391 10 hours ago | parent | prev [-]

Then you make sure to only use HDMI cables that aren't HEC, in conjunction with not connecting the TV to the internet directly, if you want to keep them isolated.

mikestew 7 hours ago | parent | prev [-]

Did you know that no one has implemented it? You might as well talk about packet-carrying fairies in your TV. And of course the Apple TV box it’s connected to will be quite happy to share its network connection with arbitrary crap you connect to it.

But I guess like an xkcd comic, someone is obligated to raise the issue every time TVs come up.

jangxx 10 hours ago | parent | prev | next [-]

I use the built-in AirPlay receiver on my Sony TV quite a bit and that requires network access

Dan_- 9 hours ago | parent [-]

LG’s AirPlay requires internet access.

trueno 8 hours ago | parent [-]

christ we need to start rooting tvs and start up a open and secure tv os. i never give my tv os internet access i rely on the appletv for the "smart tv" but if what another poster says is true about lg devices looking for public wifi to exfiltrate data then lol time to start pulling tvs apart and shielding their network components from getting a signal

mopsi 8 hours ago | parent [-]

That basically exists, but runs on external hardware: https://kodi.tv/

There's no need for the TV to be anything but a dumb screen that has only "power on", "power off", "volume up", "volume down" and "mute" functions. Most are probably too underpowered anyway to be useful.

unixhero 11 hours ago | parent | prev | next [-]

They do screenshot? Do you have a source so I can read more?

patrickk 10 hours ago | parent | next [-]

Yes tv makers were caught doing HDMI fingerprinting. There was a story some years ago about how basically all smart tv makers were sending data to an ad network based in China.

Samsung were openly bragging about this on their website some years ago (for the benefit of their advertising partners) but have recently muddied the waters when I check their site again, couching it in language mentioning privacy and other evasive language:

https://www.samsung.com/us/support/answer/ANS10010616/

miki123211 9 hours ago | parent | prev | next [-]

It's (mostly) a US thing; basically subsidizing TV prices with ad revenue. It's how the entry-level companies like Vizio operate, though the "big brand" TV makers are certainly just as guilty here. It's much less of a thing in the EU, where data privacy laws are stricter and TVs are hence (comparatively) more expensive.

As far as I know, they don't literally scan your media libraries; they screenshot whatever you're watching through HDMI (most often cable / satellite boxes), as those devices don't provide the telemetry that normal apps do. This info is used for audience measurement (thing Nielsen ratings), as well as showing you ads that are actually likely to match your interests.

wolvoleo 3 hours ago | parent [-]

No this is isn't just a US thing anymore. Every TV has automatic content recognition now, of some kind or other. Even in the EU.

wongarsu 11 hours ago | parent | prev | next [-]

https://www.ftc.gov/business-guidance/blog/2017/02/what-vizi...

"Starting in 2014, Vizio made TVs that automatically tracked what consumers were watching and transmitted that data back to its servers. Vizio even retrofitted older models by installing its tracking software remotely. All of this, the FTC and AG allege, was done without clearly telling consumers or getting their consent.

...

"Vizio collected a selection of pixels on the screen that it matched to a database of TV, movie, and commercial content

https://arxiv.org/pdf/2409.06203 shows LG and Samsung doing something similar

gnz11 11 hours ago | parent | prev | next [-]

https://en.wikipedia.org/wiki/Automatic_content_recognition

gosub100 9 hours ago | parent | prev [-]

https://www.youtube.com/watch?v=IvFu343KNek

duped 4 hours ago | parent | prev [-]

The alternative is inconvenient and more expensive. And most people simply don't care.

johnnyanmac 2 hours ago | parent [-]

We don't really have alternatives, period. LG is the one in the news today, but pretty much any TV this decade has been doing similar things. Computer monitors max out at 32 inches and the idea of a modern dumb TV is non-existent.