this post was submitted on 26 Sep 2024
1478 points (99.3% liked)

Technology

60058 readers
2807 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
 

By Jeremy Hsu on September 24, 2024


Popular smart TV models made by Samsung and LG can take multiple snapshots of what you are watching every second – even when they are being used as external displays for your laptop or video game console.

Smart TV manufacturers use these frequent screenshots, as well as audio recordings, in their automatic content recognition systems, which track viewing habits in order to target people with specific advertising. But researchers showed this tracking by some of the world’s most popular smart TV brands – Samsung TVs can take screenshots every 500 milliseconds and LG TVs every 10 milliseconds – can occur when people least expect it.

“When a user connects their laptop via HDMI just to browse stuff on their laptop on a bigger screen by using the TV as a ‘dumb’ display, they are unsuspecting of their activity being screenshotted,” says Yash Vekaria at the University of California, Davis. Samsung and LG did not respond to a request for comment.

Vekaria and his colleagues connected smart TVs from Samsung and LG to their own computer server. Their server, which was equipped with software for analysing network traffic, acted as a middleman to see what visual snapshots or audio data the TVs were uploading.

They found the smart TVs did not appear to upload any screenshots or audio data when streaming from Netflix or other third-party apps, mirroring YouTube content streamed on a separate phone or laptop or when sitting idle. But the smart TVs did upload snapshots when showing broadcasts from the TV antenna or content from an HDMI-connected device.

The researchers also discovered country-specific differences when users streamed the free ad-supported TV channel provided by Samsung or LG platforms. Such user activities were uploaded when the TV was operating in the US but not in the UK.

By recording user activity even when it’s coming from connected laptops, smart TVs might capture sensitive data, says Vekaria. For example, it might record if people are browsing for baby products or other personal items.

Customers can opt out of such tracking for Samsung and LG TVs. But the process requires customers to either enable or disable between six and 11 different options in the TV settings.

“This is the sort of privacy-intrusive technology that should require people to opt into sharing their data with clear language explaining exactly what they’re agreeing to, not baked into initial setup agreements that people tend to speed through,” says Thorin Klosowski at the Electronic Frontier Foundation, a digital privacy non-profit based in California.

https://www.newscientist.com/article/2449198-smart-tvs-take-snapshots-of-what-you-watch-multiple-times-per-second/ (paywall!!)

(page 9) 43 comments
sorted by: hot top controversial new old
[–] [email protected] 12 points 2 months ago (7 children)

this is why you get a separate apple tv/android box and not connect your tv to the internet

load more comments (7 replies)
[–] [email protected] 35 points 2 months ago

The only sensible way to operate these TVs is with no internet connection. We run our entertainment through an AppleTV. If that ever starts showing ads at rest, I’ll replace it with a Mac mini or a NUC. Fuck these companies and their race to the bottom.

[–] [email protected] 10 points 2 months ago (4 children)

I’m happy to see this, my wife and I were about to buy a smart TV. Now I’ll just get the dumb variant.

load more comments (4 replies)
[–] [email protected] 31 points 2 months ago* (last edited 2 months ago) (7 children)

I run a pi hole and it blocks 1000 attempts per minute from a single Samsung TV, then it outright denies requests from the tv. Duck those douches.

load more comments (7 replies)
[–] [email protected] 11 points 2 months ago* (last edited 2 months ago) (1 children)

I'd rather pay for pretty much all products up-front with money at purchase time rather than pay with my data.

Not gonna tell other people what to do, but for myself, whether it's my car or television or search engine or whatever, I'd rather just pay the bill rather than having the manufacturer or service provider go data-mining my data to figure out how they can make money from it.

I think that YouTube is a great service. YouTube Premium, though, is ad-free. What I want isn't no-ad stuff, but no-log policies. And there aren't a lot of manufacturers selling privacy. And it's hard to compare services and products based on that.

I'll go one more step. I don't want to go read through privacy policies and figure out what the latest clever loophole is. We had to deal with that kind of legal stuff back prior to standardization around a few open-source licenses, and it sucked.

And I don't want to deal with privacy policies that change and maybe don't do what I want.

What I want to do is look for a privacy certification, and let the certification agency deal with that.

load more comments (1 replies)
[–] [email protected] 8 points 2 months ago (1 children)

So much more goatse and bathtube girl pictures along with porn are now gonna be on my tv

[–] [email protected] -3 points 2 months ago (3 children)

What the fuck are you talking about? Lol

[–] [email protected] 4 points 2 months ago (1 children)

Man wants to watch some kinky shit.

load more comments (1 replies)
load more comments (2 replies)
[–] [email protected] 18 points 2 months ago* (last edited 2 months ago) (1 children)

“When a user connects their laptop via HDMI just to browse stuff on their laptop on a bigger screen by using the TV as a ‘dumb’ display, they are unsuspecting of their activity being screenshotted,”

But if you never connected the TV to the internet, it's not able to upload anything right?

[–] [email protected] 13 points 2 months ago (1 children)
[–] [email protected] 26 points 2 months ago* (last edited 2 months ago) (5 children)

Thing is, it's getting pretty cheap to build radios into devices, and companies are doing that and bridging them to whatever Internet connectivity they can reach, not just your own. You don't necessarily have to personally plug something into an Ethernet socket to make a device Internet-connected.

From back when Amazon Sidewalk was rolling out:

https://www.statuscake.com/blog/what-is-amazon-mesh/

This time, however, the big news is Amazon mesh, a network to connect users and their devices. The tech giants have called this project Amazon Sidewalk+ with the idea first being made public back in 2019 where they announced they wanted to extend and expand the connectivity of their customers.

Why did Amazon do this?

According to Amazon, the main reason was to provide a better service for their customers whilst using their devices. Although there has been some backlash by those in the safety and security space, the idea seems to be very safe and simple. 

How will Amazon mesh work?

The Sidewalk project will create a network mesh between all the connected devices so it can increase the connection field around the devices. It will be able to do this by using Low-energy Bluetooth and 900MHz radio signals to pass data with the connected compatible devices. By doing this, the network can extend the reach of the signal and thus it will be able to cover a larger area to allow devices to connect. 

Here is an example of how this will work: imagine if you have a compatible device at the end of your garden such as a light which you normally can’t control with your phone. With the extended network, that light could connect to a neighbour’s device and by doing this it will be connected to the network, and you will have the ability to then use your phone to control the light.

There has been some concern regarding how much data the network will use for those who agree to be part of it and Amazon have estimated that the data usage could be around 400-500mbps a month. For most people, this is such a small amount that it won’t even be noticeable.

How can the mesh network be used?

Another use for this mesh is for users around the network to connect and possibly use the mesh to perform other tasks such as a Ring doorbell (Amazon-owned) to be installed in the part of the house where the usual Wi-Fi signal doesn’t reach. This provides customers with a great alternative to the far more expensive Wi-Fi extender mesh products on the market.

As is normal in situations like this, many users are concerned about the security of this project. According to what Amazon has released regarding how it will work so far, there will not be any security concerns as the connections will not identify which device was connected meaning that if your Ring doorbell extends the network to a nearby device, the system will not mention that this device was connected to that particular Ring doorbell. However, people need to be aware that Amazon itself can collect this data and the way the users interact with the network.

https://www.theguardian.com/technology/2021/jun/01/amazon-us-customers-given-one-week-to-opt-out-of-mass-wireless-sharing

The feature works by creating a low-bandwidth network using smart home devices such as Amazon Echoes and Ring security cameras. At its simplest, it means that a new Echo can set itself up using a neighbour’s wifi, or a security camera can continue to send motion alerts even if its connection to the internet is disrupted, by piggybacking on the connection of another camera across the street.

But the company’s plans have caused alarm among observers. Ashkan Soltani, a former chief technology officer of the US Federal Trade Commission, told the tech site Ars Technica: “In addition to capturing everyone’s shopping habits (from amazon.com) and their internet activity (as AWS is one of the most dominant web hosting services) … now they are also effectively becoming a global ISP with a flick of a switch, all without even having to lay a single foot of fiber”. The feature may also break the terms and conditions of users’ internet connections, which do not allow such resharing, warned Lydia Leong, an analyst at Gartner.

Users can disable Sidewalk in the settings section of the Alexa or Ring apps, but have until 8 June to do so. After that, if they have taken no action, the network will be turned on and their devices will become “Sidewalk Bridges”.

Amazon is not the first company to look to create such a network. Apple has taken a similar approach with the company’s range of AirTag item trackers, which can connect to the internet through any compatible iPhone they come into contact with, not simply their owner’s. And BT, through a long-term partnership with Fon, ran a service from 2007 until 2020 that allowed broadband customers to share spare bandwidth in a public wifi network.

When you have companies creating their own radio networks, they can use someone else's Internet connection to move data.

For expensive devices, like cars, it also makes economic sense to have a dedicated cell modem and service phoning data home. But it's not the only route.

Point is, you don't have a monopoly over granting your devices Internet access any more.

[–] [email protected] 11 points 2 months ago (1 children)

Cellular modems with lifetime contracts from a telco are also increasingly common.

load more comments (1 replies)
load more comments (4 replies)
[–] [email protected] 35 points 2 months ago

"They found the smart TVs did not appear to upload any screenshots or audio data when streaming from Netflix or other third-party apps, mirroring YouTube content streamed on a separate phone or laptop or when sitting idle. But the smart TVs did upload snapshots when showing broadcasts from the TV antenna or content from an HDMI-connected device."

The world is owned by a big club, and you're not in it.

[–] [email protected] 53 points 2 months ago (11 children)

Something doesn't add up. How can a TV take 100 Screenshots of 4k content per second? No wifi has that bandwidth. No embedded processor has that capacity.

[–] [email protected] 6 points 2 months ago* (last edited 2 months ago)

360p is probably enough. And that's "up to" per second, average is probably far far far less.

[–] [email protected] 4 points 2 months ago

It doesn't say the screenshot must be full resolution and it doesn't say the screenshot is immediately uploaded. A couple seconds to downscale and compress would work the same as far as content identification is concerned

[–] [email protected] 6 points 2 months ago* (last edited 2 months ago)

It may be snapping multiple in a small period of time, everyonce in a while. Compressing them in the background then trickling them back out.

[–] [email protected] 6 points 2 months ago* (last edited 2 months ago)

Probably a data snapshot, not an actual screenshot.

[–] [email protected] 17 points 2 months ago (3 children)
  1. it doesn't necessarily take full resolution images

  2. just because it can capture images a few hundred milliseconds apart doesn't mean it's continuously capturing images. It could be several in short bursts with a delay between groups of images.

load more comments (3 replies)
[–] [email protected] 89 points 2 months ago* (last edited 2 months ago) (2 children)

It doesn't need a 4K screenshot. It needs enough data/metrics from any given single frame to run it through analytics and an algorithm to tailor ads. Backend surveillance like this isn't interested in fidelity to the human viewing experience. It needs identifying data. That can be had through a combination of low quality data scrapes done numerous times.

"Screenshot" is more like a metaphor here. Sort of like how your Apple or Google photos are "private," but the data and analytics taken from them you've given away. It's like if you told me I could look at all the photos on your phone and take as many notes and subject them to as much analysis as I wanted, but I promised not to actually physically keep your phone/photos. Probably makes you feel like your photos are securely still in your possession, but I got what I wanted. Your data is technically private, but my data about your data is mine.

[–] [email protected] 28 points 2 months ago

Totally agree. It sounds like something was lost in translation here by the final edit of potentially some run though a llm for proof reading to dumb it down enough to either just make it more consumable, more clickbait or realistic both.

My guess is the actual research reported that it was 100s of packets per second (not screenshots) which is still a lot more than you would expect even for spyware. Either way it’s been well known that smart tvs are spyware ridden, I don’t need a paywalled service to tell me that.

load more comments (1 replies)
[–] [email protected] 7 points 2 months ago

Plenty of embedded processors have that capacity, but I generally agree about the bandwidth.

[–] [email protected] 8 points 2 months ago (2 children)

I'm with you, I think it's probably BS. But I suppose it could be taking highly compressed low resolution snapshots.

load more comments (2 replies)
[–] [email protected] 3 points 2 months ago

Yea I don't believe it, that's some processor intensive streaming. My security camera feeds can't even do that. 100fps is crazy for streaming. Are we sure these "screenshots" aren't just anonymous metric gatherings like video codecs and resolution?

load more comments (2 replies)
[–] [email protected] 30 points 2 months ago (3 children)

Never connect your tv to the internet.

load more comments (3 replies)
[–] [email protected] 361 points 2 months ago (2 children)

LOL "if it was opt-in, no one would do it!"

no fucking shit. there is nothing worth watching that i would buy a smart tv for

[–] [email protected] 68 points 2 months ago (1 children)

if it was opt-in, no one would do it!

Which should be telling them that not only does no one want it, but maybe just maybe we already paid for your fucking TV. Either raise the price or stop being so fucking goddamn greedy to the point that you force us to make the government force you to stop.

Of course the bought and paid for US government won't, but hopefully EU governments will.

load more comments (1 replies)
[–] [email protected] 118 points 2 months ago* (last edited 2 months ago) (2 children)

One issue that has come up recently in discussions on here is that it's hard to get dumb TVs or computer monitors in large format in 2024.

Not impossible, but surprisingly difficult. I went looking for a large computer monitor for some user who wanted a large one. I eventually found an older one on Amazon still for sale, but it's not that easy to get large computer monitors, which I think is part of what drives people to use smart TVs as computer monitors.

You can get projectors, but that's not what everyone's after.

[–] [email protected] 19 points 2 months ago (1 children)

Smart TVs are only smart when they are connected to the internet.

load more comments (1 replies)
[–] [email protected] 64 points 2 months ago (1 children)

A smart tv without an internet connection is usually close enough to a dumb TV. It's not like your TV needs regular security updates so leaving it off your home network is fine.

load more comments (1 replies)
[–] [email protected] 22 points 2 months ago
[–] [email protected] 79 points 2 months ago (11 children)

Okay. So how do we turn it off!? I’ve read nothing in my Samsung manuals about this “feature” and here no instructions for turning it off.

[–] [email protected] 11 points 2 months ago

If there are open wifi networks near your TV that you can't lockdown, you'll want to confirm it your make/model is known to automatically connect to those, and then take whatever mitigation steps are justified for your own use case.

For example, if you have multiple TVs, maybe you can swap models around based on their capabilities and location, or look up the schematic for the TV and see if it's easy to block it's internal antennas.

Or maybe that seems like too much of a hassle and you just say fuck it, and don't worry about it. Which is always an option, because given how much data already gets sucked up by surveillance capitalism, my evening TV viewing habits have to be some of the lowest value data points, as I already block ads and avoid all ad supported services.

[–] [email protected] 14 points 2 months ago (2 children)

You know that part of the manual that tells you to connect the TV to the Internet?

Don't do that.

load more comments (2 replies)
[–] [email protected] 11 points 2 months ago (2 children)

I love my Samsung because I never gave it the wifi credentials.

Dumb TV is better. My PS5 can do everything I want and I already give all my metrics to them just playing it

load more comments (2 replies)
[–] [email protected] 23 points 2 months ago (7 children)

Use Pi-hole and block their domains

load more comments (7 replies)
[–] [email protected] 12 points 2 months ago (2 children)

I got an LG because despite how it looks, you can just refuse to agree to a bunch of their privacy agreements and be fine. It's not perfect, but it's a hell of a lot better than it would be otherwise, and miles ahead of Samsung's lack of options.

load more comments (2 replies)
[–] [email protected] 17 points 2 months ago (2 children)
load more comments (2 replies)
[–] [email protected] 47 points 2 months ago (1 children)

No Internet for the device

load more comments (1 replies)
[–] [email protected] 119 points 2 months ago (7 children)

Just don't hook it up to your wifi. Don't use any of its included apps. If you must stream get a separate device to do it.

[–] [email protected] 31 points 2 months ago (1 children)

I have a Samsung smart TV that is not connected to any networks, and every few days it will display a 'detecting device' loading screen when switching to my input that fails after 30 seconds or until I cancel it (canceling does not seem to impact its functioning)

I have no evidence but I strongly suspect this to be related to attempting to record and send device data to a remote server.

load more comments (1 replies)
[–] [email protected] 42 points 2 months ago* (last edited 2 months ago) (4 children)

This is the correct answer. I actually disabled LG's version of it when I first heard about it. A few months later it had been reactivated in an update, so I just factory reset it and connected an old laptop.

You can't trust anyone — corporation or government — to protect or respect your privacy. Ever. If it's not open source and E2EE, assume that a criminal is going to view and process it for profit.

load more comments (4 replies)
load more comments (5 replies)
load more comments (2 replies)
load more comments
view more: ‹ prev next ›