LG Smart TVs Caught Snooping on Users

LG smart TVs have been found to log audio and snoop on local devices even when the screen is off, according to a recent investigation. The TVs can capture microphone audio while in standby mode and continue to save voice input locally even when disconnected from the internet.

The investigation revealed that LG smart TVs continuously sweep home networks and map secondary devices, gathering internal IP addresses, names, and signal strengths of neighboring Wi-Fi networks, and location data. This data collection is fed into LG Ad Solutions, the company's targeted advertising arm, which claims to have access to 363 million secondary addressable devices in the US alone.

The TVs run Automated Content Recognition (ACR), which samples on-screen audio and video into digital fingerprints to log what users watch across inputs. However, the data collection goes much further than just ACR, with the TVs able to capture clean microphone audio while the screen is powered down in standby mode.

Researchers have also documented remote code execution vulnerabilities in the TV's webOS, which are currently moving through the responsible disclosure process. The vulnerabilities are particularly concerning given the TV's use of broad network listeners.

## What it means The discovery of LG smart TVs snooping on users has significant implications for consumer privacy. With LG claiming to have roughly 216 million smart TV sales globally, the potential for data collection is vast. The fact that the TVs can continue to save voice input locally and upload stored files once network access is restored raises concerns about the security of user data.

The investigation highlights the need for consumers to be aware of the potential risks associated with smart devices and to take steps to protect their privacy. As the use of smart devices continues to grow, it is essential that manufacturers prioritize user privacy and security.

## Why it matters The discovery of LG smart TVs snooping on users is a reminder that smart devices can pose significant risks to consumer privacy. The use of ACR and other data collection methods can provide valuable insights for advertisers, but it also raises concerns about the potential for misuse of user data. As the internet of things (IoT) continues to expand, it is essential that manufacturers prioritize user privacy and security to prevent similar incidents in the future.