Quantcast

Privacy settings not enough to stop LG Smart TV from spying on users

Discussion in 'LG Internet TV' started by sparkyscott21, Nov 21, 2013.

  1. sparkyscott21

    sparkyscott21 Moderator Staff Member

    Joined:
    Nov 4, 2010
    Messages:
    7,280
    Likes Received:
    103
    Trophy Points:
    63
    Location:
    Northern Mich.
    [​IMG]




    An LG Smart TV owner in the United Kingdom has shockingly discovered that his device is sending unencrypted data over Wi-Fi containing TV watching habits, as well as file names from external storage units hooked up to the TV to an LG website, even though the TV’s privacy settings should have prevented such behavior. The Smart TV model in question is the LG 42LN572V that was manufactured in May 2013.

    The Smart TV has an option of collecting watching information from users, although TV owners are able to turn it off from the Option menu. Even so, the unnamed TV owner – identified as DoctorBeet on his blog– found that the TV was sending the information to anLG web address (GB.smartshare.lgtvsdp.com), which is currently offline, returning 404 errors when accessed. Even though it looks like LG is not collecting the data at this time, such a “feature” could always be enabled, at which point the company would receive information every time the channel is changed and even get access to file names on USB dongles or external hard drives, although file names have not been always sent to that specific URL in DoctorBeet’s tests.




    [​IMG]




    Such data could then be used for advertising purposes. DoctorBeet found a corporate video that explains LG’s Smart Ad feature that’s included in various LG products. “LG Smart Ad analyses users favorite programs, online behavior, search keywords and other information to offer relevant ads to target audiences,” the video says, further describing the kind of relevant, personalized ads that LG could deliver to TV owners.

    However, in addition to using the data for advertising purposes, LG could also get a glimpse to what users are doing with their Smart TVs, especially when it comes to the kind of files they play on their devices from other storage units. Furthermore, since the data is not transmitted over an encrypted connection, it would be vulnerable to prying eyes.





    [​IMG]




    It is not clear at this time whether this is a widespread issue for LG Smart TVs, or whether this was an isolated incident, but LG’s Smart Ad video promotion lists many other LG devices as capable of delivering such ads, including Smart TVs, Blu-ray players and even smart refrigerators. When contacted, LG UK basically told DoctorBeet that he has “unfortunately accepted the Terms and Conditions” on his TVs, and that nothing can be really be done. In response, DoctorBeet blocked access on his home Wi-Fi router to the web sites his Internet-connected TV could send information to, although that’s not something all Smart TV owners would know how to do.





    11-21-13

    bgr.com
     
  2. Fomol620

    Fomol620 Active Member

    Joined:
    Sep 12, 2012
    Messages:
    298
    Likes Received:
    33
    Trophy Points:
    28
    if im not mistaken, LG is going to release a firmware update in the near future so that when the setting is off, its actually off.

    personally i wouldnt mind, it makes then provide a better service.
     
  3. Carlszone

    Carlszone Well-Known Member

    Joined:
    Jan 19, 2012
    Messages:
    1,133
    Likes Received:
    182
    Trophy Points:
    63
    Location:
    Norfolk Va
    Hi Fomol620

    Normally I'd agree w/ya. But according to the customer complaint this was specific info being intercepted, and not just anonymous usage info that most of us would usually agree to. The info contained not only LG usage but also sent info from the USB drive. This exploit made vulnerable the names of family members, even their children's names. Hell, how can yer home movie collection help LG provide better service? Also, the packages were being sent back to LG servers unencrypted to what is essentially a garbage file. Evidence of excess data being dumped or a means to cover their tracks and offer deniability?

    Not that I think the complainant was yer average Joe. There was too much specific knowledge of what to look for and how. Which makes me think that either LG was blatantly violating privacy laws or there was some hacking involved.

    We'll see...

    Carl
     
  4. Fomol620

    Fomol620 Active Member

    Joined:
    Sep 12, 2012
    Messages:
    298
    Likes Received:
    33
    Trophy Points:
    28
    lets say that LG wanted to inmplement a metadata gathering service....so you insert a USB with Avatar on it, and the service would gather meta data from the internet so as to show you some info about whatever movie you are watching Via USB.....imagine something like what Plex does but on the fly. it would be really cool if LG could see what my USB had so that the TV could show me info about it.

    i do agree that when turning that function off, it should be off.

    also, there was a software update for all LG TV's for the setting to be off when off is selected. so its been resolved
     
    • Like Like x 2

Share This Page