An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then upload data once reconnected to the internet.
IIRC the user marketing data exfiltration method pioneered by Samsung several years ago involves a form of Bluetooth P2P/mesh networking whereby a TV with no internet connection can handshake with, for example, a neighbor’s TV which does have internet enabled or, if they’re just as tinfoil as you and disabled their internet, your data and theirs could simply be relayed to another neighbor’s TV on a different floor, etc etc
Yes, quite clever. No iron ring for the engineer, but I’m sure they were briefly proud of themselves.
That’s a good question re: gdpr. Regional activation of those modules in FW revision is certainly possible. But my guess is that the difference relates to the payload contents and whether or which PII is permitted by any particular local laws, since I expect that would maximize profits.
IIRC the user marketing data exfiltration method pioneered by Samsung several years ago involves a form of Bluetooth P2P/mesh networking whereby a TV with no internet connection can handshake with, for example, a neighbor’s TV which does have internet enabled or, if they’re just as tinfoil as you and disabled their internet, your data and theirs could simply be relayed to another neighbor’s TV on a different floor, etc etc
You’ve got to admire it on one level.
Hopefully they’re too scared of the GDPR to try that shit here.
Yes, quite clever. No iron ring for the engineer, but I’m sure they were briefly proud of themselves.
That’s a good question re: gdpr. Regional activation of those modules in FW revision is certainly possible. But my guess is that the difference relates to the payload contents and whether or which PII is permitted by any particular local laws, since I expect that would maximize profits.