An investigation reveals LG TVs can capture audio and scan networks even when off, raising privacy and security concerns.
LG TVs May Record Audio Even When Off
A recent investigation by Gamers Nexus has revealed that LG televisions can capture audio and scan home Wi-Fi networks, even when they appear to be powered off. The inquiry, which involved over 500 hours of research and cost around $70,000, raises serious privacy concerns regarding smart TV technology.
Collaborating with hardware reviewer Level1Techs and independent security experts, the team discovered that LG's TVs utilize Universal Plug and Play (UPnP) to identify all devices connected to a household's network. In one notable experiment, they extracted clear audio from a TV that was not only off but also unplugged from the internet.
Despite LG's claims that its TVs do not record ambient conversations, the investigation found evidence to the contrary. The Automatic Content Recognition (ACR) software, which is designed to track viewing habits, remained active even when the TVs were merely functioning as HDMI monitors. Furthermore, the researchers found that muting the main microphone did not prevent the collection of audio from a hidden microphone, leading to questions about the effectiveness of the mute feature.
In a separate test, researchers noted that after leaving the TV unplugged from Ethernet, it uploaded stored audio once reconnected, capturing conversations from up to 60 feet away. This indicates that voice commands are logged and stored, raising significant privacy issues.
Security Vulnerabilities Uncovered
In addition to the audio concerns, the investigation unveiled serious security vulnerabilities. Researchers found remote-code execution flaws that could allow an attacker to control the TV remotely. LG has been asked to address these vulnerabilities but has not yet provided a comprehensive solution. Furthermore, a significant number of apps in LG's webOS store were found to contain residential-proxy code, which reroutes internet traffic from other users through the TV owner's connection.
LG's agreements regarding its televisions are extensive, exceeding 30,000 words, and include a newly added forced-arbitration clause that limits users' legal recourse. This follows a settlement in May with Texas regulators, requiring LG to obtain consent before collecting viewing data. However, the default settings still favor data collection, as the opt-out feature remains disabled until users connect to the internet.
The findings from Gamers Nexus echo broader concerns in the tech industry where convenience often supersedes privacy. The company is currently raising funds for further investigations into other smart TV brands, including Samsung and Vizio, while legal actions against several manufacturers continue in Texas courts.
