Researchers from Gamers Nexus and Level1Techs have uncovered intrusive data collection practices within LG smart televisions. The investigation reveals that these devices map local networks and record audio while in standby mode.
Mapping your home through webOS network scans
LG smart TVs use the webOS operating system to perform active sweeps of a user's local area network. As reported by Gamers Nexus and Level1Techs, these scans go far beyond the television's own connection, identifying the presence of secondary devices such as smartphones and smartwatches. By mapping these hardware identifiers,the television creates a detailed profile of the digital ecosystem within a household.
This practice mirrors a broader trend in the Internet of Things (IoT) industry, where devices increasingly seek to understand the full context of a user's environment to maximize data value. For the average consumer, this means their television is not just a screen, but a sensor capable of cataloging the various connected technologies present in their living room.
Feeding the LG Ad Solutions data engine
The information gathered during these network sweeps is not merely stored locally but is transmitted to LG Ad Solutions. This division of the company uses the data—which includes the names and signal strengths of neighboring Wi-Fi networks and precise location information—to refine its advertising capabilities. The investigation suggests that this data stream provides LG with deep insights into how users interact with their connected devices.
This movement of information suggests that LG is leveraging the television as a sensor to feed its advertising division with granular user behavior data. This reflects a growing trend where consumer electronics serve as data collection nodes for targeted marketing, often without the explicit realization of the end user.
The standby microphone and the failure of opt-out toggles
One of the most alarming revelations involves the television's activity during standby mode. The research conducted by Gamers Nexus suggests that LG smart TVs may be logging microphone audio even when the device appears to be powered down . This behavior is compounded by the apparent failure of user privacy controls.
While LG provides an interface for users to opt out of such data collection services, the report indicates that data continues to be uploaded even when these settings are adjusted.. This finding casts significant doubt on the efficacy of the company's privacy promises and the actual control users have over their own hardware.
Critical remote-code-execution vulnerabilities in LG firmware
Beyond privacy concerns, the investigation also uncovered significant technical risks in the form of remote-code-execution vulnerabilities within the webOS firmware. These security flaws could potentially allow unauthorized actors to take control of the device remotely, turning a television into a gateway for broader network attacks.
While these vulnerabilities are currently undergoing a process of responsible disclosure to the manufacturer, the immediate recommendation from researchers is for users to disconnect their LG televisions from the internet entirely and utilize external streaming devices to maintain security.
Will LG address the ineffective opt-out claims?
As the industrry reacts to these findings, several critical questions remain unanswered. It is currently unknown whether LG Ad Solutions will change its data ingestion policies in response to the Gamers Nexus report, or if the reported "ineffective" opt-out toggles are a result of software bugs or intentional design. Additionally,the full extent of the remote-code-execution vulnerabilities remains unverified until LG releases a formal response and a comprehensive patch for all affected webOS versions.
Comments 0