LG smart TVs may scan your network and record audio even when screen is off, report says
Researchers have found that a vulnerability could allow some LG smart TVs to capture microphone audio even when the screen is off.
LG smart TVs are reportedly scanning home networks to identify other connected devices. According to a new investigation by Gamers Nexus, Level1Techs and independent security researchers, the TVs are allegedly collecting information about devices connected to the same network and, in some cases, even capturing microphone audio when the screen is off.
Update: Statement of LG to India Today Tech. "The claims made in the recently published video are not true. LG TVs process voice data only when the voice button on the remote control is pressed and held, or when a wake word such as 'Hi LG' is recognized after the user has activated the Far-Field voice recognition feature.
Other than these instances, the TVs do not collect or record ambient conversations. (If the wake word is not recognized, no voice data is transmitted to the server; the audio processing for wake word detection is performed locally on the device and is immediately deleted.)
Additionally, to provide smart TV functionalities, LG TVs feature the ability to scan for and connect to nearby devices on the same network. This is a standard function commonly provided by smart TVs and smart home devices."
The ACR (Automatic Content Recognition) feature is provided on an opt-in basis to deliver personalized content recommendation, services, and advertisements. If a user does not consent to the applicable optional agreement, ACR data is not used for advertising purposes.
During the investigation, researchers examined several LG TV models and found that the TVs could detect other devices connected to the same home Wi-Fi network, including phones, computers, printers and smart-home devices. Researchers claimed that LG TVs could also collect information about these devices, giving them an idea of what other gadgets are connected in a home.
The researchers also found that the TVs could collect details about nearby Wi-Fi networks, such as their names and signal strength. When this information is combined with viewing data collected through ACR (Automated Content Recognition) and advertising IDs, it could give LG a clearer picture of a household, including what people watch and what devices they use.
What is ACR?
A major part of the investigation looked at Automated Content Recognition, or ACR, a feature used by smart TVs to understand what is playing on the screen. It can identify programmes, ads and other content that people watch.
The investigation suggests that LG may use this viewing information along with advertising IDs and information about connected devices and networks.
The investigation also looked at LG's advertising business and how information from connected TV households can be used to help advertisers reach people across different devices.
Can an LG TV really listen when it is off?
While the investigation does not say that LG TVs are routinely listening to users, researchers demonstrated that a vulnerability could allow a compromised LG TV to capture audio through its microphone even when the TV appeared to be switched off or in standby. They also showed that the TV could store the audio without an internet connection and retrieve it once the connection was restored. However, do note that this vulnerability was demonstrated on a compromised TV and does not mean that every LG TV is recording conversations while switched off.
Researchers also reported remote-code-execution vulnerabilities to LG. The full technical details have not been released. But the researchers warn that if a TV were compromised, these vulnerabilities could potentially give an attacker access to audio, a way into the home network or the ability to access other connected devices.
What LG TV owners can do
To protect their privacy, users are advised to check their TV's privacy settings and switch off features they do not need, such as ACR, viewing-information collection, personalised advertising and voice recognition. Additionally, users can also review optional privacy permissions, use a separate guest or IoT network for their smart TVs, and disable UPnP on the router unless it is needed.