RESOLVING THE LEDGER
This is one outlet's own report from ZDNet — the article as it was filed. Other outlets are covering the same event; open the full story to compare every source side by side.
See the full story · 1 sources
Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways LG is cracking down on apps that quietly turn smart TVs into residential proxies. Your device could be routing residential traffic without your explicit consent. Research shows the problem might be more widespread than we realized. Do you own a smart TV? One of your apps could be serving as a relay for someone else's internet traffic.Now, tech giant LG has pledged to stop app developers that are quietly using customer TVs as residential proxies, and plans to suspend apps that fail to comply. The decision, as reported by KrebsOnSecurity, stems from cybersecurity firm Spur's finding that nearly half of LG apps available to consumers were laced with proxy code.Also: How to disable ACR on your TV (and why it makes such a big difference when you do)The problem is not limited to LG; Samsung's Tizen operating system is also being targeted by proxy app developers. What is a proxy?Proxies are legal and can offer real benefits. Proxies act as internet gateways and can be used to redirect traffic, change your IP address, bypass geolocation blocks for streaming, and access web content. In business, proxies can be used for data collection and research. However, in the wrong hands, they can be abused. For example, residential proxies can be rented to make traffic appear to originate from a home address, and they can be used for commercial scraping, scalping, or hiding malicious activity behind a home IP address.Why are proxies a problem on my smart TV?While smart TVs offer complex functionality, an operating system, and the option to download third-party software, they don't receive the same level of attention to privacy and security as our PCs or mobile devices do. The core reason a residential proxy might quietly end up on your TV? Money. It's obvious when a malicious app is bombarding you with ads to generate illicit revenue based on your attention, but a proxy node working in the background is far more likely to escape your notice. Also: Connecting my TV to a router VPN was one of my smartest home network upgradesYou might, for example, accept the terms and conditions of a smart TV app that will happily run for you without ads. However, you have to allow a residential proxy SDK to run, phrased as permission for the app to "use your IP address and free resources" -- even when the app is closed. Once you've accepted these terms (and promptly forgotten about them), the developer has gained another residential node they can profit from. Add your TV's typical always-on connectivity, and it's a lucrative business model. It's not just about your device's security, either. If a proxy provider's filters or security fails, your smart TV -- a node in the proxy system -- could end up being tied to and serving botnets, which route malicious traffic generated from thousands of devices to disrupt online services and systems. What did Spur find?The cybersecurity firm examined 6,038 smart TV apps across LG's webOS and Samsung's Tizen platforms. In total, 2,058 were "selling your IP address," the researchers said, with residential proxy SDKs hidden in apps ranging from TV utilities to games and screensavers. Of the LG apps investigated during the research, 42.5% contained residential proxy functionality. In total, 26.5% of Samsung Tizen apps hid the same functions.Also: I made my TV sound dramatically better without buying a soundbar - 7 cheap and easy ways"The problem is not that residential proxy networks exist. It is that they are being embedded at scale in devices that most consumers do not think of as computers and are not equipped to audit," the researchers said. "A one-time consent prompt buried in a TV app is not a substitute for meaningful transparency, ongoing control, and platform oversight."LG's responseSpeaking to KrebsOnSecurity, LG senior vice president John Taylor said the company was actively working with TV app developers to crack down on the problem, and that residential proxy options will be removed from any app available for LG TV models; the review is "well underway."If app developers do not respond or if they fail to comply, their apps will be suspended. Also: LG's decision to drop 8K TVs makes an uncomfortable point about TV tech"A residential proxy network is not an intended use for LG smart TVs, and LG Electronics is working with developers to remove the residential proxy option from their apps on the webOS platform," Taylor told the publication.Going forward, LG plans to improve its smart TV app vetting process, including for those that incorporate SDKs for residential proxy functionality. How do I know if my smart TV has a secret proxy?The problem, as Spur argues, is not that these apps with residential proxy functionality exist, but that they are being downloaded and installed on a massive scale. Finding out whether you're affected isn't simple or straightforward, but these tips can help:Delete unwanted apps: If you spontaneously downloaded apps that don't have any real value -- screensavers, simple games, or utilities -- consider deleting them.Audit remaining apps: Do you remember an app asking you to accept specific terms in return for ad-free use? It might be a proxy setup. Review any remaining apps on your smart TV to see if there is any evidence of residential proxy demands. Check your TV settings: Go to your TV's settings, and pay particular attention to diagnostics and data usage. Check for anything unexpected, such as proxy changes or port usage. Set them to empty. Review data-sharing policies: Disable any data-sharing options in your TV's settings. This is a good practice anyway to reduce the volume of data that TV manufacturers and app developers can collect about you.
AIPROPX is an independent multi-source news index — we track, compare, and connect coverage from across the web into one place you won't find anywhere else.