RU version is available. Content is displayed in original English for accuracy.
Advertisement
Advertisement
⚡ Community Insights
Discussion Sentiment
69% Positive
Analyzed from 3128 words in the discussion.
Trending Topics
#tvs#data#device#audio#don#internet#acr#used#more#default
Discussion (79 Comments)Read Original on HackerNews
> ACR uses audio fingerprinting technology using the TV’s internal audio processor (not a speaker) to identify content and does not collect screenshots, screen recordings, video recordings, voice recordings, or other audio recordings from the TV.
So they are claiming that ACR is done entirely through audio processing, and no visual data from the screen itself is used? That...doesn't seem plausible.
This paper from 2024 investigated both Samsung and LG and found that they both capture screen images for ACR, and send the resulting hash (not the raw content) back to the manufacturer for identification.
https://arxiv.org/html/2409.06203v1
We're going to have to get saavy in pulling apart the distinction between "I look at everything and then send a nice summary back to my manufacturer" and "I send everything back to my manufacturer". As AI gets cheaper and more efficient, it'll be baked into everything, and will distill signal at the edge and send the good bits back to central command. I fear the legalese in the ToS will obscure this new way of "not collecting" user information.
It's probably easier to do and every bit as accurate as just using a screenshot.
And it's still exactly what I don't want them doing. There's literally zero reason for LG to be building an advertising profile on me because I was foolish enough to buy one of their TVs. This isn't something that makes their products better, it's spying.
Here's how it's been done in the past
https://www.cameronmacleod.com/blog/how-does-shazam-work
Audio is a bit easier to turn into a fingerprint for identification vs video. Video has a lot of smaller subtle changes that happen from things like compression which make it a lot harder to identify. It's why youtube still hasn't figured out piracy, but they'll knock you immediately if you play 5 seconds of copyrighted music.
so they aren't even denying listening in on everything?
As per HN thread last week
The majority of the problem is also simply the ability to record. Putting a remote control listening hardware on a device that runs a plethora of 3rd party apps and with full connection to the internet means that even if LG isn't controlling that mic, someone else will be.
How many other household devices have a microphone whose primary function is orthogonal to recording audio?
Microphones in tvs are a useful accessibility feature when they enable voice commands for the user, and allow them to be used as voice assistants.
They also enable tvs with a camera and microphone to be used as video calling or audio calling interfaces. Used well we get star Trek view screens, used poorly we get little brother monitoring.
For those interested, it turns the tv into an interactive terminal for voice and camera powered video games, which are becoming more popular.
Unfortunately advertising and tracking incentives drive the abuse cases to the top and will crush the positive use cases :(
Made nearly moot by the presence of microphones in most (all?) modern remotes.
I say nearly moot because its worth noting the ability to operate a physical remote may itself be prohibitive to some.
So in effect, there are a multitude microphones in a modern LG environment.
Some "smart" TVs could do skype in the past, I'm not sure if they needed external headsets of worked with builtin mikes.
So, was realme transcribing all conversations and uploading it? Can someone answer?
For example, let's say an ad network knows your and your friends' location, and knows you've met because you've been close together frequently, or are using the same wifi network. You talk about perfumes, then later one of them looks up perfumes on their phone. Google would usually have access to this much metadata, and will likely serve you perfume ads because of your friend who later looked it up.
This doesn't directly answer your question though. The answer would be - it's possible, but a lot is possible without that.
[1] https://archive.is/OyuUO
I am absolutely certain that ACR was enabled on our new TV by default, back some years ago. I am nearly certain their voice recognition, and advertising spying were enabled on our TV by default.
If none of this is truly "enabled by default" then this is a recent development.
I discovered this many years ago and did some deep dives, and unfortunately didn't publish anything about it. Lesson learned.
Sure, to use the TV you need to go past the EULA screen. And the button right in front of you, pre-selected - is agree to all terms. And after pressing OK, you now have ACR turned on. But you did that, it wasn't on by default.
Okay I can take my soul sucking corporate hat off now.
Its looks like the sort of stuff that happens to a tragic fantasy hero after a Faustian deal. Except they would've asked for riches, love or eternal youth, we on the other hand just want our middling-quality tv to work.
They at least use a pattern where you need to accept terms of use & privacy policy when you download an app. Same screen has option to accept other agreements like ACR. However by default "select all" option is highlighted so people will often click that.
Slightly earlier on video they state that certain ad related things got turned on automatically during software updates.
source: i made it up
Also they provided a statement earlier to Gizmodo: https://news.ycombinator.com/item?id=49628328
Kentucky passed HB 692 unanimously requiring smart TVs to ask permission if they are going to be spying on us. Ask your state legislature to follow their lead and pass some very popular consumer privacy protection.
LG is truly an adversial party in all of this.
It’s basically stealing.
Would you want some device connecting to your network that is not under your control?
And before you answer “well, you should lock it down,” yes, that’s true, but we do not blame the victim if they fail.
A TV not on the Internet is basically worthless these days, unless you have a third-party streaming device like a Fire or Shield--and then you're just moving the trust point from the TV itself to the streaming device, and the same concerns exist. Do you trust Amazon any more than you trust LG?
We use a Kubuntu Linux laptop behind the TV with a wireless mouse and keyboard (for searching and stuff), stream in Chrome, works great. And yes, we trust this combination.
> Do you trust Amazon any more than you trust LG?
We don't use Amazon device products just because we use Kubuntu Linux on PC's in our home but yes based on LG's behavior we trust Amazon more and we don't put our LG TV or any of our LG appliances we bought a few years ago, on the Internet.
That's exactly the sort of thing I could see LG piggy backing on. Your neighbor might have spectrum so the LG TV connects to it's private network to phone home.
If you live in a dense city, there's a good chance you can reach an open network. When I lived in midtown Manhattan, there were around 500 SSIDs reachable from my apartment.
Forgot to mention - there were no improvements whatsoever in terms of functionality.
from: https://web.archive.org/web/20201201175708/http://blog.ptsec...
Highly efficient" is 25mW at 33MHz. According to the Wikipedia page, it can run even when the PC is off but plugged in or connected to battery. an ARM Cortex M0-4 will use even less power in idle. All it needs is a tiny capacitor and bootrom and a secret flash storage to record audio and upload it once internet becomes available
"The Intel Management Engine always runs as long as the motherboard is receiving power, even when the computer is turned off. This issue can be mitigated with the deployment of a hardware device which is able to disconnect all connections to mains power as well as all internal forms of energy storage. The Electronic Frontier Foundation and some security researchers have voiced concern that the Management Engine is a backdoor.
Intel's main competitor, AMD, has incorporated the equivalent AMD Secure Technology (formally called Platform Security Processor) in virtually all of its post-2013 CPUs."
https://en.wikipedia.org/wiki/Intel_Management_Engine
There are countless low or passive power audio devices since the Thing that can record and upload/bounce audio to receiveing devices: https://en.wikipedia.org/wiki/The_Thing_(listening_device)
OLED productions costs have fallen, and the yields have gotten better — displays of all kinds have gotten cheaper, not just TVs; OLEDs have started showing up in products they haven’t before for cost reasons, etc.
The manufacturers make some profit on the data they harvest, sure; but the biggest BOM costs of TVs have definitely also dropped sharply.
Companies like Vizio make vastly more on the ads and data than they do on the tvs.
Some quarters they even take a loss. They took a $7m bath on hardware while booking about $120m on ads and data.
We’re never getting good tv’s back. It’s only going to get worse. Now they’re starting in on monitors.
The only lifeline would be consumer protection, which obviously won’t happen in the US.
When they spend 400 on a tv and sell it for 410 and sell the data for 40 it doesn’t mean the data makes 4 times as much as the tv. The cost of gathering that data is still 400, they have nothing to sell without spending 409 in the hardware.
Unless this stuff is made literally illegal they will keep doing it, because it's far more profitable than the alternatives. This is precisely why ideas like paying for a privacy respecting option on Facebook could never work.
Connect your own devices and smarts to it.
A broader issue is that it does any kind of recording, or screen capture, or hashing, ever, even for a millisecond in a way that is not controlled by settings.
A tiny crack in LG tvs can be an attack vector for security and safety.
It’s likely an unadvertised function only for the benefit and leverage of LG and may be buried in signing your life away to use their “smart” tv functions as well.
A brand is a promise of an experience. This brand has broken a promise and it can’t be pretending it didn’t.
Trust broken, words out, and their statement doesn’t really do anything to mending that.
From their statement. This entire thing is contradictory. You cannot both say "not converted to text, stored, or transmitted", while at the same time saying the results may be generated and stored in the form of logs.
We need to hold companies responsible for this shit.
Every day I want to keep tech more fenced and far from me and only use it for what I need.
We should have laws that limit this kinda of “agreements”
It's insane that something you purchase can force a post purchase EULA before it can do anything.
Imagine buying a shirt but there's a 10 page EULA that says you agree to arbitration as soon as you break the seal. Or a blender, or an oven, or a refrigerator.
A lot of the "smart" electronics are in fact just that, they are sneaking in EULAs to use an app to connect to the device which robs you of your rights and protections as a consumer "Oh, the law says we have to give a 10 year warranty, but unfortunately you installed our app to work with your device which says you agree to forgo the warranty and pay us for the right to sue".