WTF?! An investigation by YouTube channel Gamers Nexus has found that LG's smart OLED TVs track users' viewing patterns across streaming platforms, cable, and local media. The televisions also reportedly scan users' home Wi-Fi network, collect information about connected devices without permission, and transmit the data to LG Ad Solutions to push targeted advertising.
The investigators found that LG was using Automatic Content Recognition (ACR) technology to track not only users' viewing habits but also any content played through the TVs' HDMI, USB, RJ45, optical, RCA, and coaxial ports. However, using ACR to track content is not just a problem limited to LG but an industry-wide practice used by almost all major smart TV manufacturers globally.
The investigation, which was conducted in collaboration with fellow tech YouTubers Level1Tech and multiple independent security researchers, also found that the TVs have a major security loophole that can be used by hackers and other malicious actors to surreptitiously record audio through the built-in microphone, even when the device is switched off.
Alarmingly, unplugging the TV from the power socket and shutting off the internet don't automatically delete the recordings or prevent the data from being transmitted. According to the researchers, the recorded audio files can be safely stored on the TVs' local storage and sent to third-party servers once it's powered on and reconnected to the internet.
As if the risk of hacking and unauthorized data harvesting aren't troubling enough, the researchers also found the TVs harbor critical remote-code-execution vulnerabilities that could potentially be exploited to steal user data. The report did not reveal details about the RCEs as the researchers are still in the process of reporting them to LG in accordance with industry practices.
It is worth noting that this is not the first time Gamers Nexus has called out LG for unsavory business practices. Earlier this year, the channel reported that several popular LG monitors were automatically installing a sketchy Windows app without permission. The monitors were also reportedly collecting user data and displaying pop-up ads for McAfee antivirus and other software.
Microsoft's executive VP of Windows and Devices, Pavan Davuluri, later confirmed that Redmond had to intervene and force LG to remove the controversial app from the Windows Store after a massive outcry from users complaining about the pop-up ads and automatic app installations.
LG has since denied most of the claims. In a statement to Tom's Hardware, it said:
The claims made in the recently published video are not true. LG TVs process voice data only when the voice button on the remote control is pressed and held, or when a wake word such as 'Hi LG' is recognized after the user has activated the Far-Field voice recognition feature. Other than these instances, the TVs do not collect or record ambient conversations. (If the wake word is not recognized, no voice data is transmitted to the server; the audio processing for wake word detection is performed locally on the device and is immediately deleted.)
Additionally, to provide smart TV functionalities, LG TVs feature the ability to scan for and connect to nearby devices on the same network. This is a standard function commonly provided by smart TVs and smart home devices.