An investigation into LG smart TVs and their webOS operating system has highlighted the amount of information these devices can collect about their environment.
The analysis, conducted by cybersecurity researchers together with Gamers Nexus, detected features capable of analyzing the local network, identifying other connected devices, and collecting information about the content displayed on the screen and certain voice interactions.
The finding is particularly relevant due to the implementation of the Korean company's Smart TVs. LG Ad Solutions, LG's advertising division, claims that its technology reaches 216 million smart TVs worldwide. These devices can also be found in homes, hotels, hospitals, or meeting rooms.
Researchers used Wireshark to examine the network traffic generated by the brand's televisions. During the tests, they observed that the devices performed sweeps of the local network and could identify other equipment connected to it.
In one of the analyzed cases, the LG TV detected 38 devices, including mobile phones, smartwatches, a 3D printer, an air purifier, thermostats, and a development board. Among the data that researchers claim to have identified are IP addresses, information about nearby WiFi networks, and data related to other devices present on the network.
The researchers emphasize that many of these capabilities seem to be integrated into the operation of the Smart TV itself and not a consequence of a specific vulnerability. That is, they would be something that has been deliberately included.
Another element analyzed is the Automatic Content Recognition system, known as ACR. This technology allows identifying what content is being played on the TV, including programs, movies, ads, or video games, with the aim of obtaining information about audiovisual consumption habits.
According to the tests collected by the investigation, an analyzed TV sent around 4 GB of data monthly related to ACR to LG. LG Ad…