Your smart TV might be doing more than just streaming your favorite shows. According to a new investigation by security researchers, some apps available on Samsung televisions have been quietly turning viewers’ home internet connections into proxies for strangers’ online activity.
The findings, detailed by security researcher Harrison Sand at the firm Mnemonic, uncovered residential proxy software embedded in several Samsung smart TV apps. That software allows third parties to route their internet traffic through a user’s home IP address, making it appear as though the traffic originated from that person’s home.
While such residential proxy networks have legitimate commercial uses, they can also be exploited to mask malicious activity online. Researchers warn that users may not fully understand what they’re agreeing to when they accept the apps’ terms.
A ‘Wild’ Discovery in a Pac-Man Game
Among the apps flagged by Mnemonic was a Pac-Man game that Samsung had promoted in its “Editor’s Choice” section. Installing the game didn’t automatically enroll a user’s TV into a proxy network, though. Instead, the app displayed a consent screen asking users to agree to share their internet connection.
According to Mnemonic, many usersâincluding childrenâsimply hit “accept” to get back to the game, unaware that this could allow third-party internet traffic to flow through their home connection.
Earlier research from cybersecurity firm Spur found residential proxy software development kits (SDKs) in more than a quarter of the Samsung smart TV apps it examined. Spur’s research, published over the summer, similarly found such SDKs in more than 42% of apps in LG’s webOS store, prompting LG to crack down on the practice.
Samsung Responds
Following Mnemonic’s report, Samsung told TechCrunch that it has begun restricting the use of residential proxy software on its smart TV platform.
“We have already restricted new app registrations that incorporate such proxy functionalities on our Smart TV platform,” a Samsung spokesperson said. “We are currently implementing strict platform-wide developer policies explicitly banning residential proxy SDKs, and we are working to identify and remove all apps currently available in our store that contain these components.”
The company’s move follows a similar crackdown by LG, which took action after Spur’s findings. Spur’s research had revealed the widespread presence of the SDKs in LG’s app store, according to TechCrunch.
Hundreds of Millions Affected?
Developers behind some of these apps claim their products are already installed on hundreds of millions of smart TVs, according to TechCrunch. That suggests a significant number of households could be unwittingly participating in residential proxy networks.
The discovery highlights the often-opaque nature of smart TV app permissions. While consent screens are meant to inform users, researchers argue that many people accept them without understanding the implicationsâespecially children who just want to play a game.
Samsung has not disclosed exactly how many apps will be removed or how quickly the new policies will take effect. The company has said it is working to identify and eliminate all apps currently in its store that contain the offending components.
For now, the advice from security researchers is straightforward: read those consent screens carefullyâeven on your TV.
Source: www.dailywire.com â https://www.dailywire.com/news/your-smart-tv-has-been-keeping-a-pretty-wild-secret