cross-posted from: https://lemmy.world/post/51634640
A new Gamers Nexus investigation found a retail LG TV actively scanning the local network for phones, laptops, smartwatches and other connected devices, while also capturing microphone audio when the screen appeared to be in standby. The investigation found voice data being stored locally even after the TV was disconnected from the network, with the queued data uploaded once connectivity returned. Researchers also uncovered webOS vulnerabilities that could potentially turn the television into a remotely controlled surveillance device. The really unsettling part isn’t just the advertising angle. It’s the fact that a consumer television can sit inside your trusted network, enumerate other devices, access a microphone, store collected data locally and communicate with external infrastructure. Put that same device in a corporate office, hospital, hotel or conference room and the security implications become considerably more serious. I went through the investigation in detail, including the network scanning, microphone behavior, ACR, webOS attack surface, offline data collection and practical mitigations
Bosch fucking dishwashers do this, once connected there is no way to disconnect them so I sink all its outgoing traffick at the router level
Complete garbage
Yeah, what kind of idiot wants an internet-connected dishwasher?
How about an AI-powered pair of chopsticks?
In a perfect world?
I’d love access to diagnostic data. Is the filter starting to clog? Is any part not working as intended? I’m a big fan of preventative maintenance, but also really bad at sticking to an arbitrary recurring schedule (e.g., clean the filter every 6 months). This could also be accomplished with Bluetooth and an offline-only app on the phone.
In the real world? Nobody provides this, and the privacy risks aren’t worth it.
I do have my dishwasher on a ZigBee power meter to 1) track energy use and 2) give me a good-enough estimate of time remaining by starting a 2h timer after it starts.
You CAN do this with a few products of diff companies with the help of home assistant and plugins BUT many companies are pulling off support OR restricting features to its own app and giving free access to the bare minimum voa protocols like matter and all. I read somewhere on reddit that a robovac company had matter access technically but only the vac on off switch access was there and none of the other basic functions. For that you need their app. But again, still some companies do support all it’s features on home assistant. Many light fixtures, switches, ACs and much more support it. So yes you can run them locally BUT it all depends on the manufacturer how much control they are willing to provide openly
But WHY! If those diags are important, then just put them in the local display of the machine itself.
That costs money.
exactly! it’s so useless they had to hide regular features under the wifi connection to force customer’s hand
Why would you connect a dishwasher to the internet? Setting a timer can tell you just as well if the dishes are clean.
Sadly, the only way to change most of the settings or running a cleaning cycle is via the app. It’s insane.
No way in hell id buy that. Soon as the app is dead so is your dishwasher, at the whim of the manufacturer
Planned obsolescence is great isn’t it. /s I try to keep my appliances on life support as long as I can.
Mh. What about… creating a guest network, connecting that abomination to that and deleting the guest network? Hopefully it can remember only one…
Why wouldn’t a company this dedicated to advertising just install a cheap cell network modem in them? You’re talking pennies on a device that costs hundreds of dollars.
While this is possible, ongoing network costs are involved with that. Also, hard to hide a cell network modem.
Not so sure if that is done when many people connect their device to their WiFi anyway, if they are forced to because some settings can be changed only with the app?
My TV is wired to the router but blocked from WAN access.
Only connected to the internet to install jellyfin on it.