LG TVs scan local networks even when turned off, concerns for user privacy

LG smart TVs are at the center of a technical investigation that has revealed network scanning capabilities even when the devices are turned off. A joint analysis conducted by Gamers Nexus, Level1Techs, and security researchers has documented how LG models, including the top-of-the-line G5 OLED, actively examine local networks for other connected devices.

Quick Response

  • LG smart TVs scan local networks even when turned off to identify compatible devices
  • Wireshark analysis detected collection of information on nearby Wi-Fi networks and connected devices
  • LG Ad Solutions claims to be able to reach 363 million secondary devices in the USA
  • Functionality used for advanced connectivity but concerns about possible undeclared uses

Steve Burke, editor-in-chief of Gamers Nexus, revealed that "the G5 scanned our entire network identifying dozens of unrelated devices, including smartwatches and smartphones of collaborators unaware of the ongoing analysis". This discovery raises questions about how LG manages the data collected through its TVs.

The technical capabilities of LG smart TVs

The analysts used Wireshark, an advanced network protocol analysis tool, to examine the firmware of LG devices. The results highlighted that smart TVs are able to collect sensitive data, including users' IP addresses, geographical locations, names of nearby Wi-Fi networks and their signal strength, channels used by nearby wireless networks, and details of other devices connected to the same LAN network, even when they do not interact directly with the TV.

LG's advertising infrastructure

LG Ad Solutions, the advertising arm of the Korean group, stated in corporate documents that it can reach 363 million secondary devices in the United States through its platforms. This statement, combined with the demonstrated technical capabilities, raises concerns among cybersecurity experts about the actual use of this data by the company.

LG Electronics' official response

When asked for a comment, LG issued a statement explaining that "LG smart TVs can identify compatible devices on the same network to enable advanced features such as device connectivity, content sharing, or smart home functionality". The company did not specify, however, whether the collected data is used for purposes other than those declared, such as remote diagnostics or market analysis.

Implications for user privacy

The discovery that seemingly harmless household devices can collect sensitive information without the explicit consent of users represents a concerning precedent in the smart appliance sector. While LG maintains that these features are necessary for advanced services, the lack of transparency regarding the management of personal data raises questions about the actual boundaries between legitimate functionality and potential privacy violations.

How to protect your home network

For concerned users, cybersecurity experts recommend several preventive measures. Implementing Security Information and Event Management (SIEM) solutions to monitor suspicious activities, isolating IoT devices on separate guest networks, and considering the adoption of an advanced Identity Access Management (IAM) to control access to sensitive data can be effective strategies to mitigate these risks.

A regulatory framework still in evolution

This case highlights the need for a more robust regulatory framework for data protection in the smart home devices sector. The NIS2 directive in Europe and the DORA regulation for digital operational resilience represent significant steps forward, but the complexity of IoT ecosystems requires more specific solutions to ensure the security of end users.

Towards greater transparency

As smart TVs continue to evolve, the cybersecurity community is calling for greater transparency from manufacturers regarding the use of collected data. Implementing corporate Data Loss Prevention (DLP) practices, adopting NIS2 and DORA compliance policies, and providing end users with clear options for controlling data collection are fundamental steps toward a safer future for smart home devices.

The IoT ecosystem and the problem of perimeter security

The LG case highlights a structural problem of IoT ecosystems: the lack of clear boundaries between legitimate functionality and potential vulnerabilities. According to Gartner data, 75% of companies do not have complete visibility into IoT devices connected to their networks. This creates critical blind spots, especially when seemingly passive devices like smart TVs become active actors in the local network.

The impact on the smart TV market

The smart TV sector recorded a 22% growth in 2023, according to Statista, with LG holding an 18% market share. However, privacy concerns could influence users' choices. A survey conducted by PwC reveals that 63% of consumers are willing to pay a premium for devices with ISO 27001 certified privacy guarantees.

Advanced technical solutions for home protection

To mitigate these risks, experts recommend implementing zero-trust architectures within home networks. Solutions like CSPM (Cloud Security Posture Management) can continuously monitor the configuration of IoT devices, while Managed Detection and Response (MDR) systems can detect abnormal behaviors in real-time. Additionally, the adoption of advanced Identity Access Management (IAM) policies allows for segmenting access to sensitive data.

The role of cyber insurance in the domestic context

As threats increase, the market for cyber insurance for domestic users is also growing. According to Lloyd's of London, the average cost of a cyber risk policy for families increased by 15% in 2023, with coverage including breach remediation and support from a managed Security Operations Center (SOC as a Service).

The challenges of regulatory compliance

The NIS2 directive imposes new security obligations for IoT device providers, requiring periodic audits and implementation of Data Loss Prevention (DLP) measures. However, the complexity of domestic ecosystems makes compliance difficult. According to an ENISA report, only 30% of manufacturing companies are currently compliant with the requirements.

The future of home connectivity

LG and other manufacturers are exploring alternative technologies for device connectivity. An emerging solution is the use of mesh networks with end-to-end encryption, which could eliminate the need for active network scans. Additionally, the adoption of open standards like Matter could standardize communication between IoT devices, reducing vulnerabilities related to proprietary implementations.

Frequently Asked Questions

Which other devices might pose similar risks?

In addition to smart TVs, devices such as smart speakers, smart thermostats, and surveillance cameras can present similar vulnerabilities. It is essential to regularly monitor network activity and update firmware.

How can I verify if my smart TV is collecting data suspiciously?

Using tools like Wireshark or network monitoring applications can help identify unauthorized scanning activities. Additionally, checking the device's privacy settings and disabling unnecessary features.

Are there safer alternatives to smart TVs?

Yes, some companies offer devices with more open and transparent architectures. Looking for models that support open standards and offer options to disable data collection features can be a solution.

A proactive approach to home security

The current situation requires a shift in perspective: from domestic users to manufacturers, all actors must adopt a more proactive approach to security. Implementing disaster recovery and enterprise backup solutions can protect sensitive data in case of breaches. Additionally, continuous training on cybersecurity best practices is essential to prevent incidents.

The importance of transparency and accountability

Finally, it is crucial that manufacturers adopt more rigorous transparency policies. Providing clear documentation on data collection features and offering advanced configuration options to users can build trust. Additionally, implementing bug bounty programs and collaborations with security experts can help identify and resolve vulnerabilities before they become critical issues.

Future perspectives

As the smart home devices market continues to grow, it is likely that regulations will become stricter. The MiCA regulation for crypto-assets and the DORA guidelines for digital operational resilience could extend to the IoT sector, imposing new security and privacy standards. In this context, early adoption of secure practices could become a competitive advantage for manufacturers.

The case of LG smart TVs represents an alarm bell for the entire smart home devices sector. As technologies advance, it is essential to balance innovation and security. Users must be informed and proactive in protecting their data, while manufacturers must take responsibility for building secure and transparent devices. Only through a collaborative approach will it be possible to create a truly secure and reliable IoT ecosystem.

Editorial Note and Disclaimer

The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.

GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not provide real-time information.

The GoYou project does not provide professional, technical, legal, or financial advice and disclaims all responsibility for the improper use of the information published.

In the Crypto sector, every investment involves risks: readers are invited to always inform themselves autonomously before making any decision.