LG TVs recorded audio and scanned home networks, Gamers Nexus investigation finds

What the investigation found

A September investigation by the YouTube channel Gamers Nexus, carried out with security researchers and Level1Techs, examined LG OLED televisions using network analysis tools, including Wireshark packet captures. According to AppleInsider, which reported on the video, the testing showed the sets performing a wide range of privacy-invasive actions and transmitting the results back to LG.

The reported behavior went well beyond the usage tracking that typically feeds a smart TV's advertising system. Among the findings:

• Plaintext transcripts of conversations containing sensitive information, including speech that had nothing to do with active TV use or voice commands
• Audio snippets recorded by the television, including while the set appeared to be powered off
• Capture of audio from a connected webcam when the TV was used as a computer monitor
• Scanning of the local network for other hardware, including smartphones and smartwatches
• Determining the television's geographic location
• Measuring the signal strength and channel numbers of nearby Wi-Fi networks

AppleInsider reports that audio recorded while the set was seemingly in standby could be reached remotely. When the TV was taken offline, the recordings were kept in local storage and uploaded once the connection was restored.

Advertising as the driver

Smart TVs commonly employ Automatic Content Recognition (ACR), which AppleInsider notes goes further than identifying a channel or program: it takes snapshots of the screen or fragments of audio and passes them to external servers for analysis. That feeds LG's system for personalized advertising in the TV interface. LG Ad Solutions, the division handling this data, says it holds information from 216 million LG smart TVs worldwide, including 49 million in the United States, according to the report.

Security flaws compounded the problem

The investigation also uncovered vulnerabilities in webOS, the operating system LG uses, which let the researchers extract recorded audio and listen to it. In effect, the flaws could turn a television into a listening post for an attacker. During testing, phrases spoken near the set, including examples referencing a social security number and credit card details, appeared as plaintext in the device's memory and logs. AppleInsider says LG is working on the vulnerabilities, but notes that the underlying data collection practices remain in place and, because the ad features have shipped for years, are extremely widespread.

Why an external box is not enough

A key point from the report: relying on an Apple TV or another set-top box for viewing does not disable the television's own telemetry. The monitoring operates regardless of which input you watch. AppleInsider's recommendation is to disconnect the set entirely, unplugging any Ethernet cable and removing saved Wi-Fi credentials through the TV's settings. For homes or offices with multiple LG screens, blocking the sets at the router with firewall rules cuts the connection even where the on-device settings are hard to reach. Even then, the report cautions, the TV continues storing captured snippets locally.

Why it matters

The story drew wide attention after reaching the front page of Hacker News, and that reaction is itself telling. Smart TVs sit in millions of living rooms, and the investigation describes behavior, from standby audio capture to network reconnaissance and plaintext transcription of sensitive speech, that goes far past what most buyers would consider acceptable in a display. The webOS vulnerabilities raise the stakes further, because all of that collected data becomes a liability if an outside party can reach it. LG's advertising business gives it a financial incentive to keep the pipeline running, and as AppleInsider observes, the practices are likely to continue until public pressure or regulation changes the calculus. In the meantime, the practical guidance for owners is blunt: treat the television as a screen rather than a networked device.