We have to use the actual TV remote to debug some audio issues or disable the motion blur stuff again every once in awhile, but otherwise it might as well just be a display for the AppleTV. I’ve only seen the actual home screen of the TV a handful of times.
I guess it’s probably still spying on us somehow, and it seems like different models make using the AppleTV remote and booting right into the AppleTV harder than others, so your mileage may vary.
Others just overlay banners on top of the video.
Caveat emptor.
This. Never trust software switches. See my other reply for what I suggest instead of "streaming boxes" that aren't any better than the TV firmware.
They still need to tie it to you. If you've not given it a shred of personal information, it has to be fingerprinting via surreptitious audio/video recording, or else by obtaining the purchase info from the retailer (like the name and billing address from your credit card) and matching that by serial number (which would have to be recorded during purchase).
(It has an HDMI port, but it's clearly a second class citizen in the menus, etc. Default to HDMI on power up is intentionally broken. It's also intentionally designed to turn into a brick if we ever lose the remote. At boot, it puts a screen up saying to press a button on the remote if you want it to display anything else, and that screen never times out. If you plug in an HDMI input, it says "HDMI input detected; press OK.". There's no "OK" button on the projector itself. You have to press the OK button on the remote.)
Yes, I want to buy a projector this Black Friday (Hisense PX3-Pro).
Can you explain why you can't just not give the TV your Wi-Fi password?
Or are we worried about the case when the TV did have Wi-Fi (due to it being mandatory for some initial setup, say), but we don't trust that "Forget Network" and "Wi-Fi off" are actually honored?
Suppose the device surreptitiously reconnects to Wi-Fi in spite of being told to forget it. You may be able to block it in your router and failing that, change the access point password.
No?
But if the TV manufacturer is smart in their spying game, they could also be probing for any public SSIDs to connect to when no local internet access is setup.
https://www.wefi.com/wifi-offload
Then they can just get Passpoint access through a shitton of various endpoints.
But also, you think tv manufacturers are sane? They have proven that they don't deserve the benefit of the doubt, in my opinion.
Doesn't exactly sound like a thing to be that concerned about if you never plug in your TV. If you buy a TV right now and never plug it in, how would it know about any future deal with Xfinity to connect to its open networks? And if it had a feature to connect to random open Wi-Fi networks right now, that wouldn't be hard to prove. My LG has never shown up in my Wi-Fi client list despite my open guest Wi-Fi. You can even test it by naming your guest network "Xfinity WiFi".
Taking apart your TV and pulling out the wireless radio sounds like absolute overkill to me. Feel free to do it if it makes you feel better. It will definitely not allow it to send data (over Wi-Fi) under any circumstance. I'm just not convinced that the alternative is that much riskier.
I assume at some point, appliance manufacturers will start "partnering" with things that actually need WiFi for exfiltration purposes. Phones would be a good place to start.
That way, we'd need to either Faraday cage our friends' phones, not invite them over, or send marketing pervs video feed of our moldy pickles.
Easiest rule in security is to just disable unnecessary services. If you are never using the WiFi, you might as well disable the hardware completely
It may be trivial to prove again and again, but it is even more trivial to just disconnect it
https://en.wikipedia.org/wiki/HDMI#HEC
Any chance the TV can phone home via that? One would have to make sure the HDMI cable physically doesn't have the Ethernet pairs, or set the trusted box to filter the traffic.
Other than that, I agree regarding TV, with one caveat: you might want to update the firmware right away, or at some point. The device might need to phone home for that. In order to achieve that, you can put up a temp WLAN AP with your smartphone.
With regards to my STB: I am considering cancelling all my subscription services and simply downloading everything to my NAS. This already runs Jellyfin. Then all I need is a Jellyfin client and HDMI. Perhaps a RPi 4 or RPi 5 would be suffice there.
Why?
https://www.theguardian.com/technology/blog/2011/apr/25/goog...
https://theweek.com/tech/wifi-signals-now-tracking-users-at-...
https://www.youtube.com/watch?v=hlbjUvkoyBA
And here's the opt-out steps to get Google to stop scanning your Wifi: https://support.google.com/maps/answer/1725632#how_opt_out&z...
Sure, I would be disturbed that it's doing that sort of thing in spite of Wi-Fi being explicitly turned off.
What is the threat to me though?
Also, how do you pay for streaming channels, etc., if you don't give it any information?
Without either doing the fingerprinting from surreptitious audio recording in the room that other commenters mention, or else matching the unit serial number to the purchaser (requiring the retailer to leak personal info to the manufacturer), they can't match the unit's location to our identity.
Remember that it doesn't take much to identify someone: Gender, birthdate, and (zip code?) uniquely identify ~80% of Americans. From viewing habits, it should be easy to fingerprint someone - Chicago Bears fan; strong technology interest; on your city block; likes AI porn with Lara Croft; home during day Sa, Su, Tu, Th; watches YouTube videos about ...
They want to be "helpful" and show me they can "work tech" by doing stuff like this. They don't understand that the TV is manipulating them. I don't want to have to explain to them that I'm basically a neurosurgeon and they just tried to impress me by drilling a hole in somebody's head. Because the TV told them to.
Disconnecting the wifi avoids the need for unpleasant conversations.
EDIT: What I am referring to here is the specific allegation that smart TVs will connect to open wireless networks without being commanded to do so. It's not a catch-all for any nefarious thing involving TVs or wireless networks.
LG denies TV spying claims, says tracking and snooping concerns 'not true' (635 points, 2 months ago, 494 comments) https://news.ycombinator.com/item?id=49645480
Also Amazon does this same model with their Sidewalk service, which can run over bluetooth or lora, instead of wifi... and is specifically priced to be usable for large numbers of devices.
If the devices still scan all the time...
Living on the countryside there is no such problem.
If they choose a Firestick or Roku what's the difference? XD