Security consultant Rafael Scheel of Oneconsult AG demonstrated the attack by using a cheap transmitter to embed malicious commands into a rogue TV signal. When that signal is broadcast to devices in the vicinity, it can gain access to the televisions. What can cause the attack is the exploitation of two documented security flaws in the Web browsers that run in the background of the TV models used in the test, both manufactured by Samsung. This can work on other TV sets as well. Once a hacker has control over theSmart TV, the TV could be used to attack further devices in the home network or to spy on the user with the TV’s camera and microphone
The California-based TV manufacturer agreed to pay $2.2 million to settle the charges and disclose when and how it collects user information. Since February 2014, software installed on the televisions allowed Vizio to continuously collect customer’s viewing history through software called “ACR,” or automated content recognition. This software captures a selection of pixels displayed on Vizio smart TV screens and sends that data to the company’s servers, where those pixels are compared to a database of different TV shows, movies, and commercials. ACR can also collect information like your Wi-Fi signal strength, nearby Wi-Fi access points, and IP addresses.
The complaint alleges that over 100 billion data points per day (information like what content you’re watching and how long you’re watching it) from more than 10 million Vizio televisions have been collected, and the company planned to store this data on their servers indefinitely. A stipulated federal court order requires that Vizio delete all data collected before March 1, 2016. An anonymized version of the data omitting customers’ name or contact information was sold to third parties for advertising and audience measurement purposes.
FTC’s complaint said Vizio did not make it clear to customers that they intended to collect their TV viewing history, and the collection was turned on by default, which did not give customers a chance to opt out. A key part of the complaint is that Vizio promised customers recommendations based on the data collected, but never provided them to owners of older Vizio TVs
If you own a Vizio TV, you can disable data collection by going to your TV’s Menu > Settings > Smart Interactivity, or any option with Automated Content Recognition, and turning it off.
SelectTV: Rather than a streaming service, SelectTV is a streaming aggregator. You can find movies and TV shows from all over the Internet
SeeSo: SeeSo is a comedy lover’s dream
Daily Burn: Daily Burn is a unique offering in the streaming world. Focusing on physical fitness, Daily Burn offers you the chance to stream thousands of workout videos.
Shudder TV: If you’re a horror fan, Shudder TV is a must-have. Like SeeSo is for comedy, Shudder has all you need if you’re a horror lover