LG smart TVs caught logging audio with screen off and snooping on local devices

LG 智能电视被曝在关机状态下录音并窥探局域网设备

LG smart TVs continuously sweep home networks, map secondary devices, and log microphone audio while appearing to be turned off, according to a new 135-minute-long video published by Gamers Nexus (see below). In more detail, Steve had been working with Level1Techs and independent security researchers. Together, they tested retail LG OLED models including the G5.

根据 Gamers Nexus 发布的一段 135 分钟长的视频显示，LG 智能电视在看似关机的状态下，仍会持续扫描家庭网络、映射辅助设备并记录麦克风音频。具体而言，Steve 与 Level1Techs 及独立安全研究人员合作，对包括 G5 在内的零售版 LG OLED 电视型号进行了测试。

Network packet captures taken through Wireshark showed the TVs actively scanning the local area network for unrelated hardware, including phones and smartwatches. Apart from internal IP addresses, the sets also gathered the names and signal strengths of neighboring Wi-Fi networks along with location data. This data collection pool is fed into into LG Ad Solutions (the company’s targeted advertising arm).

通过 Wireshark 捕获的网络数据包显示，这些电视会主动扫描局域网内的无关硬件，包括手机和智能手表。除了内部 IP 地址外，电视还会收集周边 Wi-Fi 网络的名称、信号强度以及位置数据。这些收集到的数据会被汇总至 LG Ad Solutions（该公司的精准广告部门）。

LG claims they have roughly 216 million smart TV sales globally. On the other hand, the ad division says it has access to 363 million secondary addressable devices in the US alone by tracking other hardware on the same network. The sets also run Automated Content Recognition (ACR). It samples on-screen audio and video into digital fingerprints to log what users watch across inputs. While ACR has been well documented in the past, new testing shows the data collection goes much further than just that.

LG 声称其全球智能电视销量约为 2.16 亿台。另一方面，其广告部门表示，仅在美国，通过追踪同一网络下的其他硬件，他们就能访问 3.63 亿台可寻址的辅助设备。此外，这些电视还运行自动内容识别（ACR）功能，将屏幕上的音频和视频采样为数字指纹，以记录用户在不同输入源下观看的内容。虽然 ACR 技术过去已有详细记录，但新的测试表明，其数据收集范围远不止于此。

During bench tests, they found the TV could capture clean microphone audio while the screen was (or at least looked to be) powered down in standby mode. When the team disconnected the TV from Ethernet, the set continued saving voice input locally and uploaded the stored files once network access was restored. The researchers also documented remote code execution vulnerabilities in webOS that are currently moving through the responsible disclosure process.

在基准测试中，研究人员发现，当电视处于待机模式（或看起来已关机）时，仍能清晰地录制麦克风音频。当团队断开电视的以太网连接后，电视会继续在本地保存语音输入，并在恢复网络连接后上传这些存储的文件。研究人员还记录了 webOS 中的远程代码执行漏洞，目前这些漏洞正处于负责任的披露流程中。

Because of the fact that the TV uses broad network listeners and data sweeps out of the box, the team’s recommendation was straight-up disconnecting LG sets from the internet and using external streaming devices instead. LG has not commented on any of this as of writing.

由于这些电视在出厂时就启用了广泛的网络监听和数据扫描功能，研究团队建议直接断开 LG 电视的网络连接，改用外部流媒体设备。截至发稿时，LG 尚未对此事发表评论。