Researcher Uncovers Extensive User Tracking on Samsung Smart TVs

A cybersecurity researcher has revealed extensive user tracking features embedded within Samsung smart TV firmware, according to Decrypt. The researcher, operating under the X username log4j, stated that they reverse engineered their device's firmware and discovered a configuration file detailing functions such as an always-on microphone, automatic content recognition, geo-positioning, and targeted advertising services.

Firmware Analysis and Findings

The file, designated as 'security-policy.xml', outlines capabilities including network mapping and user profile building. The findings indicate that models lacking a built-in microphone actively search for one on connected peripherals such as soundbars or Bluetooth speakers.

Cybersecurity experts commenting on the findings noted that while such data collection practices are typically disclosed within lengthy End-User License Agreements, they are rarely actively promoted to consumers. Analysts suggested that widespread data collection and profiling for targeted advertisements may contribute to maintaining lower price points for television hardware over extended periods.

AI and Reverse Engineering

Industry specialists observed that the accessibility of reverse engineering is expanding due to artificial intelligence tools. According to security advisors, AI-assisted analysis allows researchers to examine device data collection mechanisms faster and more efficiently.

While some industry figures expressed concern over the extent of data collection and profiling, others noted that users can adjust settings to limit data access points, though navigating privacy controls across multiple menus remains complex.

Key facts

• Firmware reverse engineering revealed an 'security-policy.xml' file detailing data collection functions.
• Documented capabilities include an always-on microphone, automatic content recognition, and targeted ads.
• Devices without built-in microphones reportedly scan for connected audio peripherals.
• Cybersecurity experts attribute the accessibility of such findings partly to AI-assisted tools.