log4j
@log4j
“advanced persistent threat” - wsj | reverse engineer, pentesting, cryptography, occasional LLM enjoyer
145 Following 27.1K Followers
turns out it classifies what audio it hears, before reporting back to samsung.
sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
Show more
this is pretty evil and clever.
so if your samsung TV model doesnt have a microphone, it will look for connected devices with one, such as a soundbar or a connected bluetooth device.
this gets shipped off to bixby.
Show more
always on hot mic functionality btw.
PLUS: automatic content recognition, geo positioning, network mapping, a targeted ads service, 4 distinct drm services, user profile building and so much more juicy telemetry!
just you, God, a $3000 TV and samsung + their 400 partners!
more to come, screenshot below is of a file called security-policy.xml
Show more
i own a relatively new (2025) samsung tv.
i kept getting weirdly targeted ads.
i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.
zero days it is. root shell on new samsung TVs!
discovered PRIVACY HORROR. write up?
Show more
