Two years ago, in May 2017, Wikileaks revealed that the CIA used software that allowed it to spy on specific people through Smart TVs. The “weeping angel” exploit used the voice control system and recorded conversations that took place in the room where the TV was located. The conversations were then sent over the Internet to a secret CIA server.
Samsung was informed of the vulnerability in its TVs and stated: “Protecting consumer privacy and the security of our devices is a top priority at Samsung. We are aware of this incident and are investigating the matter.”
Even now, in June 2019, Samsung advises its customers to scan their QLED TVs for viruses themselves. We all know that it is necessary to scan our computer for malware. This way we can ensure that our system is safe. Samsung states that this should also be done for the QLED TV, if it is connected to Wi-Fi! Consumers should scan their TV for viruses every few weeks to avoid attacks. Samsung showed that this can be done by pressing a few buttons on the remote control, but it is a relatively complicated process.
However, most people reacted by saying that what Samsung is proposing is not a solution to dealing with the attacks.
Last year, Samsung patched a vulnerability after a consumer report stated that smart TVs “could potentially be controlled by hackersusing bugs that are easy to find.” However, even that vulnerability was described by experts as “low risk.”
A few years ago, Mashable reported that “smart TVs can be hacked and compromised.” Researchers reported at the Black Hat security conference that they had found vulnerabilities in Samsung Smart TVs (2012 models). The vulnerabilities allowed them to activate the camera, take control of social media apps (e.g. Facebook or Skype), and access files and any other application.
Six years later, Samsung still hasn't found an effective way to address the vulnerabilities. These methods, which Samsung suggests (a complicated remote control process) to enhance security, are more likely to deter people from buying smart TVs. Many people don't know much about their TVs. So what are the chances they'll think about security practices?
Samsung, after all these comments, deleted the video with the virus scanning instructions.
