S\u00fakromie v na\u0161ich ob\u00fdva\u010dk\u00e1ch dost\u00e1va doteraz naj\u0165a\u017e\u0161iu ranu. Nez\u00e1visl\u00e9 vy\u0161etrovanie renomovan\u00e9ho port\u00e1lu Gamers Nexus, do ktor\u00e9ho t\u00edm investoval viac ako 500 hod\u00edn testovania, odhalilo desiv\u00e9 pozadie fungovania opera\u010dn\u00e9ho syst\u00e9mu webOS v smart telev\u00edzoroch zna\u010dky LG. P\u00f4vodne pas\u00edvne obrazovky sa pod\u013ea zisten\u00fdch faktov menia na neust\u00e1le akt\u00edvne sledovacie stanice.<\/p>\n
Telev\u00edzory LG bez vedomia pou\u017e\u00edvate\u013eov nepretr\u017eite mapuj\u00fa kompletn\u00fa dom\u00e1cu Wi-Fi sie\u0165, ukladaj\u00fa podrobn\u00e9 z\u00e1znamy hlasu a prij\u00edmaj\u00fa audio sign\u00e1l z mikrof\u00f3nov dokonca aj vtedy, ke\u010f je telev\u00edzor zdanlivo vypnut\u00fd v pohotovostnom re\u017eime alebo odpojen\u00fd od internetu.<\/p>\n
Z\u00e1sah t\u00fdchto prakt\u00edk m\u00e1 gigantick\u00e9 rozmery. Div\u00edzia LG Ad Solutions deklaruje glob\u00e1lny dosah na viac ako 216 mili\u00f3nov smart TV a len v USA propaguje pr\u00edstup k 363 mili\u00f3nom sekund\u00e1rnych zariaden\u00ed v dom\u00e1cnostiach, ktor\u00e9 sp\u00e1ja a profiluje pr\u00e1ve prostredn\u00edctvom d\u00e1t vytiahnut\u00fdch zo spolo\u010dnej siete.<\/p>\n
Skenovanie dom\u00e1cej siete, obch\u00e1dzanie Mute a prenos 4 GB d\u00e1t mesa\u010dne<\/p>\n
Pomocou anal\u00fdzy sie\u0165ov\u00fdch paketov (cez n\u00e1stroj Wireshark) v\u00fdskumn\u00edci zachytili, \u017ee syst\u00e9m webOS vyu\u017e\u00edva sie\u0165ov\u00e9 protokoly (napr. UPnP) na pravideln\u00e9 a agres\u00edvne sweeps (skenovania) lok\u00e1lnej siete. V jednom z testov telev\u00edzor po pripojen\u00ed okam\u017eite mapoval a identifikoval 38 okolit\u00fdch zariaden\u00ed \u2013 vr\u00e1tane smartf\u00f3nov zamestnancov, smart hodiniek, 3D tla\u010diarne, termostatov, \u010disti\u010diek vzduchu a sie\u0165ov\u00fdch pr\u00edstrojov.<\/p>\n
Investigat\u00edvny rozbor uk\u00e1zal, \u017ee telev\u00edzor spracov\u00e1va a odosiela \u0161irok\u00fa \u0161k\u00e1lu citliv\u00fdch \u00fadajov:<\/p>\n
Prieskum siete a geolok\u00e1cia: Telev\u00edzor mapuje vn\u00fatorn\u00e9 IP adresy a MAC adresy v\u0161etk\u00fdch pripojen\u00fdch zariaden\u00ed, \u010d\u00edta n\u00e1zvy, kan\u00e1ly a intenzitu sign\u00e1lu okolit\u00fdch Wi-Fi siet\u00ed, \u010do v kombin\u00e1cii s IP adresou umo\u017e\u0148uje mimoriadne presn\u00e9 ur\u010denie fyzickej polohy dom\u00e1cnosti.<\/p>\n
Sledovanie cez ACR (Automatic Content Recognition): Technol\u00f3gia na pozad\u00ed sn\u00edma vzorky obrazu a zvuku zo v\u0161etk\u00fdch vstupov (vr\u00e1tane aplik\u00e1ci\u00ed, k\u00e1blovej TV \u010di HDMI), vytv\u00e1ra digit\u00e1lne otla\u010dky a porovn\u00e1va ich s reklamn\u00fdmi datab\u00e1zami. Testovan\u00fd telev\u00edzor takto odosielal reklamn\u00fdm partnerom (napr. Alphonso) v priemerne a\u017e 4 GB d\u00e1t mesa\u010dne.<\/p>\n
Obch\u00e1dzanie nastaven\u00ed a druh\u00fd mikrof\u00f3n: Ke\u010f v\u00fdskumn\u00edci v menu vypli hlavn\u00fd mikrof\u00f3n, zistili, \u017ee syst\u00e9m na\u010falej prij\u00edmal \u010dist\u00fd zvuk cez druh\u00fd mikrof\u00f3n, na ktor\u00fd sa softv\u00e9rov\u00e9 tla\u010didlo \u201eMute\u201c v\u00f4bec nevz\u0165ahovalo. Mikrof\u00f3n navy\u0161e zost\u00e1val akt\u00edvny e\u0161te 10 a\u017e 15 sek\u00fand po dohovoren\u00ed pr\u00edkazu, \u010d\u00edm zachyt\u00e1val be\u017en\u00fa konverz\u00e1ciu v miestnosti.<\/p>\n
Ukladanie zvuku pri odpojenom internete a Standby: Pri teste, kedy bol telev\u00edzor s tmavou obrazovkou v pohotovostnom re\u017eime (Standby) alebo \u00faplne odpojen\u00fd od ethernetov\u00e9ho k\u00e1bla, zariadenie neust\u00e1le prepisovalo re\u010d do textu aj zvukov\u00fdch s\u00faborov a ukladalo ich do lok\u00e1lnej pam\u00e4te. V momente, ke\u010f sa internetov\u00e9 spojenie obnovilo, telev\u00edzor okam\u017eite odoslal v\u0161etky nahromaden\u00e9 z\u00e1znamy na vzdialen\u00e9 servery.<\/p>\n
Okrem komer\u010dn\u00e9ho zberu d\u00e1t testy odhalili aj z\u00e1va\u017en\u00e9 Remote Code Execution (RCE) zranite\u013enosti vo webOS. Tie by v pr\u00edpade zneu\u017eitia hackermi dok\u00e1zali z telev\u00edzora spravi\u0165 doslovn\u00fd odpo\u010d\u00favac\u00ed pr\u00edstroj alebo vstupn\u00fa br\u00e1nu do celej dom\u00e1cej siete.<\/p>\n
Zlyhanie vyhl\u00e1sen\u00ed LG a ako sa \u00fa\u010dinne chr\u00e1ni\u0165<\/p>\n
Hoci spolo\u010dnos\u0165 LG v reakci\u00e1ch na s\u00fadne \u017ealoby (napr. v Texase) opakovane tvrdila, \u017ee jej zariadenia \u201eneukladaj\u00fa ani nenahr\u00e1vaj\u00fa konverz\u00e1cie v okol\u00ed\u201c, d\u00f4kazy zachyten\u00e9 priamo z pam\u00e4te a sie\u0165ov\u00e9ho prevodu hovoria o opakom. Krok s vyn\u00fatenou arbitr\u00e1\u017eou v podmienkach pou\u017e\u00edvania, ktor\u00fd LG zaviedlo len ned\u00e1vno, navy\u0161e znemo\u017e\u0148uje pou\u017e\u00edvate\u013eom jednoducho sa zapoji\u0165 do hromadn\u00fdch \u017eal\u00f4b.<\/p>\n
Bezpe\u010dnostn\u00ed experti z Gamers Nexus aj Level1Techs preto vydali jednozna\u010dn\u00e9 odpor\u00fa\u010danie: Odpojte Smart TV od internetu (vytiahnite k\u00e1blov\u00fd Ethernet a vyma\u017ete ulo\u017een\u00e9 Wi-Fi siete). Pre pr\u00edstup k aplik\u00e1ci\u00e1m odpor\u00fa\u010daj\u00fa pou\u017ei\u0165 samostatn\u00fd extern\u00fd prehliada\u010d alebo streamingov\u00fd box (napr. Apple TV \u010di Nvidia Shield) zapojen\u00fd cez HDMI, pr\u00edpadne telev\u00edzor v dom\u00e1cej sieti striktne odstrihn\u00fa\u0165 cez virtu\u00e1lne siete (VLAN) od ostatnej citlivej elektroniky.<\/p>\n","protected":false},"excerpt":{"rendered":"S\u00fakromie v na\u0161ich ob\u00fdva\u010dk\u00e1ch dost\u00e1va doteraz naj\u0165a\u017e\u0161iu ranu. Nez\u00e1visl\u00e9 vy\u0161etrovanie renomovan\u00e9ho port\u00e1lu Gamers Nexus, do ktor\u00e9ho t\u00edm investoval…\n","protected":false},"author":2,"featured_media":174660,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[32],"tags":[34,37,48937,33,43,40,39,42,41,48938,36,38,35,48939],"class_list":["post-174659","post","type-post","status-publish","format-standard","has-post-thumbnail","category-spravy","tag-headlines","tag-hlavne-spravy","tag-lg","tag-news","tag-sk","tag-slovak","tag-slovakia","tag-slovencina","tag-slovensko","tag-smart-tv","tag-spravy","tag-titulky","tag-top-stories","tag-webos"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@sk\/117240347081760506","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/posts\/174659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/comments?post=174659"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/posts\/174659\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/media\/174660"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/media?parent=174659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/categories?post=174659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/sk\/wp-json\/wp\/v2\/tags?post=174659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}