Samsung Recommends Scanning QLED TVs For Viruses (cnet.com) 191
Samsung has reminded owners of its smart TVs that they should be regularly scanning for malware using its built-in virus scanning software. From a report: In a tweet, Samsung US support account shared a video Sunday outlining how users can scan their smart TVs for viruses. It is unclear what prompted the tweet or why the process seems to be opt-in as opposed to the operating system automatically scanning for viruses in the background. "Scanning your computer for malware viruses is important to keep it running smoothly. This also is true for your QLED TV if it's connected to Wi-Fi! Prevent malicious software attacks on your TV by scanning for viruses on your TV every few weeks," the company said in the tweet. It has since deleted the tweet.
Is a smart TV really worth the savings (Score:5, Insightful)
With stuff like needing to run a virus scanner (of dubious quality) regularly, I'd far rather get a display that does not have anything a virus can infect...
I imagine it will be harder and hard to buy non-smart TV's, but luckily so far projectors seem to have escape this intelligence grafting operation.
Re:Is a smart TV really worth the savings (Score:5, Interesting)
I have to wonder if there is actually a virus out in the wild that's infecting Samsung Smart TV's, or if the Marketing department is just disappointed with the number of people who subscribed to McAfee's antivirus for Samsung SmartTV product. Probably the latter instead of the former.
Re:Is a smart TV really worth the savings (Score:4, Interesting)
I have to wonder if there is actually a virus out in the wild that's infecting Samsung Smart TV's, or if the Marketing department is just disappointed with the number of people who subscribed to McAfee's antivirus for Samsung SmartTV product. Probably the latter instead of the former.
Probably both.
Samsung, and others, use WebOS which was originally created by Palm for their devices back in the day. HP bought it, then LG bought it from them.
It uses a Linux kernel, a mostly complete userspace, with the main difference being a GUI designed mainly for mobile device usage. Palm Pilots, tablets, and even some phones ran it in the past.
With a full network stack and userspace apps that have never been updated, it wouldn't be as much work as one would think to adapt some existing linux based malware from two decades ago to run on current day webOS.
The source is now open, and the SDK readily available.
I've seen posts on AVforums where people running network-level antivirus have seen in their logs various outbound network connections that triggered an AV pattern match.
I can't say if that was malware or the more common false positive type of thing, but let me share with you the first posting of this type I saw. It was at first a bit hilarious, then quite terrifying:
https://www.avforums.com/threads/virus-in-webos.2180026/ [avforums.com]
The first thing to see is the domain of the web request was "lge.com", and being an LG tv that makes sense. That would be expected and to me was the funny bit.
But then look closer. h ttp:// aic-ngfts.lge.com/fts/
The spaces were from the original post, but the bold is me. http, no encryption, no site verification, no authentication.
This was posted in July 2018, just one year ago. Going to the root of that domain even today, while it gives an error without the file path/name to download, does NOT redirect to https.
So yea as far as webOS having malware loaded on it, I can't say with certainty it has happened, but I can say with certainty that everything is in place for a MitM injection of software that can trivially be created. Bad actors would also have the assistance of any other device on the local network that they can and have infected, be it a PC or an android phone.
Given what the shadier advertising companies currently do with web browser exploits to gather data from infecting computers, would you really put it past them to try and infect TVs to get at all that juicy viewing data?
Re: Is a smart TV really worth the savings (Score:2)
If it's based on Linux then it's immune to malware
Re: (Score:2)
If it's based on Linux then it's immune to malware
The kernel would be, however Samsung heaps tons of proprietary crap on top that is closed source and not subject to peer review. It seems, now they pay a price for that. IOW, get a clue. Everything running on the TV needs to be open and subject to peer review. That way, everybody wins, especially users, and also Samsung.
Re: Is a smart TV really worth the savings (Score:2)
Yes the kernel's magic and it's nasty old Samsung doing it wrong.
Re: (Score:2)
Correct.
Re:Is a smart TV really worth the savings (Score:4, Informative)
Samsung uses Tizen, not webOS. It's mostly kept up to date, although TVs themselves often aren't.
Re: (Score:2)
Right, and on top of crapware Enlightment, another one of those "which I was a real oop" monuments to stupidity in C.
Re: (Score:2)
Haha, will you be here all night?
Re: (Score:2)
With stuff like needing to run a virus scanner (of dubious quality) regularly, I'd far rather get a display that does not have anything a virus can infect...
If you don't want smart features, then don't set up Wifi.
If you don't want viruses, then don't install 3rd party apps.
Problem is loss of utility (Score:2)
If you don't want smart features, then don't set up Wifi.
First of all, some sets are starting to ship with always on cellular data connections.
Secondly, that means you can't connect Hulu or Netflix - people mostly want to be able to use those without the TV otherwise being "smart".
If you don't want viruses, then don't install 3rd party apps.
Maybe, but also might be vulnerable to outside installation via any open control ports the TV has.
Re:Problem is loss of utility (Score:4, Insightful)
Secondly, that means you can't connect Hulu or Netflix - people mostly want to be able to use those without the TV otherwise being "smart".
If only there were a way to get that functionality without integrating it into the TV itself. Someone should get to work on that.
Re: (Score:3)
I can throw a $50 roku away without qualms if I chose to get a new sling box...not so much if I have TV with app built it. I can factory reset the roku more easily than the TV (esp. if I've tuned the color settings, etc.).
I've seriously NEVER seen why anyone would want a "smart TV". TV manufacturers should concentrate on making better TVs instead of being sloppy app integrators who will never keep up-to-date. The IoT is never going to survive the security issues until these sorts of things stop getting done
Re:Problem is loss of utility (Score:5, Insightful)
First of all, some sets are starting to ship with always on cellular data connections.
That seems expensive for the mfg. and I imagine it's a rare exception. Can you name a few with this feature?
Secondly, that means you can't connect Hulu or Netflix - people mostly want to be able to use those without the TV otherwise being "smart".
Don't use your TV with it's shitty OS for that. Use a purpose built box with better engineering and support, such as nVidia Shield, Apple TV, FireTV, or Roku. Could one of those get infected? Sure. But I'd trust a box with a more mainstream OS, one that's actively being patched and updated, over a random TV OS that the manufacturer will stop updating a year after it leaves the factory and has been superseded by a newer model. Heck, I'd even take it over a TV with one of those mainstream OS built in because, again, I would not trust the TV manufacturer to not stop updating it after a short time.
Was in previous story last year (Score:2)
That seems expensive for the mfg. and I imagine it's a rare exception. Can you name a few with this feature?
There was a previous Slashdot story about it I remember reading, but I can't seem to find out who the maker was...
Yes it's a very tiny bit more expensive, but then they are sure they can feed you ads because they don't have to rely on you connecting to WiFi (that's what the Slashdot submission was about).
Don't use your TV with it's shitty OS for that.
Yeah I don't but most people who buy SmartTV's do.
Re: (Score:2)
They know the vast majority of people are not going to buy an AppleTV, most people will buy a smart TV and use what it has.
Not that I disagree with you, but this always seems a strange argument to me. We've been connecting extra boxes to our TVs forever, from the earliest VCRs, through satellite and cable boxes, players for the various disc formats, all the games consoles, Freeview boxes (for watching broadcast digital TV on older analog TVs when it first came out here in the UK), PVRs, and these days connecting to online streaming services or streaming content from other devices around the home.
For me, the most important aspec
Re: (Score:3)
Cost was a facto
Re: (Score:2)
IMHO, that's a perfectly reasonable objection. Convenience is very important in this sort of system. However, the problem could be solved by standardising AV networking so that different source devices, output devices and controls all played nicely and only needed a single UI to run everything anyway.
Many attempts have been made over the years to achieve this, with varying degrees of success. It's clearly possible to do it, because we're talking about a relatively simple system compared to all the different
Re: (Score:2)
Yeah I don't but most people who buy SmartTV's do.
And there is a fix for that: Don't do it. I can't help if people don't want to work in their own interest. But there is a solution to the problem.
As for viruses, I'd be more concerned with drive-by's vs third party apps. Something on your network gets infected (or, if you are a really super-user you put your TV on the internet directly) and takes advantage of an exploit in the TV's OS across the network. Or something being embedded into a compromised site the TV visits (either on its own or due to user in
Re: (Score:2)
Yes it's a very tiny bit more expensive, but then they are sure they can feed you ads because they don't have to rely on you connecting to WiFi (that's what the Slashdot submission was about).
It's not so tiny an expense when you factor in that a data plan is required by the telco. Small bits of data (medical devices) are one thing, but for a smart TV that's going to be a lot more data, even if it's not used for streaming but for background updates and ad data.
Re: (Score:2)
First of all, some sets are starting to ship with always on cellular data connections.
That seems expensive for the mfg. and I imagine it's a rare exception. Can you name a few with this feature?
Different, but related; I was greatly surprised: I recently got a CPAP (sleep breathing machine for fat people) and it has a removable embedded cellular card. I even used it: the local guy sitting in his office was able to change it's settings while I was sitting with it on my bed. (I had to punch a button to force it to connect and update, but still...)
Re: (Score:2)
Re: (Score:2)
Case in point - the YouTube app on some of the older smart TVs doesn't work anymore. The problem is Google switched YouTube's default encoding from h.264 to VP9 a few years back. Older graphics hardware came with a h.264 decoder, but not a VP9 decoder. So these older TVs are now physically incapable of decoding newer YouTube videos (they don't hav
Re: (Score:2)
some sets are starting to ship with always on cellular data connections.
Citation please.
Secondly, that means you can't connect Hulu or Netflix
You can get those features with a cheap external dongle.
Or you can connect a computer to the HDMI port, including a $5 Raspberry Pi Zero.
Re: (Score:2)
Please explain how to get Netflix and Hulu on a raspberry pi?
1. Open the browser.
2. Go to Netflix.com
Re: (Score:2)
Please explain how to get Netflix and Hulu on a raspberry pi?
1. Open the browser. 2. Go to Netflix.com
Then you're stuck streaming in 720p on a 4K TV...
Re: (Score:2)
Then you're stuck streaming in 720p on a 4K TV...
A Raspberry Pi can stream at 1920x1080.
It can display still images at full 4K (3840×2160).
Raspberry Pi - Video [wikipedia.org]
Re: (Score:2)
First of all, some sets are starting to ship with always on cellular data connections.
Source? I can't find anything about this in a search. Make and model number would do. So would a link to someplace discussing this mythical TV with cell connection.
Re: (Score:2)
Re: (Score:2)
Somehow? It's called niche market vs mass market.
Re: (Score:2)
Drawback of modern "monitor" for retro gaming (Score:2)
A monitor is the same product as a TV with the GUI disabled.
Nowadays, a "monitor" can receive HDMI or VGA (350p or higher RGB). Without an expensive external tuner/upscaler, it typically cannot receive ATSC over RF, composite video, S-Video, or YPbPr component video. I use composite with my NES, S-Video with my Super NES, N64, and GameCube, and YPbPr with my Wii. The average "monitor" is also physically smaller than a living room TV.
Re: (Score:2)
A monitor is the same product as a TV with the GUI disabled.
They could even easily add "Use as monitor/tv" in both their setups.
They make money selling your data, so they won't offer that setting. But they damn well should, for high-end TVs. I'd pay the $20 extra, or whatever it works out to be.
Re: (Score:2)
Re: (Score:2)
And somehow monitors are more expensive than monitors. I am in the market for a 55"-65" monitor as I do not need a TV. What I will end up buying will be a 4K TV for 500-600EUR
I don't know how badly you get reamed for taxes in your market, etc., but search for "industrial lcd signage displays" and you ought to find something. It will come at a price premium, but hopefully not an egregious one.
Re: (Score:2)
earch for "industrial lcd signage displays" and you ought to find something
The one's I've seen are 10x the price, because they're bright enough for outdoor use.
Re: (Score:2)
The one's I've seen are 10x the price, because they're bright enough for outdoor use.
Well, lots of them are designed for use indoors, like in conference centers, and are less than 2x the price.
Re: (Score:2)
My desktop monitor is a 39 inch 4k TV. I bought it at Costco for $249. It works fine.
The days when you needed an expensive dedicated monitor are long gone.
Re: (Score:3)
Most TVs update too slow for gaming, but are fine for other things. However, I'd rather not have my monitor sending screenshots back to the mothership. Sure, ir's probably sending an image signature that you could never get my banking credentials from, but why take the risk?
Re:Is a smart TV really worth the savings (Score:5, Funny)
Smart TVs do something that no other TV can do, they identify stupid people.
Re: (Score:2)
You win the internet today.
Re: (Score:3)
I don't find that I really have a use for a smart TV.
I have a tuner box provided by my Fios provider for regular TV and a Amazon FireTV box for Amazon, Netflix, SlingTV and assorted other apps that I don't ever use.
My Fios provider provides Tivo type show/series recording that I can access from the Fios tuner box if I want to record something.
Once in a while there is a game console attached although that is rare.
I also usually have an old PC or laptop that I plugin for the twice a year that I actually watch
Re: (Score:2)
I agree largely with you, but I do find it nice to have the TV/Monitor have a good built in FOTA tuner, so as to readily be able to bring in the great HD local channels with an external antenna.
Re: (Score:2)
I would like to know how to scan for viruses on my TV.
Samsung's TVs are so locked down that the regular consumer is unable to do anything. Meanwhile, the malware writer can do anything they so desire on the TV. Then you also have wifi enabled by default on my TV like as if I want that. It seems I have to buy a wifi jammer for my home and completely stop using it. Then there are the rumors spreading around that your devices constantly look for open wifi's to connect to for data collection.
Also, Amazon, Netfl
Re: (Score:2)
The problem is simply too many CPU cycles. The smartphone revolution has made super powerful processors available for really cheap - where before you would carefully pick an ARM9 running at 100MHz to power yo
Re: (Score:3)
Re: (Score:3, Insightful)
Do not give the TV access to your WiFi and its totally secure
Re:Is a smart TV really worth the savings (Score:5, Funny)
Do not give the TV access to your WiFi and its totally secure
I did exactly what you said and didn't give my smart TV access to my WiFi. Instead I just plugged in an Ethernet cable from my router. Problem solved!
Re: (Score:2)
To be really safe, put some ferrites around your cable.
Re: (Score:2)
Re: (Score:2)
It depends what you define as "usable". It will be usable to watch TV and DVDs/BluRays from your player, it will hook into your game consoles, and you can even watch content from a Roku/Apple TV/Chromecast/Fire stick plugged into it.
But you will not be able to use the built-in Netflix/Hulu/whatever apps.
Re: (Score:2)
So then it connects to your neighbor's open WiFi and gets infected anyway...
Re: (Score:2)
Open WiFi doesn't imply open router settings. Meanwhile, you will then have committed a crime (unlike your neighbor) and your TV is still an infected steaming pile.
Re: (Score:2)
Thanks you solved that problem. ... Erm can you tell me how to get Netflix working? For some reason it brings up an error.
Re: (Score:3, Insightful)
Those TVs get packed back into the box and returned to the store from which it came.
I wouldn't be down with that BS.
Re: (Score:2)
Understood, but we're rapidly getting to the point that if you aren't "down with that BS", no TV company is interested in having you (or me) as a customer.
It's pretty much like trying to find a social media company that will accept a check in return for not collecting your data.
Re: (Score:3, Insightful)
Re: (Score:2)
Costco. 90 day return policy. No questions asked other than "was this purchased less than 90 days ago?"
Re: (Score:2)
Certain TVs complain (blocking access / pop-over nag) until they can report in with the mothership.
Would you care to name any, AC?
Re: (Score:2)
True. Fortunately Costco has a 90 day return policy for TVs so if one of those somehow makes it into my home, it won't be there long.
Re: (Score:3)
Haven't seen it on my TV (because it is connected), but Onkyo receivers ask you to accept a TOS/EULA spying agreement every single power on (including from standby) until you bend over.
Re: (Score:2)
if anyone within range has Comcast/Xfinity WiFi, which often includes a publicly accessible connection, your TV may use that instead
In my experience, the captive portal of access points with SSID xfinitywifi requires either an Xfinity Internet subscriber's name and password, so that usage can be charged against that subscriber's 1000 GB cap, or a credit card number.
Re:Is a smart TV really worth the savings (Score:4, Insightful)
How?
When the initialization screen says "Setup Wifi", click on "Skip".
Re:Is a smart TV really worth the savings (Score:5, Informative)
Just be aware that WiFi Direct is still on in this case. While it obviously cannot be exploited over the Internet, it is still concerning.
Comment removed (Score:5, Interesting)
Re:Is a smart TV really worth the savings (Score:5, Funny)
Hit it with a brick.
Then, it will just be a Special TV.
Re: (Score:2)
Re: (Score:2)
At some point it will be cheaper for them to negotiate a deal with Sprint/ATT for built in SIM for cell service to hoover up all the analytics over the lifetime of the TV. Then you'll have to cover it in foil or some shit.
Re: (Score:2)
Re: (Score:2, Informative)
boxen
An alternative pluralization of boxes. In 60-80s hacker lingo (when hacker ment something very different, btw), it originated from vax/vaxen (the, at the time, correct way to referr to two or more vax computers). Because of this unusual pluralization, it because common to use -en instead of -es or whatever else was correct for all words ending in x or with an x sound, such as soxen or socksen for more then one sock. Box was/is usually referring to a computer (pc, server, workstation, whatever).
Our serv
Stupid corporations (Score:2)
I never connect my TV to the outside world.
Re: (Score:2)
Re: (Score:2)
Considering that I only watch content that comes from my own personal server, that would certainly be a feat.
Re: (Score:2)
I never connect my TV to the outside world.
I never even plug mine in. It is the only way to be sure.
Power line communication [wikipedia.org]
This is why... (Score:2)
No (Score:2)
This is BS on so many levels it's simply cringeworthy. Although scanning won't hurt per se, but if you're already running an AV, then it scans all open files by default which makes scanning wholly redun
The Smart Choice (Score:3)
What does God need with an Internet connection? (Score:2)
(Runs scan) OH MY GOD! There's nasth software on this watching everything I watch!
Simple solution (Score:3)
Re: (Score:2)
Not using it doesn't keep it from connecting to your neighbors' open wifi, and becoming an internet disease vector anyway.
Even with better smarts... (Score:3)
A TV will be good for 7-10 years easy, usually longer, even if I replace it sooner I can cascade it down to a different room, my parent's, a friend, etc. T
Thanks for the heads-up (Score:3)
Thanks, Samsung, for the continuing reminders that I will never purchase any of your products!
Samsung (Score:2)
It ended being megaman battle network future.. (Score:2)
Now all we need is the portable artificial intelligence device you use to destroy the viruses that will inevitably be inside every IoT device you own (that will be all of em).
Separate Networks for IOT and Smart Devices (Score:2)
I have a dozen or so IOT , security cameras, and smart devices in my house. Everything from thermostats, Google home, wifi enabled light switches, and smart electronics like my Samsung TV and my Xbox.
None of them have access to my network. They are all on their own separate network so that if any of them become compromised they can't do much damage. This also has the added benefit that no one in my house has the password for that network, so changing configuration options of those devices by anyone but me i
Well of course. QLED TVs can convert to OLEDs. (Score:3)
Scanning QLED TVs For Viruses
Of course they'd all need a virus scanner. Organic LED TVs are alive (Or-Gan-Ic? Duh.) and can be infected if you simply sneeze near it, just like your partner could.
A QLED, Quantum dot display TV, can easily convert themselves to OLED if the bar on the Q spontaneously jumps away.
Just make sure you use protection if you're watching pr0n -- you don't want to accidentally get something from those actors either. And OMG, don't watch anything about the Black Plague!!
Tizen OS Linux-based mobile operating system (Score:2)
Re: (Score:2)
You'll never see another non-"smart" TV ever again.
They are sold as "industrial" or "signage" displays, they cost more but not dramatically more, and they generally have very good daylight viewability and contrast ratios. They are readily available to anyone who cares.
Re: (Score:3)
Re: (Score:2, Funny)
Damn those anti-vaxxers, now they're making TV sets!
Will they stop at nothing?
Re: (Score:3, Funny)
Damn those anti-vaxxers, now they're making TV sets!
Will they stop at nothing?
They killed Digital Equipment Corporation, so yea, why stop now?
11780's for everyone, forever!
Re:It's important to scan your pacemaker for virus (Score:4, Informative)
You jest, but it was widely reported that a senior US politician had that remote connectivity functionality disabled in his pacemaker because of exactly that threat.
Re: (Score:2)
Or don't run you pacemaker on Microsoft Windows CE
Re: (Score:2)
There needs to be a large FTC required label stating if internet is needed at any time during the product's lifecycle.
No smart tv "needs" Internet. And none of them enable it by default.
Re: FTC needs a 'does not phone home' label requir (Score:2)
A reasonable person would assume such a TV still functions as a TV without Internet. Or are you a moron who thinks TV operation requires Internet?
Re: (Score:2)
No, a reasonable person would buy the product they want. If they are buying a smart TV, it is reasonable to assume that they want a smart TV.
This assumption fails when stores carry no non-smart TVs in a particular size range. If your living room is sized for (say) a 43" TV, downgrading to a 24" TV to avoid the "smart" antifeature isn't desirable.
Re: (Score:2)
It regularly disconnects itself from WIfi*, so I would not worry about the connection too much.
It also quite likes the idea of being connected to a landline at times. We connect it with a long extension wire, and then disconnect it shortly afterwards. It is usually about a year before it notices the connection has gone away (I think this is for pay-per-view, which we don't).
*Connection usually fails within a
Re: (Score:2)
Re: (Score:2)
It used to be fun, making something better, or just for knowledge. Now it's to line the pockets of some big company with more money or to spy on us and because we can see that it's not fun anymore.