Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Television Technology

Samsung Recommends Scanning QLED TVs For Viruses (cnet.com) 191

Samsung has reminded owners of its smart TVs that they should be regularly scanning for malware using its built-in virus scanning software. From a report: In a tweet, Samsung US support account shared a video Sunday outlining how users can scan their smart TVs for viruses. It is unclear what prompted the tweet or why the process seems to be opt-in as opposed to the operating system automatically scanning for viruses in the background. "Scanning your computer for malware viruses is important to keep it running smoothly. This also is true for your QLED TV if it's connected to Wi-Fi! Prevent malicious software attacks on your TV by scanning for viruses on your TV every few weeks," the company said in the tweet. It has since deleted the tweet.
This discussion has been archived. No new comments can be posted.

Samsung Recommends Scanning QLED TVs For Viruses

Comments Filter:
  • by SuperKendall ( 25149 ) on Monday June 17, 2019 @10:57AM (#58775462)

    With stuff like needing to run a virus scanner (of dubious quality) regularly, I'd far rather get a display that does not have anything a virus can infect...

    I imagine it will be harder and hard to buy non-smart TV's, but luckily so far projectors seem to have escape this intelligence grafting operation.

    • by leonbev ( 111395 ) on Monday June 17, 2019 @11:09AM (#58775524) Journal

      I have to wonder if there is actually a virus out in the wild that's infecting Samsung Smart TV's, or if the Marketing department is just disappointed with the number of people who subscribed to McAfee's antivirus for Samsung SmartTV product. Probably the latter instead of the former.

      • by dissy ( 172727 ) on Monday June 17, 2019 @12:35PM (#58776146)

        I have to wonder if there is actually a virus out in the wild that's infecting Samsung Smart TV's, or if the Marketing department is just disappointed with the number of people who subscribed to McAfee's antivirus for Samsung SmartTV product. Probably the latter instead of the former.

        Probably both.

        Samsung, and others, use WebOS which was originally created by Palm for their devices back in the day. HP bought it, then LG bought it from them.

        It uses a Linux kernel, a mostly complete userspace, with the main difference being a GUI designed mainly for mobile device usage. Palm Pilots, tablets, and even some phones ran it in the past.

        With a full network stack and userspace apps that have never been updated, it wouldn't be as much work as one would think to adapt some existing linux based malware from two decades ago to run on current day webOS.
        The source is now open, and the SDK readily available.

        I've seen posts on AVforums where people running network-level antivirus have seen in their logs various outbound network connections that triggered an AV pattern match.

        I can't say if that was malware or the more common false positive type of thing, but let me share with you the first posting of this type I saw. It was at first a bit hilarious, then quite terrifying:
        https://www.avforums.com/threads/virus-in-webos.2180026/ [avforums.com]

        The first thing to see is the domain of the web request was "lge.com", and being an LG tv that makes sense. That would be expected and to me was the funny bit.

        But then look closer. h ttp:// aic-ngfts.lge.com/fts/
        The spaces were from the original post, but the bold is me. http, no encryption, no site verification, no authentication.

        This was posted in July 2018, just one year ago. Going to the root of that domain even today, while it gives an error without the file path/name to download, does NOT redirect to https.

        So yea as far as webOS having malware loaded on it, I can't say with certainty it has happened, but I can say with certainty that everything is in place for a MitM injection of software that can trivially be created. Bad actors would also have the assistance of any other device on the local network that they can and have infected, be it a PC or an android phone.

        Given what the shadier advertising companies currently do with web browser exploits to gather data from infecting computers, would you really put it past them to try and infect TVs to get at all that juicy viewing data?

    • With stuff like needing to run a virus scanner (of dubious quality) regularly, I'd far rather get a display that does not have anything a virus can infect...

      If you don't want smart features, then don't set up Wifi.

      If you don't want viruses, then don't install 3rd party apps.

      • If you don't want smart features, then don't set up Wifi.

        First of all, some sets are starting to ship with always on cellular data connections.

        Secondly, that means you can't connect Hulu or Netflix - people mostly want to be able to use those without the TV otherwise being "smart".

        If you don't want viruses, then don't install 3rd party apps.

        Maybe, but also might be vulnerable to outside installation via any open control ports the TV has.

        • by grasshoppa ( 657393 ) on Monday June 17, 2019 @11:23AM (#58775606) Homepage

          Secondly, that means you can't connect Hulu or Netflix - people mostly want to be able to use those without the TV otherwise being "smart".

          If only there were a way to get that functionality without integrating it into the TV itself. Someone should get to work on that.

        • by EvilSS ( 557649 ) on Monday June 17, 2019 @11:30AM (#58775658)

          First of all, some sets are starting to ship with always on cellular data connections.

          That seems expensive for the mfg. and I imagine it's a rare exception. Can you name a few with this feature?

          Secondly, that means you can't connect Hulu or Netflix - people mostly want to be able to use those without the TV otherwise being "smart".

          Don't use your TV with it's shitty OS for that. Use a purpose built box with better engineering and support, such as nVidia Shield, Apple TV, FireTV, or Roku. Could one of those get infected? Sure. But I'd trust a box with a more mainstream OS, one that's actively being patched and updated, over a random TV OS that the manufacturer will stop updating a year after it leaves the factory and has been superseded by a newer model. Heck, I'd even take it over a TV with one of those mainstream OS built in because, again, I would not trust the TV manufacturer to not stop updating it after a short time.

          • That seems expensive for the mfg. and I imagine it's a rare exception. Can you name a few with this feature?

            There was a previous Slashdot story about it I remember reading, but I can't seem to find out who the maker was...

            Yes it's a very tiny bit more expensive, but then they are sure they can feed you ads because they don't have to rely on you connecting to WiFi (that's what the Slashdot submission was about).

            Don't use your TV with it's shitty OS for that.

            Yeah I don't but most people who buy SmartTV's do.

            • They know the vast majority of people are not going to buy an AppleTV, most people will buy a smart TV and use what it has.

              Not that I disagree with you, but this always seems a strange argument to me. We've been connecting extra boxes to our TVs forever, from the earliest VCRs, through satellite and cable boxes, players for the various disc formats, all the games consoles, Freeview boxes (for watching broadcast digital TV on older analog TVs when it first came out here in the UK), PVRs, and these days connecting to online streaming services or streaming content from other devices around the home.

              For me, the most important aspec

              • It's not a matter of connections - it's a matter of cost/convenience. I'd say most of the people on slashdot would go for the separate box. But I've got friends who've told me straight up when we were out shopping for TVs (me being the designated tech friend) - "I want to get a TV with Netflix built in so I don't have to deal with the extra remote" All my counter arguments were pooh-pooh'd (companies are better about updating now, I'd get ads on other boxes and they'd track me too, etc).

                Cost was a facto
                • IMHO, that's a perfectly reasonable objection. Convenience is very important in this sort of system. However, the problem could be solved by standardising AV networking so that different source devices, output devices and controls all played nicely and only needed a single UI to run everything anyway.

                  Many attempts have been made over the years to achieve this, with varying degrees of success. It's clearly possible to do it, because we're talking about a relatively simple system compared to all the different

            • by EvilSS ( 557649 )

              Yeah I don't but most people who buy SmartTV's do.

              And there is a fix for that: Don't do it. I can't help if people don't want to work in their own interest. But there is a solution to the problem.

              As for viruses, I'd be more concerned with drive-by's vs third party apps. Something on your network gets infected (or, if you are a really super-user you put your TV on the internet directly) and takes advantage of an exploit in the TV's OS across the network. Or something being embedded into a compromised site the TV visits (either on its own or due to user in

            • by EvilSS ( 557649 )

              Yes it's a very tiny bit more expensive, but then they are sure they can feed you ads because they don't have to rely on you connecting to WiFi (that's what the Slashdot submission was about).

              It's not so tiny an expense when you factor in that a data plan is required by the telco. Small bits of data (medical devices) are one thing, but for a smart TV that's going to be a lot more data, even if it's not used for streaming but for background updates and ad data.

          • First of all, some sets are starting to ship with always on cellular data connections.

            That seems expensive for the mfg. and I imagine it's a rare exception. Can you name a few with this feature?

            Different, but related; I was greatly surprised: I recently got a CPAP (sleep breathing machine for fat people) and it has a removable embedded cellular card. I even used it: the local guy sitting in his office was able to change it's settings while I was sitting with it on my bed. (I had to punch a button to force it to connect and update, but still...)

            • by EvilSS ( 557649 )
              Yep, mine has one as well (and way more convenient than remembering to take the SD card with me). But those are medial devices with massive margins to cover the data plan costs. Throwing those in every smart TV (so, basically, every TV because good luck getting one without smart features these days) would be pretty expensive for a relatively low margin product. And it's not like it would be able to stream over it (the data cost would be insane).
          • Don't use your TV with it's shitty OS for that. Use a purpose built box with better engineering and support, such as nVidia Shield, Apple TV, FireTV, or Roku.

            Case in point - the YouTube app on some of the older smart TVs doesn't work anymore. The problem is Google switched YouTube's default encoding from h.264 to VP9 a few years back. Older graphics hardware came with a h.264 decoder, but not a VP9 decoder. So these older TVs are now physically incapable of decoding newer YouTube videos (they don't hav

        • some sets are starting to ship with always on cellular data connections.

          Citation please.

          Secondly, that means you can't connect Hulu or Netflix

          You can get those features with a cheap external dongle.

          Or you can connect a computer to the HDMI port, including a $5 Raspberry Pi Zero.

        • First of all, some sets are starting to ship with always on cellular data connections.

          Source? I can't find anything about this in a search. Make and model number would do. So would a link to someplace discussing this mythical TV with cell connection.

    • Comment removed based on user account deletion
      • by bws111 ( 1216812 )

        Somehow? It's called niche market vs mass market.

        • Comment removed based on user account deletion
          • A monitor is the same product as a TV with the GUI disabled.

            Nowadays, a "monitor" can receive HDMI or VGA (350p or higher RGB). Without an expensive external tuner/upscaler, it typically cannot receive ATSC over RF, composite video, S-Video, or YPbPr component video. I use composite with my NES, S-Video with my Super NES, N64, and GameCube, and YPbPr with my Wii. The average "monitor" is also physically smaller than a living room TV.

          • by lgw ( 121541 )

            A monitor is the same product as a TV with the GUI disabled.

            They could even easily add "Use as monitor/tv" in both their setups.

            They make money selling your data, so they won't offer that setting. But they damn well should, for high-end TVs. I'd pay the $20 extra, or whatever it works out to be.

            • Like paying the phone company extra for an unlisted number. (I don't think you even get the option anymore?)
      • And somehow monitors are more expensive than monitors. I am in the market for a 55"-65" monitor as I do not need a TV. What I will end up buying will be a 4K TV for 500-600EUR

        I don't know how badly you get reamed for taxes in your market, etc., but search for "industrial lcd signage displays" and you ought to find something. It will come at a price premium, but hopefully not an egregious one.

        • by lgw ( 121541 )

          earch for "industrial lcd signage displays" and you ought to find something

          The one's I've seen are 10x the price, because they're bright enough for outdoor use.

          • The one's I've seen are 10x the price, because they're bright enough for outdoor use.

            Well, lots of them are designed for use indoors, like in conference centers, and are less than 2x the price.

    • Smart TVs do something that no other TV can do, they identify stupid people.

    • by Koatdus ( 8206 )

      I don't find that I really have a use for a smart TV.

      I have a tuner box provided by my Fios provider for regular TV and a Amazon FireTV box for Amazon, Netflix, SlingTV and assorted other apps that I don't ever use.
      My Fios provider provides Tivo type show/series recording that I can access from the Fios tuner box if I want to record something.
      Once in a while there is a game console attached although that is rare.
      I also usually have an old PC or laptop that I plugin for the twice a year that I actually watch

      • I would much rather have an affordable large (very flat) screen that doesn't have a tuner or smart TV things in it but has a load of different input options and excellent picture quality. P in p or split screen would also be nice if I want to watch two games at once.

        I agree largely with you, but I do find it nice to have the TV/Monitor have a good built in FOTA tuner, so as to readily be able to bring in the great HD local channels with an external antenna.

    • by nnull ( 1148259 )

      I would like to know how to scan for viruses on my TV.

      Samsung's TVs are so locked down that the regular consumer is unable to do anything. Meanwhile, the malware writer can do anything they so desire on the TV. Then you also have wifi enabled by default on my TV like as if I want that. It seems I have to buy a wifi jammer for my home and completely stop using it. Then there are the rumors spreading around that your devices constantly look for open wifi's to connect to for data collection.

      Also, Amazon, Netfl

    • by tlhIngan ( 30335 )

      With stuff like needing to run a virus scanner (of dubious quality) regularly, I'd far rather get a display that does not have anything a virus can infect...

      I imagine it will be harder and hard to buy non-smart TV's, but luckily so far projectors seem to have escape this intelligence grafting operation.

      The problem is simply too many CPU cycles. The smartphone revolution has made super powerful processors available for really cheap - where before you would carefully pick an ARM9 running at 100MHz to power yo

  • I never connect my TV to the outside world.

  • This is why my "smart tv" isnt connected to my network, it's just a display for the smart things I have that get regular, more trustworthy, updates.
  • "Scanning your computer for malware viruses is important to keep it running smoothly. This also is true for your QLED TV if it's connected to Wi-Fi! Prevent malicious software attacks on your TV by scanning for viruses on your TV every few weeks," the company said in the tweet. It has since deleted the tweet.

    This is BS on so many levels it's simply cringeworthy. Although scanning won't hurt per se, but if you're already running an AV, then it scans all open files by default which makes scanning wholly redun

  • by techdolphin ( 1263510 ) on Monday June 17, 2019 @11:49AM (#58775824)
    So getting a dumb TV is now the smart choice.
  • (Runs scan) OH MY GOD! There's nasth software on this watching everything I watch!

  • by ddtmm ( 549094 ) on Monday June 17, 2019 @12:21PM (#58776022)
    Supply your own "smart" box and never connect the TV to your network. I generally laugh/shake my head at my friends that actually use the smart features in their TVs. I guess you get what you deserve..
    • Not using it doesn't keep it from connecting to your neighbors' open wifi, and becoming an internet disease vector anyway.

  • by NikeHerc ( 694644 ) on Monday June 17, 2019 @12:26PM (#58776070)
    Samsung has reminded owners of its smart TVs that they should be regularly scanning for malware using its built-in virus scanning software.

    Thanks, Samsung, for the continuing reminders that I will never purchase any of your products!
  • I have two Samsung smart TVs, a Smasung bluray player, a Samsung washer and dryer and just purchased a Samsung refrigerator. All are wifi capable -- but zero have been connected.
  • Now all we need is the portable artificial intelligence device you use to destroy the viruses that will inevitably be inside every IoT device you own (that will be all of em).

  • I have a dozen or so IOT , security cameras, and smart devices in my house. Everything from thermostats, Google home, wifi enabled light switches, and smart electronics like my Samsung TV and my Xbox.

    None of them have access to my network. They are all on their own separate network so that if any of them become compromised they can't do much damage. This also has the added benefit that no one in my house has the password for that network, so changing configuration options of those devices by anyone but me i

  • Scanning QLED TVs For Viruses

    Of course they'd all need a virus scanner. Organic LED TVs are alive (Or-Gan-Ic? Duh.) and can be infected if you simply sneeze near it, just like your partner could.

    A QLED, Quantum dot display TV, can easily convert themselves to OLED if the bar on the Q spontaneously jumps away.

    Just make sure you use protection if you're watching pr0n -- you don't want to accidentally get something from those actors either. And OMG, don't watch anything about the Black Plague!!

  • How exactly do these viruses get onto the Samsung QLED TV [lifewire.com] in the first place?

The Tao is like a glob pattern: used but never used up. It is like the extern void: filled with infinite possibilities.

Working...