Over 40 million US households own smart TVs, a category that made up more than half of TVs shipped globally in the first quarter of 2016. These high-tech internet-connected displays offer viewers the ease of access to services like Netflix, games, and social media without a Roku, Chromecast, or other media streamer — but they also may be tracking your viewing habits and listening to your conversations.
“Smart TVs are testing the privacy expectations that consumers developed in the era of traditional television,” said Bureau of Consumer Protection director Jessica Rich in her opening remarks at last fall’s smart TV workshop hosted by the Federal Trade Commission.
Today’s WikiLeaks release revealed that Samsung smart TV owners are particularly vulnerable to spying. Newly published documents detail a program called “Weeping Angel,” an attack designed by the CIA and United Kingdom’s MI5/BTSS that makes Samsung smart TVs look like they’re turned off when, in fact, they’re not.
The smart TV “operates as a bug, recording conversations in the room and sending them over the Internet to a covert CIA server,” according to WikiLeaks, though in an interview today on The Late Show ex-CIA director Michael Hayden said, “These tools would not be used against an American,” and, “There are bad people in the world that have Samsung TVs, too,” in response to the Weeping Angel documentation published.
“There are people out there that you want us to spy on,” said Hayden. “You want us to have the ability to actually turn on that listening device inside the TV to learn that person’s intentions. This is a wonderful capability.”
Here are some settings you should review if you’re concerned about snooping corporations.
If you have a Samsung TV, there are several ways to turn off voice recording. On newer TVs, go to Home > Settings > System > Expert Settings > Voice Interactionand turn to off. On older TVs, it may be in Settings > select Smart Features > Voice Recognition > switch to off.
You can also go to Settings > Support > Terms & Policies and opt to “Disagree” with the policies for Viewing Information Services, Voice Recognition Services, and Nuance Voice Recognition and Privacy Notices.
If your TV offers gesture control or facial recognition to authenticate your Samsung account, you can turn this off in the Samsung Account settings menu or cover your camera with a piece of tape.
The alleged “Weeping Angel” attack revealed today, which was designed by the CIA to put Samsung TVs into a fake “off” mode, affects Samsung TVs with firmware versions 1111, 1112, and 1116, sold between 2012 and 2013 with “UNF” in the model name. While the attack suppresses most indicator lights on the TV, the blue LED on the back of the TV remains on.
The only way to defend yourself from this particular attack would be to either update the firmware or disconnect the smart TV from the internet entirely, which would essentially make it a dumb TV.
Samsung can also track your viewing habits and send that data to advertisers for targeted marketing purposes. To prevent this tracking, go to Menu > Smart Hub > Terms and Policy > SyncPlus and Marketing > disable SyncPlus.
If you own a Vizio TV, you can disable data collection by going to your TV’s Menu > Settings > Smart Interactivity, or any option with Automated Content Recognition, and turning it off. It may also appear under System > Reset & Admin > Smart Interactivity or Menu > System > Reset & Admin > Viewing Data to Off.
In February 2017, Vizio agreed to pay $2.2 million to the Federal Trade Commission for failing to disclose when and how it collects user information and, more frighteningly, for transmitting the user data while it was unencrypted. “Automated content recognition software,” which was pre-installed on Vizio TVs sold since 2014, captured a selection of pixels displayed on Vizio TV screens and sent that data to company’s servers, where those pixels were matched to a database of TV shows, movies, and commercials. Essentially, the software recorded viewing history without the TV owner’s explicit consent.