5 ms·

Or else what? Not exactly the end of the world if my TV is pwned as long as I can still, you know, use it. The ability to move laterally in my home network is

Or else what? Not exactly the end of the world if my TV is pwned as long as I can still, you know, use it. The ability to move laterally in my home network is about as valuable to anyone sophisticated enough to use it as walking around my apartment complex would be to a real life Danny Ocean. Could Danny get into my house and take my PII? Sure, but like, why the fuck would he? It's not wonderful to potentially be contributing to some botnet, but that's on Samsung not me.

mmahemoff 7y ago
One consequence is having your accounts compromised if you choose to login to Netflix, YouTube, etc on the device. That could be especially problematic if there are marketplaces involved, such as on-demand video (scams like this where the attackers operate a selling account https://www.denverpost.com/2017/04/10/amazon-third-party-sellers-hackers/ https://www.denverpost.com/2017/04/10/amazon-third-party-sel...)
saagarjha 7y ago
I would rather my device not contribute to a DDoS, especially as there may be legal implications to allowing this, but you do you I guess…
- diminoten 7y ago
  I've never heard of a single person in this specific scenario getting into any legal trouble whatsoever, let alone enough people for me to reasonably worry about the likelihood being high enough to register on the list of things that could actually happen to me.
- Cannibusted 7y ago
  You do you? I would lose that ridiculous phrase. It's super condescending and not needed. No one needs your permission to be themself, or even a 'reminder'.
Raphmedia 7y ago
Most smart TVs have built-in microphones. You don't want microphones on a compromised device in the middle of your living room.
- diminoten 7y ago
  Why not? Again, the people who could make use of this are the very people who don't fit into my threat model. Is there some rash of private recordings being used as blackmail via compromised devices that hasn't hit the news yet? I'm worried about actualized threats -- I'm willing to gamble that I won't be the very first target of an entirely new kind of attack, and that I'll have time to respond if such a thing ever does actually come to pass.

mmahemoff 7y ago

One consequence is having your accounts compromised if you choose to login to Netflix, YouTube, etc on the device. That could be especially problematic if there are marketplaces involved, such as on-demand video (scams like this where the attackers operate a selling account https://www.denverpost.com/2017/04/10/amazon-third-party-sellers-hackers/ https://www.denverpost.com/2017/04/10/amazon-third-party-sel...)

saagarjha 7y ago

I would rather my device not contribute to a DDoS, especially as there may be legal implications to allowing this, but you do you I guess…

diminoten 7y ago
I've never heard of a single person in this specific scenario getting into any legal trouble whatsoever, let alone enough people for me to reasonably worry about the likelihood being high enough to register on the list of things that could actually happen to me.
Cannibusted 7y ago
You do you? I would lose that ridiculous phrase. It's super condescending and not needed. No one needs your permission to be themself, or even a 'reminder'.

Raphmedia 7y ago

Most smart TVs have built-in microphones. You don't want microphones on a compromised device in the middle of your living room.

diminoten 7y ago
Why not? Again, the people who could make use of this are the very people who don't fit into my threat model. Is there some rash of private recordings being used as blackmail via compromised devices that hasn't hit the news yet? I'm worried about actualized threats -- I'm willing to gamble that I won't be the very first target of an entirely new kind of attack, and that I'll have time to respond if such a thing ever does actually come to pass.