4 ms·

To second this advice, I have a 4 year old 75" Sony Bravia that I did not connect to the internet in any way, despite being an Android device. I have updated th

by yholio 5y ago

To second this advice, I have a 4 year old 75" Sony Bravia that I did not connect to the internet in any way, despite being an Android device. I have updated the firmware using the instructions on the Sony website, downloaded a package, extracted on a USB stick and let the TV boot on that. Figured it's best to have an up to date operating system for bug fixes, security updates, file format support etc. Never intend to use the "smart" features on the TV, internet browsing, Netflix etc., I handle that perfectly with my "broken lid" laptop, which is a well maintained machine, typing these very words on it. So I can vouch that at least for Sony TVs in the KD or KDL series XD, XE, XF, XG (most of them launched a few years ago), you can use them just fine without internet, and you can even update them. You can also turn off Bluetooth and prevent the TV from advertising its presence. Don't know about the newer OLED and QLED devices, you should try them on in the store.

pwdisswordfish9 5y ago
What do you need security updates for if you don’t connect it to the Internet?
- tomnipotent 5y ago
  Updates include more than just security fixes.
  - spurgu 5y ago
    Yes but to nitpick he already mentioned bugfixes and file format support alongside security fixes (which he wouldn't/shouldn't need). :)
    - yholio 5y ago
      I disagree. You can have security bugs in non-connected devices, for example crafted file formats or metadata that can carry executable payload, worms that force their way in though some insecure Bluetooth receiver, or even by infecting the myriad data channels embedded in modern broadcasting; access to such a broadcast stream might be very lucrative since it will give you access to tens of thousands to tens of millions of devices. I agree that the target is low value and that the attacker will most likely not bother infecting Android TVs; he would need to force them to connect to WiFi to exfiltrate any data, a very complex and unlikely attack if your TV is not used to monitor uranium centrifuge data.

by yholio 5y ago

pwdisswordfish9 5y ago

What do you need security updates for if you don’t connect it to the Internet?

tomnipotent 5y ago
Updates include more than just security fixes.
- spurgu 5y ago
  Yes but to nitpick he already mentioned bugfixes and file format support alongside security fixes (which he wouldn't/shouldn't need). :)
  - yholio 5y ago
    I disagree. You can have security bugs in non-connected devices, for example crafted file formats or metadata that can carry executable payload, worms that force their way in though some insecure Bluetooth receiver, or even by infecting the myriad data channels embedded in modern broadcasting; access to such a broadcast stream might be very lucrative since it will give you access to tens of thousands to tens of millions of devices. I agree that the target is low value and that the attacker will most likely not bother infecting Android TVs; he would need to force them to connect to WiFi to exfiltrate any data, a very complex and unlikely attack if your TV is not used to monitor uranium centrifuge data.