17 ms·
Show HN: RootMy.TV
- seFausto 5y agoWhat are the advantages of rooting a WebOS tv? I tried googling, but didn't find anything concrete.
- gattilorenz 5y agoInstalling the non-ad-crippled YouTube alternative client, for example
- beranabus 5y agoCan you please elaborate? I couldn't find anything on this
- gattilorenz 5y agoIt's one of the (few) apps on the Homebrew repository that gets installed (the repo, not the app) by default after you root: https://repo.webosbrew.org/apps/ https://repo.webosbrew.org/apps/ I tested it briefly yesterday evening, seems to work fine.
- Retr0id 5y agoOur "killer app" thus far, in terms of useful things that actually require root, is PicCap [1] - which enables low-latency framebuffer capture for DIY Ambilight systems. In the just-for-fun department, you can replace the default screensaver animation with a bouncing DVD logo. [2] You can see a list of currently available homebrew apps here: https://repo.webosbrew.org/apps/ https://repo.webosbrew.org/apps/ You can also block telemetry, updates, etc. (without relying on something like a pihole). [1] https://github.com/TBSniller/piccap https://github.com/TBSniller/piccap [2] https://github.com/webosbrew/custom-screensaver https://github.com/webosbrew/custom-screensaver
- alias_neo 5y agoHow does one block telemetry? I rooted my TV with this and set up SSH but I don't see any telemetry blocking configuration. I also want to install my own CA to the TV but the obvious location is read-only.
- Retr0id 5y agoSome telemetry is blocked unconditionally during startup, although it is incomplete [1] (Perhaps I was a bit over-optimistic when I said a pihole was not required). Custom CA certs are possible, which people on older models have been using to work around issues stemming from the X3 cert expiry [2]. [1] https://github.com/RootMyTV/RootMyTV.github.io/issues/19 https://github.com/RootMyTV/RootMyTV.github.io/issues/19 [2] https://github.com/tf318/lg https://github.com/tf318/lg
- alias_neo 5y agoI used to have everything blocked using PiHole but recently moved to a pfSense router, I guess I just need to block some hosts again. Thanks for the links!
- gerdesj 5y agopfblocker-ng devel. Run the startup wizard to get a pretty safe ruleset running quickly.
- alias_neo 5y agoI'm running pfBlockerNG already but not devel. Is that the key?
- gerdesj 5y agoDevel is a lot better. It has a wizard to get you started that is excellent and loads of other stuff. Disable the dynamic DNS options for DHCP on the DNS resolver to avoid problems with Python modules in the DNS resolver (unbound). Untick the box for leaving config behind and uninstall pfb not devel. Install pfb devel. Go to Firewall -> pfblockerng-devel and you will be presented with a wizard. Take the defaults but do indicate your WANS and LANS when they are asked for. You'll get a great basic PRI1 ruleset setup and DNS blocking too, out of the box. I recommend adding "TOR/Tor Project Bulk Exit List" - block inbound on WAN as soon as you work out how to do it. There is a vast amount of built in rule set links. Give them a go. If you want easy then go for block on inbound and/or outbound on all rules but if you need some flexibility then go for aliases and make your own rules.
- AshamedCaptain 5y agoStupid things blocked by the default software on my webOS LG TV that would probably be single-line patches if I had access to the source code: - Support for simultaneous audio output on both headphone port and internal speaker - Support for arbitrary bluetooth headsets instead of only LG-approved headsets ... sometimes I just think StallmanWasRight.
- grawlinson 5y agoYou can add this to the list: - An update to ca-certificates due to Let's Encrypt's X3 certificate expiring. That broke Plex on my LG TV.
- riverdweller 5y agoIf you’ve rooted it, you can fix the CA cert issue with this: https://github.com/tf318/lg https://github.com/tf318/lg
- mrweasel 5y agoJust wait until someone release a PornHub application, 50% of LG TVs will rooted over night.
- milleramp 5y agoDoes this remove LG’s annoying remote pointer thing? I use appleTV but I would do this just to get rid of that stupid thing.
- hardenedmetapod 5y agoThe air mouse is the defining feature of WebOS... It's a slight side to side shake to enable it and then once you get used to the controls it is much better than navigating via arrow keys.
- milkytron 5y agoThis is great, and makes me regret switching to Rokus. When I had an AndroidTV and could root, so much capability was unlocked, I really miss it. I also loved WebOS since it's mobile days, will definitely consider getting an LG WebOS TV as my next.
- candiddevmike 5y agoI have a TCL Roku TV and would love to convert it to a dumb input selector. Not sure how you could flash the OS of it but I'd gladly contribute money or code to make it happen.
- jrm4 5y agoI'm with you on this. But just to be sure.. They do have a button. It's on the bottom direct center, tiny and slightly further back than you would expect. Press it and you can cycle through your inputs, and turn it off. You may have already known this -- but it's pretty clear that they're not interested in making this a popularly known thing. Or I'm just the idiot :)
- candiddevmike 5y agoI don't have that on my remote, I think? I have back, mute, asterisk, backwards, play, forwards below the dpad.
- wildzzz 5y agoIt's a button under the bottom of the TV, right behind the logo. It's the only button physically on the TV usually for TCL.
- xnx 5y agoHow would a dumb input selector be different than removing the wifi password from the TV? (asking because I have a TCL Roku TV myself)
- 5y ago
- yjftsjthsd-h 5y agoAw, darn; I was hoping for a generic wiki of TVs and how to root them and (in my dream world) alternative firmware options. Not that rooting webOS isn't cool, just not what I expected based on the domain.
- kkarpkkarp 5y agoexactly the same here :)
- mnd999 5y agoMe too. Anyone know how to root an old Panasonic plasma?
- deleted 5y ago[deleted]
- trevcanhuman 5y agoYeah. Anyone know how to root a Sony Bravia TV ? It’s running Android TV. But it’s slow and lags and don’t know why.
- user_7832 5y agoNot really a solution to your specific case but if you're using an old version of android and the Linux kernel you can look at known vulnerabilities and build through them if you're skilled enough. I also remember some people had gained root access on Sony phones for getting drm keys before unlocking their bootloader - because of a known Linux kernel exploit - you can try searching on XDA for that. Though be careful, because worst case you have a very fancy paper/deskweight.
- trevcanhuman 5y agoThanks for the reply, although unfortunately my TV is pretty recent, bought it new about 3 years ago and has been updated less than a year ago. I’ve looked through guides but I honestly haven’t found any good websites that explain any know vulnerabilities to recent Android TVs.
- k4rli 5y agoUnfortunately no longer works on latest webOS releases.
- hardenedmetapod 5y agoThis was just updated when it was posted 3 hours ago. Pretty much any TV and OS can be exploited. Even up to date.
- eof 5y agoI just ran the update for my TV this morning, and this worked for me.
- Retr0id 5y agoIf you tested the latest release and it didn't work, please open a Github issue.
- hardenedmetapod 5y agoHappy to have helped test this release. Bought a 43" just to mess with all of this on. Has been a fantastic experience. Devs are great and it has been fun seeing what all I can run.
- theWreckluse 5y agoWhat did you run?
- hardenedmetapod 5y agoRetroArch, a test VNC server, Space Cadet Pinball. Pretty much if it uses SDL2, it can be compiled and run.
- johnnyApplePRNG 5y agoCan any website gain root access to your television simply by visiting/drive by download?
- jonatron 5y agoI'm still using an ancient netcast based LG TV, which it's also possible to root with a few different methods. AFAIK there's no public information on how to do it, maybe I'll see about making it public too.
- tentacleuno 5y agoPlease do! Fellow owner of a Netcast-based LG here.
- jonatron 5y agoCheck #netcast of openlgtv discord, it's explained in there
- f1refly 5y agoI just got my hand on an early 2021 WebOS tv, very excited to try this tomorrow! I think it's a tragedy we can't even fully own tvs anymore without dirty tricks.
- Terry_Roll 5y agoI guess this would make it possible to ransomware LG tv's by simply visiting a website.
- f0e4c2f7 5y agoWow. This is amazing. I guess I have to buy LG tv's from now on.
- LargoLasskhyfv 5y agoWhile owning no TV since 1996 this makes me smile :-)
- xanaxagoras 5y agoThis looks really cool, but after I first learned about Automatic Content Recognition and all the ridiculous anti-privacy things these smart TVs do, I adopted a policy: A TV is a big dumb monitor, that's it, and it never ever gets internet access. So, for better or for worse, all of my TV needs go through an Apple TV, and I block Apple's 17.0.0.0/8 for that client just in case it wants to get a little too chatty about my habits with Apple. YouTube is AFAIK the only thing on there that's able to spy on me, mitigated to some extent I hope with pi hole, and 90% of the time I'm in plex or an IPTV client.
- lrvick 5y agoThere was a long history of "jailbreakme" sites where one would "slide to jailbreak" their Apple devices because of their long history of under-investment in security. This site is a spoof of jailbreakme, so using Apple devices as a defense is an somewhat amusing choice.
- wiether 5y agoprivacy != security
- Retr0id 5y agoYou might want to build a faraday cage for it too - one can also exploit TVs that are not connected to the internet at all, via DVB-T. https://twitter.com/David3141593/status/1481993413843161092 https://twitter.com/David3141593/status/1481993413843161092
- ravenstine 5y agoTime to jam my soldering iron through the wireless chipset!
- jrockway 5y ago"Error 6942: Wireless chip authentication failed. Please visit an LG® Authorized Reseller™ to purchase a replacement Home Entertainment Destination."
- 323 5y agoI have a 2017 LG 43" TV and I'm a bit disappointed. Last year I think the back-light started breaking down - I see big square sections where the colors are less bright and purplish. The display seems to have a grid of 4x2 of these individual regions. And the remote buttons are getting harder to press too (it's not the battery). I had remotes which worked for 12 years, this one is barely 5 years old.
- wildzzz 5y agoAt least a remote is easy to swap out, either just replace from Amazon or eBay or just use a universal. Even my old HTC M8 had an IR blaster.
- tehwebguy 5y agoHave already committed to trying to fix my ~2012 dumb Samsung myself when it eventually fails, was happily surprised to find one or two solid YouTube channels dedicated to this.
- chitza 5y agoThe LED strips are replaceable (https://www.aliexpress.com/item/1005003706329242.html?spm=a2g0o.search0304.0.0.751a46b4wLuX4O&algo_pvid=5fe9000a-b843-4182-ab2e-151bce303ddd&algo_exp_id=5fe9000a-b843-4182-ab2e-151bce303ddd-1 https://www.aliexpress.com/item/1005003706329242.html?spm=a2...) I had my TV (similar to yours) fixed by replacing those bars, check with a TV repair shop in your area.
- 3guk 5y agoThe LED strips are somewhat replaceable - you should be able to find them on either eBay, AliExpress or ShopJimmy. I will warn you however that it's quite an involved process - I know a fair few people who have managed to crack their LCDs or rip ribbon cables in the process of trying to fix backlights. Unfortunately it seems that backlight issues are becoming more and more common - especially as most sets have a "Dynamic" mode or similar which sets the backlights to full brightness and drastically shortens their lives.
- deleted 5y ago[deleted]
- johnx5c 5y agoIs it possible to root and install locally via a local network or USB key so I don't have to connect my TV to the internet?
- j45 5y agoI now have another reason to buy a LG OLed. Upgradable and customizable smarts. Not mention WebOS
- m0ngr31 5y agoInteresting that they are using Enyo still. Had some fun using that back in the day.
- aorth 5y agoAwesome project. You can already install third-party applications in LG webOS TVs after enabling the "Developer Mode" application, but you have to keep renewing your session every 50 hours or else your apps get deleted. Pretty annoying. Now we can circumvent that. I'm wondering if we could use WireGuard on these TVs now. That would be sweet... Guessing the userland golang client would be trivial...
- aorth 5y agoAh, building wireguard-go is easy: $ export GOOS=linux GOARCH=arm GOARM=7 $ make Copy the binary to the TV over SSH and run it: # /tmp/wireguard-go wg0 # ip l show dev wg0 8: wg0: <POINTOPOINT,MULTICAST,NOARP> mtu 1420 qdisc noop state DOWN mode DEFAULT group default qlen 500 link/none Now I just need to cross-compile the wireguard-tools to get the wg command.
- ksala_ 5y agoIt’s cool that we can now root the latest firmwares, but the 50-hours limit for dev mode has an easy workaround. I’ve been meaning to blog about it, but basically use the webos sdk to ssh into the tv, get your tv session token stored in /var/luna/preferences/devmode_enabled and then have a cronjob somewhere that curl https://developer.lge.com/secure/ResetDevModeSession.dev?sessionToken=<token> https://developer.lge.com/secure/ResetDevModeSession.dev?ses... every day or so. This keep resetting the timeout - the dev mode app still shows the wrong countdown but apps will still open. Been using this for ad free YouTube for a few months.
- aorth 5y agoAh, I saw that trick on r/jellyfin this week and tried it, but noticed that the countdown wasn't reset and assumed the apps would get deleted. Well now I have root so it doesn't matter!
- anonymousiam 5y agoJust used this to root my 65" LG OLED. Works great! Looks like you can't change the root password (error writing /etc/shadow), but as the documentation says, you can load your authorized_keys and the password login is no longer allowed. I was sort of hoping that the cpu would still be reachable from the (wired) network while in standby, but it does not seem to be.
- Handytinge 5y agoWoL does work (ethernet and reportedly over wifi too), so it should be fairly simple to remote control when off if that's your plan.
- anonymousiam 5y agoI was only hoping to have another platform available, but it's not worth keeping the TV turned on all the time.
- DavidKarlas 5y agoCould I change functionality of buttons on remote with this? For example Amazon, Netflix or “Movies” with different app?
- DavidKarlas 5y agoI’m aware of shortcut long press # keys, but that only works once TV is powered on…
- account-5 5y agoIt should be RootMyLG.TV I can here for general TV rooting advice hoping I could sort out my rubbish Samsung. Anyone know anything about that?
- 3guk 5y agoCheck out the SammyGo stuff - https://forum.samygo.tv/ https://forum.samygo.tv/ - quite a trove of information relating to the Samsung firmwares.
- wodenokoto 5y agoI saw a retro station icon on the home brew channel. Can you connect a 8bitdo/PlayStation/Xbox controller to the tv?
- mariotaku 5y agoYes. It won't work in normal apps but will work in RetroArch/Moonlight etc
- mberning 5y agoI wish this worked for Vizio Smartcast.
- hestefisk 5y agoThis is very cool. What I hate the most about my LG is the ad bar that shows up on the left side of the screen as well as automatic installation of new apps. Will this jail break kill it?
- awiesenhofer 5y agoSomething I sometimes wondered but never really researched: are there any custom Roms like LineageOS etc. but for AndroidTVs?
- pabs3 5y agoIt would be nice if there were proper open source distros for TVs. Hopefully the GPL lawsuit against Vizio will get source code and install info, so that distros can run on them, perhaps with Kodi as the UI. It also hopes to set the precedent that anyone can sue over GPL violations, not just the copyright holder, which could help increase the available TVs that can have an open source distros, through further lawsuits by other folks. https://sfconservancy.org/copyleft-compliance/vizio.html https://sfconservancy.org/copyleft-compliance/vizio.html
- November-Echo 5y agoI only have a problem with the ads or so called "Trending" section. I do not have a subscription for Amazon Prime, Disney+ or whatever. Can I use this exploit to block the "Trending" section? I just want to see the apps that I have installed when I press home and nothing else.