3 ms·

> and information about other devices connected to the same network They may also be doing more nefarious things, but this might just mean it watches for U

> __and information about other devices connected to the same network__ They may also be doing more nefarious things, but this might just mean it watches for UPNP and other announcement-broadcast messages on your network (like, say, mdns).

birdman3131 4y ago
They use this for the remote feature in the app. You can control roku's on your network without being signed into the roku account tied to the device iirc. (At least. Not saying they are not doing anything else bad, Just that there is a valid use.)
Syonyk 4y ago
The rest of their "Haha, you bought one of our devices, all your data is ours!" policy doesn't give me much cause to give them the benefit of the doubt here. At least some people [0] have reported their Roku device scanning their network, which is explicitly allowed in that policy. Though you can probably do a lot of it passively without leaving those annoying traces. Once they've granted themselves permissions to do it, why wouldn't you? Knowing a house is an Apple household with a lot of devices probably means they've got money, or at least a willingness to take on debt. You can get a sense of when devices come and go to help identify activity, and if you're particularly annoying, you could snoop wireless signal strength of other devices on the LAN to get an idea of who's in the room with you. If it's only got a few Androids and Chromebooks, well, probably lower income. If you can't find a thing on the LAN, you're probably in the house of a computer security researcher and should behave. Etc. If they meant to say "We watch for UPNP announcements to identify other content sources on your LAN," they could have said that. But they didn't. They left the door wide open to do whatever home LAN analysis they think they can get away with. I mean, this is a company whose response to the "Do Not Track" bit is to ignore you [1]. No standards? It's literally in the name. > Do Not Track > Some Internet browsers include the ability to transmit “Do Not Track” signals. Since uniform standards for “Do Not Track” signals have not been adopted, the Roku Sites do not currently process or respond to “Do Not Track” signals. [0]: https://community.roku.com/t5/Wi-Fi-connectivity/Roku-Device-Port-Scanning-Home-Network/td-p/709018 https://community.roku.com/t5/Wi-Fi-connectivity/Roku-Device... [1]: https://docs.roku.com/published/cookiepolicy/en/us https://docs.roku.com/published/cookiepolicy/en/us
- JohnFen 4y ago
  > At least some people [0] have reported their Roku device scanning their network, which is explicitly allowed in that policy. Not just no, but hell no. I would 100% interpret that behavior as the prelude to an attack.

> __and information about other devices connected to the same network__ They may also be doing more nefarious things, but this might just mean it watches for U

birdman3131 4y ago

They use this for the remote feature in the app. You can control roku's on your network without being signed into the roku account tied to the device iirc. (At least. Not saying they are not doing anything else bad, Just that there is a valid use.)

Syonyk 4y ago

The rest of their "Haha, you bought one of our devices, all your data is ours!" policy doesn't give me much cause to give them the benefit of the doubt here. At least some people [0] have reported their Roku device scanning their network, which is explicitly allowed in that policy. Though you can probably do a lot of it passively without leaving those annoying traces. Once they've granted themselves permissions to do it, why wouldn't you? Knowing a house is an Apple household with a lot of devices probably means they've got money, or at least a willingness to take on debt. You can get a sense of when devices come and go to help identify activity, and if you're particularly annoying, you could snoop wireless signal strength of other devices on the LAN to get an idea of who's in the room with you. If it's only got a few Androids and Chromebooks, well, probably lower income. If you can't find a thing on the LAN, you're probably in the house of a computer security researcher and should behave. Etc. If they meant to say "We watch for UPNP announcements to identify other content sources on your LAN," they could have said that. But they didn't. They left the door wide open to do whatever home LAN analysis they think they can get away with. I mean, this is a company whose response to the "Do Not Track" bit is to ignore you [1]. No standards? It's literally in the name. > Do Not Track > Some Internet browsers include the ability to transmit “Do Not Track” signals. Since uniform standards for “Do Not Track” signals have not been adopted, the Roku Sites do not currently process or respond to “Do Not Track” signals. [0]: https://community.roku.com/t5/Wi-Fi-connectivity/Roku-Device-Port-Scanning-Home-Network/td-p/709018 https://community.roku.com/t5/Wi-Fi-connectivity/Roku-Device... [1]: https://docs.roku.com/published/cookiepolicy/en/us https://docs.roku.com/published/cookiepolicy/en/us

JohnFen 4y ago
> At least some people [0] have reported their Roku device scanning their network, which is explicitly allowed in that policy. Not just no, but hell no. I would 100% interpret that behavior as the prelude to an attack.