5 ms·

How do you get your TV to trust the self signed cert?

boesboes 3y ago
It would not surprise me if most TVs don't check. I remember LG or Samsung using unencrypted FTP to upload viewing data a few years back, so unverified TLS would be an improvement >_<
- leni536 3y ago
  This should be a scandal if true.
  - jackweirdy 3y ago
    Definitely should be checking certs, though I always worry about the flip side of these device security decisions. if there is no way to update the trusted root certs, your TV becomes terminally ill with software ewaste disease when the manufacturer updates stop coming. I really don’t like hardware becoming waste because we don’t have a better iot cert pool update story I trust YouTube to know how to bake their own cert and trustworthy tls libraries into their apps but I’m not sure if that’s common in other apps
    - cassianoleal 3y ago
      The hardware doesn't need to go to waste. At that point, cut all its connections from the Internet and use it as a dumb panel. Many people will say you should have never connected it in the first place anyway. You can alway use a streamer box (custom Linux one, Apple TV, Fire Stick, etc) to give it "smarts".
  - arcanemachiner 3y ago
    Here's a good one about TCL: https://sick.codes/extraordinary-vulnerabilities-discovered-in-tcl-android-tvs-now-worlds-3rd-largest-tv-manufacturer/ https://sick.codes/extraordinary-vulnerabilities-discovered-...
- detuur 3y ago
  I'm pretty sure they don't check certs. If they did, there would be many corporate networks and even entire countries where they wouldn't work, because they use DPI on all inbound/outbound connections with SSL stripping.
ComputerGuru 3y ago
I have asked this question repeatedly every time someone mentions inspecting TV meteor requests via a LAN proxy and never received a satisfactory answer.. If there are known exploits for the TV (a bunch are now running old and unpatched Android), the answer is easy enough (root it and do what you want - though that opens different and maybe easier options for ad stripping), but I’ve heard of it on Apple TV where jailbreaking isn’t so easy. Perhaps MDM deployments?
amichal 3y ago
I believe the article shows screenshots of it in Apple TV (at least) Looks like it uses the method in this article https://developer.apple.com/library/archive/qa/qa1948/_index.html https://developer.apple.com/library/archive/qa/qa1948/_index... but i have not (yet) tried it
- ajkblue 3y ago
  I followed this guide on how to install a self-signed certificate and setup the routing to my proxy server on an Apple TV: https://lucaslegname.github.io/mitmproxy/2020/04/10/mitmproxy.html https://lucaslegname.github.io/mitmproxy/2020/04/10/mitmprox... TL;DR it involves using Apple Configuration to make a custom mobileconfig profile to point to your proxy and then also installing the certificate with the same method.

It would not surprise me if most TVs don't check. I remember LG or Samsung using unencrypted FTP to upload viewing data a few years back, so unverified TLS would be an improvement >_<

leni536 3y ago
This should be a scandal if true.
- jackweirdy 3y ago
  Definitely should be checking certs, though I always worry about the flip side of these device security decisions. if there is no way to update the trusted root certs, your TV becomes terminally ill with software ewaste disease when the manufacturer updates stop coming. I really don’t like hardware becoming waste because we don’t have a better iot cert pool update story I trust YouTube to know how to bake their own cert and trustworthy tls libraries into their apps but I’m not sure if that’s common in other apps
  - cassianoleal 3y ago
    The hardware doesn't need to go to waste. At that point, cut all its connections from the Internet and use it as a dumb panel. Many people will say you should have never connected it in the first place anyway. You can alway use a streamer box (custom Linux one, Apple TV, Fire Stick, etc) to give it "smarts".
- arcanemachiner 3y ago
  Here's a good one about TCL: https://sick.codes/extraordinary-vulnerabilities-discovered-in-tcl-android-tvs-now-worlds-3rd-largest-tv-manufacturer/ https://sick.codes/extraordinary-vulnerabilities-discovered-...
detuur 3y ago
I'm pretty sure they don't check certs. If they did, there would be many corporate networks and even entire countries where they wouldn't work, because they use DPI on all inbound/outbound connections with SSL stripping.

ComputerGuru 3y ago

I have asked this question repeatedly every time someone mentions inspecting TV meteor requests via a LAN proxy and never received a satisfactory answer.. If there are known exploits for the TV (a bunch are now running old and unpatched Android), the answer is easy enough (root it and do what you want - though that opens different and maybe easier options for ad stripping), but I’ve heard of it on Apple TV where jailbreaking isn’t so easy. Perhaps MDM deployments?

amichal 3y ago

I believe the article shows screenshots of it in Apple TV (at least) Looks like it uses the method in this article https://developer.apple.com/library/archive/qa/qa1948/_index.html https://developer.apple.com/library/archive/qa/qa1948/_index... but i have not (yet) tried it

ajkblue 3y ago
I followed this guide on how to install a self-signed certificate and setup the routing to my proxy server on an Apple TV: https://lucaslegname.github.io/mitmproxy/2020/04/10/mitmproxy.html https://lucaslegname.github.io/mitmproxy/2020/04/10/mitmprox... TL;DR it involves using Apple Configuration to make a custom mobileconfig profile to point to your proxy and then also installing the certificate with the same method.