6 ms·

The implications are troubling. Your TV collects and broadcasts for the permanent record of anyone who can snoop the cleartext (your neighbors, your ISP, whatev

The implications are troubling. Your TV collects and broadcasts for the permanent record of anyone who can snoop the cleartext (your neighbors, your ISP, whatever the NSA looks like in your country, etc) all the media it can find on your network. We used to need firewalls at the edges of our home networks to keep bad actors out. Now we need firewalls that point the other direction to keep the bad actors on our networks in.

1qaz2wsx3edc 13y ago
Or boycott LG and any businesses that acts in this manor.
- ZoF 13y ago
  Hey man; it's manner, not manor. Manor is more akin to a large house or mansion. I am often hesitant to offer this kind of correction because I feel like it sometimes sounds conceited, or as if I am trying to be superior to you somehow. I honestly don't feel that way and am just offering the correction because I feel like I would like to be corrected myself. I respect you for having learned a second language, it's more than I can say for myself.
  - dschuler 13y ago
    Unless he lives in a manor, then it works actually. But my witty jokes aside, that reminds me of Little Snitch for Mac OS, which keeps installed programs from opening unauthorized connections to the outside. Is there a firewall setup that works this way for an entire home network? Possibly something that could be run on a small device/router?
    - JonnieCache 13y ago
      That's just called a firewall. You will probably enjoy http://www.pfsense.org/ http://www.pfsense.org/
  - Amadou 13y ago
    You know "manor" is an apropos typo, signifying LG being haughty, privileged and out-of-touch living in this really expensive house they built with the money from paying customers that they are treating like cyber-peasants. I wish I knew a name for a homophonic typo which suggests criticism in that way, I used to know a guy who made typos like that all the time, emails from him had a kind of surreal meta-level quality to them. It is kind of a mondegreen, but not quite. https://en.wikipedia.org/wiki/Mondegreen https://en.wikipedia.org/wiki/Mondegreen
    - DanBC 13y ago
      eggcorn? http://eggcorns.lascribe.net/ http://eggcorns.lascribe.net/ Example > When all is set and done
  - omegote 13y ago
    You'll find that people that have english as their first language tend to make that kind of mistakes more often than people who have it as a second language. In my case, for example, my first language is spanish, where everything sounds as it's written. When I see mistakes like writing "manor" instead of "manner", or "should of" instead of "should have" I can't help but think that I would never make that kind of mistake, because of the way people learn english as a second language in comparison to a first language.
    - deleted 13y ago
      [deleted]
    - glogla 13y ago
      This might be also because you learned English when you already knew how to read, which isn't the case for people learning it as a first language.
  - millerm 13y ago
    I think it's just a marvelous pun!
  - flatfilefan 13y ago
    How do you know it wasn't manure what he meant? :-)
  - dhughes 13y ago
    Although manor is oddly apt, don't dare act up in my manor!
- rmc 13y ago
  Or if you're in the EU, where this sort of thing is quite likely to be illegal, complain to your local Data Protection Commissioner.
ams6110 13y ago
Good firewalls should always block unwanted traffic whether it's inbound or outbound. This is not anything new, but you're right that most people trust the devices they own. Not anymore.
- mmagin 13y ago
  Good luck making that easy for the end-user to configure.
  - mbillie1 13y ago
    Yep you've basically refuted the idea of personal security due to a vague insinuation of how "most people" trust their electronics. Or did you have anything constructive to add?
    - mmagin 13y ago
      Sorry, I should have said: "Historically it's been very difficult to make detailed firewall configuration user-friendly. As a result, we've lived with the simplistic compromise of 'allow outgoing connections, don't allow incoming connections'. It seems like it's going to require some incredible new firewall configuration interface if we hope to make it possible for the ordinary clueless computer user to properly configure outgoing firewall rules."
  - w_t_payne 13y ago
    We have to assume that our lives are public; and that we have no secrets from those who want to get them the most (i.e. bad actors). We are vulnerable and weak, and had better get used to the idea that we can be f*cked over at will by whosoever takes a fancy to the idea.
  - gizmo686 13y ago
    I think this is something of a chicken and egg problem. The basic firewall UI is allow <computer> to use <port> for <incoming|outgoing>. This interface can be made very easy to use. The problem is that if this was the default then programs would simply not work, and users would not know why. However, if it became standard, then programs would tell users to check their firewall, and can even tell users the information that they need to fill into the firewall (eg. name of computer, port, ...). Conceivably, you could define an protocol for devices to request an opening. This protocol could include a way of sending the password.
sdoering 13y ago
A good friend of mine did exactly that for a network some 15 years ago. He called it his "waterwall". It was for some kind of internet-cafe. But that we seem to need this nowadays for our private homes, troubles me. What is this with the attitude, that it is ok, to view into the innermost privacy-sphere of your customers? Sorry, but LG is dead and gone for me. A company, that converts its paying customers into a product, ready to be sold to some advertiser just sickens me. What comes next? Automatically detecting, when people no longer look at the screen, via a camera, to stop the showing of ads and resume, when people return in front of the screen? Or to detect how many people are watching (as Microsoft had patented)? What happened to good old: We build one thing, sell it and that is fine. Why does everybody have to be an advertising-company, trying to maximize this revenue stream on the back of the live(data) of its paying customers?
- tempestn 13y ago
  I suspect that this is the result of incompetence on their part rather than an actual intent to log private data. Either way though, obviously not good.
  - sdoering 13y ago
    I do understand, that most seemingly malicious intend has its roots in incompetence. In an answer to German press-inquiries, LG states, that the feature will stay. The only thing, they will change is, that disabling the feature really disables it. They stated, that this was a bug. And I actually believe this. I did not allege, it was malicious intend. My real argument was, that I am more then happy, to pay good money for a good TV. But that I see no reason, why I should have to pay with my data as well (not being informed on that by the way, when buying this TV) and with this feature being enabled by default. Sidenote: They told the German press, that the receiving server dropped the information, when the feature was disabled. They never told anyone, how the server should have been able to do that. As far, as I could see, the requests did not change, when deactivating that feature.
    - coldpie 13y ago
masklinn 13y ago
> Now we need firewalls that point the other direction to keep the bad actors on our networks in. That's not recent, most firewall do outbound traffic as well, and there are software solely dedicated to outbound traffic management, e.g. http://www.obdev.at/products/littlesnitch/index.html http://www.obdev.at/products/littlesnitch/index.html
- narag 13y ago
  The real difference is not between outbound and inbound. Classical firewalls have been blocking outbound connections depending on ports since forever. Firewalls for Windows (I first saw it in ZoneAlarm) introduced application specific filtering. So you can allow one application to connect to HTTP servers and disallow another application from doing the same. Edit: I was just reading this article an hour ago, about how to programmatically add rules to Windows built-in firewall using Delphi: http://theroadtodelphi.wordpress.com/2013/11/21/using-the-windows-firewall-with-advanced-security-scripting-api-and-delphi/ http://theroadtodelphi.wordpress.com/2013/11/21/using-the-wi...

1qaz2wsx3edc 13y ago

Or boycott LG and any businesses that acts in this manor.

ZoF 13y ago
Hey man; it's manner, not manor. Manor is more akin to a large house or mansion. I am often hesitant to offer this kind of correction because I feel like it sometimes sounds conceited, or as if I am trying to be superior to you somehow. I honestly don't feel that way and am just offering the correction because I feel like I would like to be corrected myself. I respect you for having learned a second language, it's more than I can say for myself.
- dschuler 13y ago
  Unless he lives in a manor, then it works actually. But my witty jokes aside, that reminds me of Little Snitch for Mac OS, which keeps installed programs from opening unauthorized connections to the outside. Is there a firewall setup that works this way for an entire home network? Possibly something that could be run on a small device/router?
  - JonnieCache 13y ago
    That's just called a firewall. You will probably enjoy http://www.pfsense.org/ http://www.pfsense.org/
- Amadou 13y ago
  You know "manor" is an apropos typo, signifying LG being haughty, privileged and out-of-touch living in this really expensive house they built with the money from paying customers that they are treating like cyber-peasants. I wish I knew a name for a homophonic typo which suggests criticism in that way, I used to know a guy who made typos like that all the time, emails from him had a kind of surreal meta-level quality to them. It is kind of a mondegreen, but not quite. https://en.wikipedia.org/wiki/Mondegreen https://en.wikipedia.org/wiki/Mondegreen
  - DanBC 13y ago
    eggcorn? http://eggcorns.lascribe.net/ http://eggcorns.lascribe.net/ Example > When all is set and done
- omegote 13y ago
  You'll find that people that have english as their first language tend to make that kind of mistakes more often than people who have it as a second language. In my case, for example, my first language is spanish, where everything sounds as it's written. When I see mistakes like writing "manor" instead of "manner", or "should of" instead of "should have" I can't help but think that I would never make that kind of mistake, because of the way people learn english as a second language in comparison to a first language.
  - deleted 13y ago
    [deleted]
  - glogla 13y ago
    This might be also because you learned English when you already knew how to read, which isn't the case for people learning it as a first language.
- millerm 13y ago
  I think it's just a marvelous pun!
- flatfilefan 13y ago
  How do you know it wasn't manure what he meant? :-)
- dhughes 13y ago
  Although manor is oddly apt, don't dare act up in my manor!
rmc 13y ago
Or if you're in the EU, where this sort of thing is quite likely to be illegal, complain to your local Data Protection Commissioner.

ams6110 13y ago

Good firewalls should always block unwanted traffic whether it's inbound or outbound. This is not anything new, but you're right that most people trust the devices they own. Not anymore.

mmagin 13y ago
Good luck making that easy for the end-user to configure.
- mbillie1 13y ago
  Yep you've basically refuted the idea of personal security due to a vague insinuation of how "most people" trust their electronics. Or did you have anything constructive to add?
  - mmagin 13y ago
    Sorry, I should have said: "Historically it's been very difficult to make detailed firewall configuration user-friendly. As a result, we've lived with the simplistic compromise of 'allow outgoing connections, don't allow incoming connections'. It seems like it's going to require some incredible new firewall configuration interface if we hope to make it possible for the ordinary clueless computer user to properly configure outgoing firewall rules."
- w_t_payne 13y ago
  We have to assume that our lives are public; and that we have no secrets from those who want to get them the most (i.e. bad actors). We are vulnerable and weak, and had better get used to the idea that we can be f*cked over at will by whosoever takes a fancy to the idea.
- gizmo686 13y ago
  I think this is something of a chicken and egg problem. The basic firewall UI is allow <computer> to use <port> for <incoming|outgoing>. This interface can be made very easy to use. The problem is that if this was the default then programs would simply not work, and users would not know why. However, if it became standard, then programs would tell users to check their firewall, and can even tell users the information that they need to fill into the firewall (eg. name of computer, port, ...). Conceivably, you could define an protocol for devices to request an opening. This protocol could include a way of sending the password.

sdoering 13y ago

A good friend of mine did exactly that for a network some 15 years ago. He called it his "waterwall". It was for some kind of internet-cafe. But that we seem to need this nowadays for our private homes, troubles me. What is this with the attitude, that it is ok, to view into the innermost privacy-sphere of your customers? Sorry, but LG is dead and gone for me. A company, that converts its paying customers into a product, ready to be sold to some advertiser just sickens me. What comes next? Automatically detecting, when people no longer look at the screen, via a camera, to stop the showing of ads and resume, when people return in front of the screen? Or to detect how many people are watching (as Microsoft had patented)? What happened to good old: We build one thing, sell it and that is fine. Why does everybody have to be an advertising-company, trying to maximize this revenue stream on the back of the live(data) of its paying customers?

tempestn 13y ago
I suspect that this is the result of incompetence on their part rather than an actual intent to log private data. Either way though, obviously not good.
- sdoering 13y ago
  I do understand, that most seemingly malicious intend has its roots in incompetence. In an answer to German press-inquiries, LG states, that the feature will stay. The only thing, they will change is, that disabling the feature really disables it. They stated, that this was a bug. And I actually believe this. I did not allege, it was malicious intend. My real argument was, that I am more then happy, to pay good money for a good TV. But that I see no reason, why I should have to pay with my data as well (not being informed on that by the way, when buying this TV) and with this feature being enabled by default. Sidenote: They told the German press, that the receiving server dropped the information, when the feature was disabled. They never told anyone, how the server should have been able to do that. As far, as I could see, the requests did not change, when deactivating that feature.
  - coldpie 13y ago

masklinn 13y ago

> Now we need firewalls that point the other direction to keep the bad actors on our networks in. That's not recent, most firewall do outbound traffic as well, and there are software solely dedicated to outbound traffic management, e.g. http://www.obdev.at/products/littlesnitch/index.html http://www.obdev.at/products/littlesnitch/index.html

narag 13y ago
The real difference is not between outbound and inbound. Classical firewalls have been blocking outbound connections depending on ports since forever. Firewalls for Windows (I first saw it in ZoneAlarm) introduced application specific filtering. So you can allow one application to connect to HTTP servers and disallow another application from doing the same. Edit: I was just reading this article an hour ago, about how to programmatically add rules to Windows built-in firewall using Delphi: http://theroadtodelphi.wordpress.com/2013/11/21/using-the-windows-firewall-with-advanced-security-scripting-api-and-delphi/ http://theroadtodelphi.wordpress.com/2013/11/21/using-the-wi...