fn-mote
4 hours ago
As far as I can tell, there is no write up. This is a reddit post with screenshots of a Twitter/X post by @log4j. Even the Twitter post doesn’t seem informative, but Reddit isn’t a source for the information by any means.
The original link was on HN two days ago with no traction.
mikeryan
3 hours ago
So a bit of background I spent the last 17 years going Smart TV app development.
Not a lot here is any sort of surprise to anyone in the industry.
Always on audio is common on a whole swath of devices - any that want to do Alexa style voice prompts need it. ACR is table stakes for modern TVs reselling viewer data has driven down TV prices to the point where there is no going back.
The policy file here is how you build Tizen apps. It’s a list of specific features your app needs access to and certain levels of access (controlling the TV For example) require different levels of contractual relationships with Samsung.
Everything Samsung collects should be covered in their, very dense, TOS.
nostrademons
a minute ago
I spent a couple years working at the platform (AndroidTV + Google Assistant) level on smart TVs.
> any that want to do Alexa style voice prompts need it
Not technically true. More modern smart TVs (~post-2021) put speech recognition models for the hotword only onto the DSP, and then have the DSP wake up the CPU for further auditory processing when it detects a hotword or remote button press. There are major power-efficiency benefits to this, because the DSP uses a fraction of a watt and can easily keep running while the TV is sleeping, while the CPU, Internet, and rest of the circuitry is a major power hog. Your smart TV or streaming dongle would basically never sleep if it were forever running the audio capture.
For that matter, it's pretty rare for the device to actually run the speech recognition models on-device. Smart TV manufacturers are very sensitive to BOM costs, which means that their hardware is only powerful enough to run machine-learning models at the extreme high end of their product range. Most of the time the full audio gets streamed back to the Internet and the speech recognition & voice assistant gets run in the cloud, with commands streamed back to the TV.
I won't say that it never has always-on audio listening; a significant number of devices I tested did. But I'll say this comes because they're poorly implemented. The DSP hotwording approach requires coordination between hardware and software developers, oftentimes across companies, and it's more complex to implement and a lot of executives don't care about the marginal consumer benefit it gives. Many smart TVs just guzzle power when they're off instead.
Craighead
2 hours ago
Except it's not covered in their TOS
throw101010
2 hours ago
Oh no, how will Samsung survive this, they will have to send $5 to few thousands of people for the damages if they decide to start a class action lawsuit and if a judge/jury decides it was really causing damages... as a reminder Samsung Electronics made almost 250 B-B-B-B-illion dollars in revenues just last year.
janalsncm
23 minutes ago
Maybe not the same exploit but I found another guy who was also able to debloat his TV: https://github.com/jss8649/quiet-tizen
MrBuddyCasino
30 minutes ago
A little bit of traction https://news.ycombinator.com/item?id=50193579
assimpleaspossi
3 hours ago
I always advise people to never, ever use Reddit as a reference for anything.
bix6
2 hours ago
Why and what reference do you rec instead? Even this site gets fake news that stays up for hours.
assimpleaspossi
2 hours ago
I would avoid and distrust most social forums, such as reddit, that have Pookas which are fond of rumpots, crackspots and how are you bix6? -- https://www.youtube.com/watch?v=NeEsx2QLJ40
joshspankit
2 hours ago
Sure, ‘knee-jerk’ reddit is unreliable, but many upvotes over time with supporting comments can be a strong signal of truth
brightball
an hour ago
It’s unfortunately only a symbol of bot activity or popularity with the crowd in the subreddit.
bryan_w
2 hours ago
What do you mean? I can post whatever I want on Reddit and I can make it have as many upvotes as I need. They basically make bot farms undetectable, by hiding histories and automatic username selection. Literally nothing should be considered truth with Reddit as its only source
1970-01-01
43 minutes ago
Why? Their system is literally mined for its Q&A merit by search engines. If it was all very bad information, NYSE: RDDT would not exist.