防止智能电视被用于对付你
Stopping the smart TV from being used against you

原始链接: https://www.s-config.com/stopping-a-smart-tv-from-being-used-against-you/

这篇文章警告称,现代“智能电视”(特别是LG品牌)正成为传播垃圾软件和侵犯隐私的媒介。这些设备利用扩展显示标识数据(EDID)协议,诱导Windows系统自动下载所谓的“驱动程序”,而这些程序实际上是未经用户许可强制捆绑的臃肿软件或恶意软件,例如McAfee杀毒软件。 作者认为,制造商将消费者仅视为授权硬件的使用者,而非真正的所有者,并利用这些设备追踪用户行为及推送广告。为应对这一问题,作者提出了几项防御措施: * **硬件防护:** 在电视和电脑之间使用“EDID阻断器”,防止操作系统识别设备并触发恶意驱动程序的自动安装。 * **网络安全:** 将智能设备与互联网隔离,或使用强大的防火墙/DNS过滤服务。 * **软件选择:** 转向基于Linux的操作系统,以避免微软与硬件制造商之间的深度绑定。 * **生活方式改变:** 购买“哑”显示器(商用显示屏)、选择投影仪,或者干脆停止使用普通电视,从而摆脱监控和强制广告的生态系统。

这场讨论聚焦于硬件领域日益严重的“恶化”(enshittification)问题,特别是近期 LG 显示器和电视在连接 Windows 电脑时会自动触发安装不需要的软件所引发的争议。 与智能电视通过互联网连接进行监控的常见担忧不同,此问题在于显示器的 EDID(扩展显示识别数据)会向 Windows Update 发出信号,在显示器连接到电脑时,自动在后台下载并安装包括臃肿软件(bloatware)在内的配套应用程序。评论者指出,这是对微软“设备元数据”功能的滥用;该功能本意是简化驱动程序安装,现却被利用来强推第三方软件。 该讨论反映了人们对现代科技的普遍不满: * **制造商越权:** 各大公司日益将数据采集和广告收入置于设备功能之上。 * **操作系统助纣为虐:** 批评者认为,微软和其他操作系统供应商允许“驱动程序更新”中包含面向用户的应用程序,实际上是为这种行为提供了便利。 * **“非智能”替代方案:** 许多人建议让智能电视保持断网状态,改用专用的隐私友好型流媒体设备(如 Apple TV)或简单的家庭影院电脑(HTPC)。 用户强调,消费者不应为了维护隐私和系统完整性而去与自己的设备进行对抗。
相关文章

原文

Amid the overall electronics boom thanks to A.I., one piece of electronics is almost unchanged financially. That is the digital display or flat-panel monitor. With good reason! The entire entertainment and streaming industry wants one of these devices in your living room. Not only wanting access to your wallet; companies are willing to violate customer trust to squeeze a few extra pennies out of the devices they sold you. To these companies, you technically never really owned the device, but instead purchased permission from these companies to have it exist in your household. Like a true tech-valley rapist, they will break into your home, listen to everything you do via the microphone, track every movement that you make thanks to their backdoored OS, and most importantly, spread malware onto devices they don't even own.

Whoah S! Mal-ware? Isn't that a little harsh? - Anonymous

Malware, by definition, is software you never asked for and was installed without your permission. At least in LG's case. Using Legal Ninjitsu to state that by agreeing to install their monitor 'driver,' you also agree to install every other bloatware application that they choose should come with it as well. Like advertising, it takes a shit all over your desktop to churn profits for LG.

Read on to continue the descent into madness.

It all starts with going cheap.

Amazon searching for 75 inch TVs.

It didn't take a whole lot of searching on Amazon to find what appears to be a good deal on a 75-inch TV. We figured we'd go with 75 inches because, like every American household, it's a good idea to go big when purchasing a TV for your bathroom. Ahh, nothing like being on the shitter while catching eye strain from the TV that practically covers an entire side of the wall.

Sure enough, LG comes out on top with their (bullshit) AI upscaling and "Wow Orchestra," whatever that means. But $10 more than the Toshiba... WHY NOT RIGHT?!?

So you get this bad-boy home, hook it up to your laptop with Windows 11 so you can get Netflix going on..

Oh, there's a driver update for the LG television. Makes sense, right? It's a fairly recent television, and the drivers will help us take advantage of all of the TV's features. Of course, I'd like Microsoft to download it.

LG Malware: 

Then after a while, you notice more and more applications appear on your desktop. Like a copy of McAfee antivirus that you never asked for. Now, if this were an elderly couple or someone who doesn't know anything about computers. They wouldn't even know their system is being turned against them by LG. Some would think their system was hacked by someone else. But actually, no. Because Microsoft is being ambivalent by letting LG's supposed 'driver' install itself and, via LG's proxy, install even more applications.

How does this attack work? Especially when you made SURE LG has no access to the internet!

This all happens the moment you plug that HDMI (or DisplayPort for people who purchased an LG computer monitor) right into an internet-enabled laptop through a protocol called EDID, also known as "Extended Display Identification Data," which by itself is totally harmless!

It simply tells your operating system what kind of monitor is connected, what its capabilities are, it's serial number. That's it!

Inside Windows, when you go to Device Manager, it might not seem like much. Just a generic UPNP device attached as a monitor.

Hardware ID's within Generic UPNP Monitors.  

Dive a little more into Device Manager, and we see where EDID does its magic; we found that this particular Microsoft Box is hooked up to some kind of Samsung monitor. Now, Samsung might have some kind of driver that would help take advantage of my monitor. But this Samsung is so old they simply do not care.

When your core OS, like Microslop has been compromised by an incredibly wealthy organization such as LG. Having your Windows Updater schedule a driver release seems like a helpful thing to do for your end users. And it helps if LG throws a lot of money Microsoft's way as a partner to look the other way, as their supposed driver software has its way with your laptop. Well! What's the matter with that? Don't you want "Value added features?" or you can't be possibly stupid to uninstall a virus checker as "Reputable" as McAfee right?

Hah! I don't have to worry about this! I got Linux!

For now.. That's true. But EDID transmission still happens. and your can install ddcutil to check it out.

[email protected]:~$ ddcutil detect
I2C bus: /dev/i2c-2
DRM_connector: card1-HDMI-A-2
EDID synopsis:
Mfg id: APX - AP Designs Ltd
Model: LE24H87
Product code: 12852 (0x3234)
Serial number:
Binary serial number: 535 (0x00000217)
Manufacture year: 2010, Week: 32
This monitor does not support DDC/CI. (I2C slave address x37 is unresponsive.)

For the sake of this blog, we powered up one of our thin clients and connected HDMI to it. It shows a lot of information for my ultra-crap monitor that was made in 2010.

But what stops LG from convincing the Ubuntu maintainers to make an LG variant of their supposed driver to magically appear in your snap or apt package repository? You hope to God they don't, but the danger is always there.

Fuck, i'll just not get an LG TV Then!

If you're going to be home all of the time, that's a perfectly acceptable solution. Keep in mind LG may be the first company that is eager to erode trust to get a few extra dollars or listen in on your conversations. Corporations are cowards; if they see one person exploiting people, you'll bet your ass the rest will follow right in line. Eventually, Smart TVs will be used against you. On top of this, getting a "Non-SMART TV," you'll quickly find out that most of those only exist within commercial environments; often, they want a premium price for not having an Android OS that could get hacked, or plaster movie ads the moment you power it up.

For example, if you checked into one of the many newly renovated Hilton hotels throughout the United States while traveling. It's almost guaranteed to have an LG TV not only powered on the moment you enter the room but connected to the hotel internet, ready to spy away on you.

Usually, you can just unplug the damn TV and watch movies on your laptop screen. OR! You do something about it.

Enter the EDID BlockerEDID Blocking hardware.

We've used each one of these units during one part of our lifetime in the world of computers.

  • The gold one on the left is actually an EDID dummy plug. It allows a computer to be powered on, thinking there is an HDMI monitor attached to its workstation, when in reality there is none. Useful if you like graphical remote desktops and don't want the resolution to get all stupid the moment you unplug.
  • The other is a common HDMI EDID blocker. There's a lot out there with varying quality. Originally, these were used in conjunction with an HDMI splitter so if the monitors change it doesn't black out the display. Another use is if you have a lot of projectors in a particular orientation and don't want windows to completely screw up your tiling without using Nvidia Mosaic, this is more of a hardware-based approach.
[email protected]:~$ ddcutil detect
I2C bus: /dev/i2c-2
DRM_connector: card1-HDMI-A-2
EDID synopsis:
Mfg id: XMD - UNK
Model: Mi TV
Product code: 154 (0x009a)
Serial number:
Binary serial number: 0 (0x00000000)
Manufacture year: 2017, Week: 39
This monitor does not support DDC/CI. (I2C slave address x37 is unresponsive.)

 

TV changed, and if I unplug just the HDMI cable going to my 2010 television, it'll still read just fine.

  • You're probably wondering about the last EDID blocker, which is DisplayPort to DisplayPort. WELL! 

EDID Display Port Blocker Scam.

It's a scam. Just a bunch of wires, shit-soldered together to make a jumper and charger 15-30-45 to pass it off as an actual blocker. We wanted to get a legit EDID blocker to show you its device. But it's important to document even the bootleg garbage you get when working with grey-market tech. Got my refund right away on this one. 

This, however, illustrates the importance of checking your hardware when you get it. If we got an LG gaming monitor with this bootleg piece of shit hooked up to a Windows box. Welp! We would probably be scrubbing McAfee off of our computers AGAIN!

When it comes to a DisplayPort EDID emulator, there are legit companies out there. But they're pricey. Anywhere from $50 to $150 US Dollars.

Final thoughts.

There are, of course, more sensible techniques to fight corrupt smart TVs, such as the following:

  • Never give ANY smart device internet.
  • Have a good firewall that Microsoft never touched. Especially make sure your DNS for these companies is diverted to a picture of Obama. Generally, a good open-source router with ad-blocking plugins will take care of this 
  • Just change your OS. Worked for me!
  • Use a Linux-based OS to watch TV. Don't get another Android box loaded with spyware.
  • Throw it into the garbage and financially eat shit buying a TV with no OS whatsoever. Or a better and more portable solution could be a projector instead.
  • You know what? There's really nothing good to watch on TV anyways. If Hollywood has to subsidize the television industry just to keep its base, it doesn't have any money to invest in anything new. Every channel just wants to brainwash you. So throwing the Flat Panel into the garbage might be a good idea anyways.

But if you're backed into a corner with your work laptop running Microslop and everyone is insisting on hooking your carbomb of a laptop up to the world's most malware-infested TVs, such as an LG. It's good to know there are hardware options to protect yourself by misdirecting the manufacturer label so no drivers can ever be detected or downloaded.

The only downside we've ever experienced with these blockers is when something is rated for 4K. Your system BIOS might automatically switch to 4K until the OS returns. Minor annoyance. But it's something worth noting.

That's what server said

END OF LINE+++

 

联系我们 contact @ memedata.com