The majority of the problem is also simply the ability to record. Putting a remote control listening hardware on a device that runs a plethora of 3rd party apps and with full connection to the internet means that even if LG isn't controlling that mic, someone else will be.
How many other household devices have a microphone whose primary function is orthogonal to recording audio?
Edit: also the mic in the remote has a function to calibrate the speakers to the room (correcting for the impulse response of the room basically) which can make the audio much better.
Microphones in tvs are a useful accessibility feature when they enable voice commands for the user, and allow them to be used as voice assistants.
They also enable tvs with a camera and microphone to be used as video calling or audio calling interfaces. Used well we get star Trek view screens, used poorly we get little brother monitoring.
For those interested, it turns the tv into an interactive terminal for voice and camera powered video games, which are becoming more popular.
Unfortunately advertising and tracking incentives drive the abuse cases to the top and will crush the positive use cases :(
I'm still not purchasing a television. The last thing I need is more screen time in my life.
Made nearly moot by the presence of microphones in most (all?) modern remotes.
I say nearly moot because its worth noting the ability to operate a physical remote may itself be prohibitive to some.
So in effect, there are a multitude microphones in a modern LG environment.
IIRC I saw already Bruce Schneider's blog some team proof of concept where they listened using laptop speakers what was spoken in that room. Audio quality wasn't perfect, but it making sense what was spoken was good enough.
Some "smart" TVs could do skype in the past, I'm not sure if they needed external headsets of worked with builtin mikes.
LG TVs caught spying even when offline or on standby - https://news.ycombinator.com/item?id=49612329 - Sept 2026 (359 comments)
GamersNexus and LG: Or why rooting your TV is a bad idea - https://news.ycombinator.com/item?id=49605424 - Sept 2026 (133 comments)
A Screensaver for LG's Spying Smart TVs - https://news.ycombinator.com/item?id=49605356 - Sept 2026 (13 comments)
LG TVs aren't the only ones spying on you [video] - https://news.ycombinator.com/item?id=49575176 - Sept 2026 (18 comments)
> LG went on to say that beyond the aforementioned instances, "the TVs do not collect or record ambient conversations."
LG is contradicting themselves here. In order to detect a wake word then they must be collecting or recording ambient conversations.
I think the main questions are:
1. Is it fully supported to use LG TVs disconnected from the internet.
2. Are wake word voice controls and ACR truly opt-in. They claim it is in the statement but (as others have mentioned) I remain skeptical what definition of “opt-in” they are using.
I don't know how LG TVs do it, but e.g. many smartphones use a dedicated ASIC/audio processing chip that does not really record anything, but specifically listens for the wake word and discards all other audio to save power/battery life. I think this distinction is relevant, because there is a huge privacy difference between streaming a live audio stream to the cloud to detect a wake word and a specialized audio processor that has a small buffer only for detecting the wake word, where the audio does not leave that processor.
Theoretically, you could call that few-second buffer recording, but I don't think that would be collecting/recording ambient conversations to most people, since it's ephemeral and does not leave your device.
The question, of course, is what happens in LG TVs.
No, it's arguably accurate because "record" implies it's being persisted. Otherwise something as simple as a sound meter (which needs a microphone to operate) is "recording".
There's a risk here that we will talk-past one another while using different meanings of the same words, so let me offer a scenario:
AcmeTV has an isolated component which taps microphone input, records to a 5-second ring buffer, and on "Wakey-Wakey" triggers an alert flag. Assume it works perfectly accurately.
Would you accuse AcmeTV of "recording or collecting ambient conversations" on the basis of that component constantly reading microphone data?
Personally I wouldn't, because it's not the same kind of "recording" we consumers are concerned about.
Nearby, another AcmeTV or business partner device picks up the sound and sends it to AcmeHQ.
The former device "never transmits your viewing behavior to Acme". The latter device "never records your viewing behavior".
Then, when the system was more awake, it would attempt to figure out whether the wakeword was real or not (e.g. sometimes certain words and word pairs have a very similar sonic signature to 'Alexa'), and if it felt confident enough then it would begin streaming audio to the back end for significantly improved voice recognition.
Since Amazon took (and as far as I know still takes) voice privacy incredibly seriously, voice recordings and data were treated as essentially radioactive waste, deleted as soon as legally possible, and secured against even internal Alexa developer access.
I personally don't have the same level of confidence in security with LG, who seem to think they don't have as much to lose as far as customer trust goes and might as well exploit the heck out of the systems they have. I suspect that problem, which Amazon has so far pretty successfully avoided for the most part, is self-correcting over time.
Their statements don’t align with the reality I’ve experienced as a customer. My TV is not connected to the network, because the setup process left me with 0 trust that LG wouldn’t be collecting information regardless of my settings, or that I didn’t miss something. There was also the risk that they’d add a new “feature” with an update which would I’d be automatically opted in to.
Until they start selling truly dumb TVs, I’m not going to trust anything and their statements fall flat.
Opt-in used to mean that it was disabled until you explicitly click somewhere to enable it.
Opt-in: take action to have the feature.
Opt-out: take action to not have the feature.
> ACR is an optional feature that is turned off by default. To enable ACR, a user must accept LG’s Viewing Information Agreement, which describes how ACR works.
Which I take to mean that when you agree to the terms, it enables the feature.
Now, our lawyers have made the totally unrelated point uh that we cannot legally agree to contracts such as terms of service or conditions while incredibly innebriated.
Take that LG legal dept.
Anyway, last year my phone died and I bought a new one made by Samsung. I had to opt out of collection like 4 or 5 times with confusing buttons, and there is a lot of crapware installed by default, and then the phone offered to install two additional apps. I almost sure I said no, but one of them got installed anyway.
New iPhones are expensive, more than $1000. Yet most people who get them finance it through their cellular carrier, usually 2 year plans, so it's just $30-$50 tacked on to the monthly cellphone bill. So ... no one cares unless it's going to double their bill.
Let's say the RAMopocalypse and other AI-driven chip pressues drives everything up even more; let's say now-cheap TVs are now $2000 or $3000. No biggie. Your cellphone company can offer you an eSIM-locked TV with bundled network and services, on a 5 year plan with free lifetime service and replacement, adding just $30-$40 to your bill for 5 years. Maybe it will include something like Family Tracker Life360 Intercom as a value-add - talk to your children to/from the TV to/from any phone on your plan, anywhere, anytime. Safety, etc.
Same thing with your laptop, home IoT/security devices, etc.
If ATSC 3.0 dies and gives way to 5g Broadcast, it'll be another enabler for something like this.
That's when the real lock-in will happen.
With out the user the content would have never been created. Users are the content creates and now the push to remove their owners ship of their actions and move it to the wealthy.
Greed begets more greed.
Sure, to use the TV you need to go past the EULA screen. And the button right in front of you, pre-selected - is agree to all terms. And after pressing OK, you now have ACR turned on. But you did that, it wasn't on by default.
Okay I can take my soul sucking corporate hat off now.
Its looks like the sort of stuff that happens to a tragic fantasy hero after a Faustian deal. Except they would've asked for riches, love or eternal youth, we on the other hand just want our middling-quality tv to work.
And that's where the problem is.
TVs should be TVs. Phones should be phones. Cars should be cars. If the manufacturers can't help themselves adding other stuff that is for their own benefit and not the product owner's and some of it so bad that it needs legal weasel words to CTA and competition in the market is insufficient to kill these practices off then it's time for heavy-handed regulation.
Maybe we say you can't sell any product in these categories in our country with any remote connectivity at all except for specifically permitted uses. Maybe the penalty for wilful violation is a warning with a big fine. Maybe the penalty for repeated wilful violation is fines that are an existential threat to the business and personally barring the corporate executives from holding corporate office for the next five years. That kind of thing.
They at least use a pattern where you need to accept terms of use & privacy policy when you download an app. Same screen has option to accept other agreements like ACR. However by default "select all" option is highlighted so people will often click that.
Slightly earlier on video they state that certain ad related things got turned on automatically during software updates.
source: i made it up
That case sure put Mark Russinovich on everyone’s radars, at least.
Good times.
As the saying goes, this is what radicalized me. If any one of us did anything close to this we would be treated like Aaron Swartz and given a 35+ year prison sentence.
But in the Sony case the DOJ didn't even threaten criminal charges.
I am absolutely certain that ACR was enabled on our new TV by default, back some years ago. I am nearly certain their voice recognition, and advertising spying were enabled on our TV by default.
If none of this is truly "enabled by default" then this is a recent development.
I discovered this many years ago and did some deep dives, and unfortunately didn't publish anything about it. Lesson learned.
I really wish there was a better way to do a media center linux.
Also they provided a statement earlier to Gizmodo: https://news.ycombinator.com/item?id=49628328
So, was realme transcribing all conversations and uploading it? Can someone answer?
For example, let's say an ad network knows your and your friends' location, and knows you've met because you've been close together frequently, or are using the same wifi network. You talk about perfumes, then later one of them looks up perfumes on their phone. Google would usually have access to this much metadata, and will likely serve you perfume ads because of your friend who later looked it up.
This doesn't directly answer your question though. The answer would be - it's possible, but a lot is possible without that.
And your phone most likely already listens all the time to catch an "Hey, Google" (or something similar).
For example, last week I was complaining to my spouse about shoulder pain and how I was afraid I may need another surgery. YouTube has suddenly starting flooding my feed with videos about "shoulder exercises to avoid surgery." I hadn't searched any of those terms, purchased anything or visited an orthopedic, so I don't know what else could possibly explain it.
Instead, I connect a Google TV Streamer, as I'm in the Google ecosystem. For my friends in the Apple ecosystem, I tell them to do the same with an Apple TV box.
Kentucky passed HB 692 unanimously requiring smart TVs to ask permission if they are going to be spying on us. Ask your state legislature to follow their lead and pass some very popular consumer privacy protection.
OLED productions costs have fallen, and the yields have gotten better — displays of all kinds have gotten cheaper, not just TVs; OLEDs have started showing up in products they haven’t before for cost reasons, etc.
The manufacturers make some profit on the data they harvest, sure; but the biggest BOM costs of TVs have definitely also dropped sharply.
Companies like Vizio make vastly more on the ads and data than they do on the tvs.
Some quarters they even take a loss. They took a $7m bath on hardware while booking about $120m on ads and data.
We’re never getting good tv’s back. It’s only going to get worse. Now they’re starting in on monitors.
The only lifeline would be consumer protection, which obviously won’t happen in the US.
When they spend 400 on a tv and sell it for 410 and sell the data for 40 it doesn’t mean the data makes 4 times as much as the tv. The cost of gathering that data is still 400, they have nothing to sell without spending 409 in the hardware.
Unless this stuff is made literally illegal they will keep doing it, because it's far more profitable than the alternatives. This is precisely why ideas like paying for a privacy respecting option on Facebook could never work.
from: https://web.archive.org/web/20201201175708/http://blog.ptsec...
Highly efficient" is 25mW at 33MHz. According to the Wikipedia page, it can run even when the PC is off but plugged in or connected to battery. an ARM Cortex M0-4 will use even less power in idle. All it needs is a tiny capacitor and bootrom and a secret flash storage to record audio and upload it once internet becomes available
"The Intel Management Engine always runs as long as the motherboard is receiving power, even when the computer is turned off. This issue can be mitigated with the deployment of a hardware device which is able to disconnect all connections to mains power as well as all internal forms of energy storage. The Electronic Frontier Foundation and some security researchers have voiced concern that the Management Engine is a backdoor.
Intel's main competitor, AMD, has incorporated the equivalent AMD Secure Technology (formally called Platform Security Processor) in virtually all of its post-2013 CPUs."
https://en.wikipedia.org/wiki/Intel_Management_Engine
There are countless low or passive power audio devices since the Thing that can record and upload/bounce audio to receiveing devices: https://en.wikipedia.org/wiki/The_Thing_(listening_device)
Go figure. People are strange.
And yes, that ME and PSP are on every cpu since I can't remember, Thinkpad T60 was probably one of the last ones without spy tech.
Trust broken, words out, and their statement doesn’t really do anything to mending that.
I.e: these will probably trickle down to me
Every day I want to keep tech more fenced and far from me and only use it for what I need.
We should have laws that limit this kinda of “agreements”
It's insane that something you purchase can force a post purchase EULA before it can do anything.
Imagine buying a shirt but there's a 10 page EULA that says you agree to arbitration as soon as you break the seal. Or a blender, or an oven, or a refrigerator.
A lot of the "smart" electronics are in fact just that, they are sneaking in EULAs to use an app to connect to the device which robs you of your rights and protections as a consumer "Oh, the law says we have to give a 10 year warranty, but unfortunately you installed our app to work with your device which says you agree to forgo the warranty and pay us for the right to sue".
https://gdpr.eu/gdpr-consent-requirements/
The problem is the capacity to litigate is far surpassed by the world's speed and volume of doing bad.
This is a case where companies' actions should be treated like parking tickets: a fine is issued summarily, with option to appeal, not a slow process of litigation having to happen before a fine is issued.
LG is truly an adversial party in all of this.
It’s of little concern to me that the threat is theoretical when it’s only a matter of time before a script kiddy or some bored guy with a YouTube tutorial and $20 of AI credits sets it up himself, let alone well-funded groups or motivated actors.
Unmanaged IOT devices in general are not to be trusted. LG isn’t leading with transparency nor are they big enough like Microsoft or Apple to put out bug bounties and audits with hundreds of thousands of eyeballs on them. They make the device that sits in the corner of your living room and is forgotten about. They’re being cagey about the data they collect and how they collect it, and I’m asked to take the risk on “trust me bro” and “you’re required to tell anyone within earshot of the TV’s mic that they’re being recorded”? Fuck that.
Never mind that data being exposed even if encrypted is a risk all its own: the collection can start now, and whenever it’s detected and blocked it’s too late. It can be cracked later whenever they have the tech and the time.
It’s basically stealing.
Would you want some device connecting to your network that is not under your control?
And before you answer “well, you should lock it down,” yes, that’s true, but we do not blame the victim if they fail to do so. An unlocked door is not an invitation.
A TV not on the Internet is basically worthless these days, unless you have a third-party streaming device like a Fire or Shield--and then you're just moving the trust point from the TV itself to the streaming device, and the same concerns exist. Do you trust Amazon any more than you trust LG?
That's exactly the sort of thing I could see LG piggy backing on. Your neighbor might have spectrum so the LG TV connects to it's private network to phone home.
If you live in a dense city, there's a good chance you can reach an open network. When I lived in midtown Manhattan, there were around 500 SSIDs reachable from my apartment.
We use a Kubuntu Linux laptop behind the TV with a wireless mouse and keyboard (for searching and stuff), stream in Chrome, works great. And yes, we trust this combination.
> Do you trust Amazon any more than you trust LG?
We don't use Amazon device products just because we use Kubuntu Linux on PC's in our home but yes based on LG's behavior we trust Amazon more and we don't put our LG TV or any of our LG appliances we bought a few years ago, on the Internet.
Forgot to mention - there were no improvements whatsoever in terms of functionality.
From their statement. This entire thing is contradictory. You cannot both say "not converted to text, stored, or transmitted", while at the same time saying the results may be generated and stored in the form of logs.
We need to hold companies responsible for this shit.
They made customers feel like suckers for trusting the Brand.
Their LG logo was literally on the signed evidence. What a bunch of clowns getting exposed by community reporters. Thanks Steve. =3
What is that? And why does it only happen on that website?
Connect your own devices and smarts to it.
A broader issue is that it does any kind of recording, or processing of the signals around the tv (from a microphone) or what is displayed on the tv (image) is both extremely private.
Privacy has been violated by LG according to their own wording. a way that is not controlled by settings.
What might LG want with an anonymized hash of the audio being played or shown on someone's screen?
Existing ad matching technology can link it with the video of what you're watching to build a shadow profile of you and then sell the attention of your eyeballs to advertising.
From there, simply what you watch, at what time, for how long roughly sets up a wonderful demographic of age, gender, interests, and all that fun stuff. This is an area of tv and video advertisign that has existed for a long time including online and cable tv boxes.
LG's statement that it doesn't move your info anywhere about what is being watched via audio seems to be a variant of this. Using the audio fingerprint, their software could request an ad for it from another system and direction.
So your information may not leave the TV indirectly, but thsi type of a mechanism does exist in cable tv boxes, etc.
With TVs absorbing the OTT (set top box) functions they are absorbing this too so their claims of how big their market is probably tied to being able to sell advertising into that ecosystem.
It’s likely an unadvertised function only for the benefit and leverage of LG and may be buried in signing your life away to use their “smart” tv functions as well.
A tiny crack in LG tvs can be an attack vector for security and safety. Whether it's audio, or video, or anything.
The best TV is a dumb tv, with all internet disabled and plug in your own smarts that you can hopefully manage better.
A brand is a promise of an experience. This brand has broken a promise and it can’t be pretending it didn’t.
> ACR uses audio fingerprinting technology using the TV’s internal audio processor (not a speaker) to identify content and does not collect screenshots, screen recordings, video recordings, voice recordings, or other audio recordings from the TV.
So they are claiming that ACR is done entirely through audio processing, and no visual data from the screen itself is used? That...doesn't seem plausible.
This paper from 2024 investigated both Samsung and LG and found that they both capture screen images for ACR, and send the resulting hash (not the raw content) back to the manufacturer for identification.
https://arxiv.org/html/2409.06203v1
We're going to have to get saavy in pulling apart the distinction between "I look at everything and then send a nice summary back to my manufacturer" and "I send everything back to my manufacturer". As AI gets cheaper and more efficient, it'll be baked into everything, and will distill signal at the edge and send the good bits back to central command. I fear the legalese in the ToS will obscure this new way of "not collecting" user information.
It's probably easier to do and every bit as accurate as just using a screenshot.
And it's still exactly what I don't want them doing. There's literally zero reason for LG to be building an advertising profile on me because I was foolish enough to buy one of their TVs. This isn't something that makes their products better, it's spying.
Here's how it's been done in the past
https://www.cameronmacleod.com/blog/how-does-shazam-work
Audio is a bit easier to turn into a fingerprint for identification vs video. Video has a lot of smaller subtle changes that happen from things like compression which make it a lot harder to identify. It's why youtube still hasn't figured out piracy, but they'll knock you immediately if you play 5 seconds of copyrighted music.
It apparently is.
Do you know the Nielsen Ratings? That's exactly how they know what people are watching these days. I've been contacted by them to be one of their subjects. They ship you a device that listens and recognizes based on content. They look for certain "fingerprints" in the audio and match against that - it's not capable of recording our conversations, etc (or so they claimed).
What we watch is not OK to be fed ads, especially if I wasn't using their service to being with and its monitoring the audio from any input to do this.
In this way, smart tvs and smart home devices are effectively hostile devices behind your router at home.
If you explained how the box was hooked up, it would be easier to judge whether there was a chance you were correct.
As it is, your description isn’t even clear whether or not the box contains a microphone.
(your car infotainment also likely has nielsen tech in it most likely, as they bought arbitron and gracenote)
It's been done for at least good 15 years.
In what way? Dramatically lower processing and signature complexity. Audio signature matching is trivial and extremely well known. I see absolutely nothing implausible about this, and it seems a robust, viable solution.
> This paper from 2024 investigated both Samsung and LG and found that they both capture screen images for ACR, and send the resulting hash (not the raw content) back to the manufacturer for identification.
That paper found no such thing. That paper actually demonstrated that they have no clue how the ACR happened, they just demonstrated that playing content yielded content IDs. It is more likely they were witnessing audio ACR happening, exactly as LG described.
As per HN thread last week
so they aren't even denying listening in on everything?
They still claim to get your media's audio, but deny using the microphones.
[0] https://www.lg.com/us/terms
Other people have mentioned there's other voice features like diction/voice control, so it's plausibly for that.
1. The introduction says that Smart TVs are not included in this ToS ("not including Smart TVs").
2. Where do the terms say anything about "sensitive" content? The closest thing I see is section 4.d, but that's just about wiretapping/privacy laws in general.
Gamers Nexus discovered recently, through their "AMD blacklisting" bit (when some relatively minor mid-lifecycle refresh of a product they didn't get a demo unit, so it turned into some "we are the truthsayers!" bit), that doing the Louis Rossmann routine earns them loads of links and clicks. So they're firmly in the cry wolf territory now, and it makes me more dubious of their claims that the people they are questioning.
This whole space is filled with bullshit now. Saw another video where a big channel talks about why TVs are so cheap now, and they then explain it that it's because they sell your data. In the real world, the selling data bit, ACR, and so on, is absolutely tiny dollars business. TVs are cheap because massive factories are pumping out these almost entirely plastic products in enormous numbers, and they're extremely cheap to make, and the IP has all been long amortized out.
What is anonymous: we record all the hashs from all the programs people are watching to identify people watching the same thing.
What is not anonymous: we hash all the content in the world, along with hashing the content people are watching, and reconstruct what they watched.