Security Flaw in Samsung Smart TV Apps Puts Millions at Risk
Users' internet connections potentially exposed to hijacking
1Security Research Reveals Critical Flaw
A new report by Norwegian cybersecurity firm Mnemonic has uncovered a critical security vulnerability in Samsung smart TV apps. The research shows that several popular apps contain code that shares users' internet connections with strangers, potentially exposing millions of Samsung smart TVs to hijacking risks. This discovery highlights significant concerns about smart TV security ecosystems.
2Even Pac-Man Game Poses Risks
Shockingly, even a simple Pac-Man game prominently featured in Samsung's 'Editor's Choice' section contains this risky code. According to app developers, such applications have been installed on hundreds of millions of smart TVs worldwide. These apps utilize 'residential proxy' technology, which is increasingly associated with cybercrime activities across the industry.
3Your TV Could Become a Traffic Tunnel
When opened, these apps can transform smart TVs into permanent 'exit nodes' - tunnels that allow outsiders to route their internet traffic through your connection. Alarmingly, this risk persists even after closing the app. Security experts warn that this could enable malicious actors to exploit users' internet connections for various unauthorized purposes.
4Most Apps Are Just Simple Shells
Researchers found that many risky apps are essentially simple shells consisting of just a few lines of code. While these apps typically load content from external servers, reviewers only see the minimal code rather than the actual content being loaded. Harrison Sand from Mnemonic emphasized this critical gap, stating, 'What was reviewed is not necessarily what is running.'
5Samsung Takes Immediate Action
Following TechCrunch's inquiry about the research, Samsung announced it would ban apps that share users' internet connections. A company spokesperson stated, 'We've restricted new app registrations incorporating proxy functionalities on our Smart TV platform.' Samsung is also working to identify and remove all existing apps containing these components from its store.
6LG Faces Similar Challenges
Prior to Samsung's announcement, LG encountered comparable security issues. A security firm discovered that approximately 42% of apps in LG's TV app store were routing internet traffic without users' knowledge. In response, LG announced plans to suspend apps containing ResProxy software, demonstrating industry-wide concerns about smart TV security.
7Tightening Developer Policies
Samsung is implementing stricter platform-wide developer policies that explicitly ban residential proxy SDKs. The company is currently scanning its store to identify and remove apps containing these components. This move represents a significant step toward improving security standards in the smart TV ecosystem, though experts call for more comprehensive measures.
8What Users Should Do Now
Security professionals recommend users immediately remove suspicious apps and check their TVs for security updates. Such vulnerabilities can compromise not just personal data but entire home networks. While Samsung and LG's quick responses are commendable, there are growing calls for greater transparency and oversight in smart TV security practices across the industry.
Original article: Slashdot — Samsung Akıllı TV Uygulamalarında Güvenlik Açığı