• 0 Posts
  • 44 Comments
Joined 6 months ago
cake
Cake day: March 10th, 2026

help-circle
  • Capability

    Well this is something that every cheap WiFi chip can do in the last decade. Share WiFi through a hotspot. Hell, ESPHome does it by default just for ease of use and fallback debugging. Here is a very old project , dirt cheap chip that does it

    Ease of Implementation

    They already broadcast hidden SSIDs for direct connection for features like screen mirroring, etc… Researchers have exploited this exact thing for attack vector testing (though they weren’t testing the TV itself data ex filtration)

    There is no way, with all of the privacy intrusions + their blatant disregard for network security (See GN video) and LG’s own advertiser marketing claims, that they don’t do that.

    Other “sounds paranoid” things companies are doing

    It isn’t like “they are tracking you in your own house from WiFi through your walls” (which now ALSO has been proven correct and is now an advertised “feature” for american ISPs) yet here we are. https://www.sciencedaily.com/releases/2026/05/260522023127.htm, https://en.wikipedia.org/wiki/WiFi_Sensing, https://www.theverge.com/news/981381/comcast-xfinity-shield-wifi-motion-sensing

    Automatic content recognition is also done by every manufacturer and also a “very paranoid” thing 5 years ago.

    Not to mention literally this whole wiretap scandal that OP report is from.

    From the original report itself, they also constantly scan all devices on the network, Bluetooth, and in the free bands their radios can pick up and log them so they know every device that has passed in their range, characteristics, and WiFi + Bluetooth geolocating is quite a standard practice for years for “increasing location accuracy”

    LG themselves bought a company that links your real identification from retailers to a unique product number so LG will be able to actually be certain that a specific person is associated with the spied data instead of a guess based on accounts. (Also in GN investigation video 1)

    Profitability

    From their own financial reports as highlighted in the original investigation, LG’s profits from TV-based selling to advertisers and data brokers is literally more than their profits from selling the TVs themselves.

    What else would stop them?

    So we have established that it is dead simple, cheap, functionality already built into other features and profitable. The only other motive left would be ethics, but from the research by GN (reported on in the OP), they simply spy on you anyway, and when caught because that is illegal, they got a slap on the wrist (see US Texas lawsuit settlement), and changed their terms of service to say “you give your and everyone in your household’s express consent to comply to your local wiretapping laws” (using exactly the language “wiretapping”. So we can also establish that they have absolutely no ethics around data ex filtration, and no regard for legality and willingness to pay the small fines.

    What would be the motive for them to look at this feature and say “nah, we aren’t going to do that extremely easy thing”? Laziness would be the only one that I could see, in which case, it will appear in future models at some point.

    It is not as though they have to stream video through it, raw text data is incredibly small. A whole 300 page e-book can be around 1MB. It is uploaded in under 1 second and it is encrypted, so it blends in with other traffic.



  • If I don’t get executive say in what happens at the company, I am not included in liability. I am not allowed to sit on the damn board with my pension fund.

    Executives and controlling board members get held personally liable. It really is as simple as that. If you are in the meetings, and you get a vote, you are liable. There is absolutely no slippery slope fallacy here.

    Any bullshit “uhm actually you technically are a shareholder” is just trying to ward off people having to take responsibility for their decisions. (also, in many pension schemas you aren’t actually the shareholders, the investment fund technically is and you are just given the license to decide how they invest those funds and get a portion of the payout, but it is different than manually retail investing for example)








  • This seems like the perfect scam for Lemmy for setting up a fresh IP for launching a cyber attack/scam with a real residential IP. Helping a community member while circumventing shitty corporations. (Not saying OP is, just that it would be a decent scam)

    This requires either an insane amount of trust in a random person or gullibility. Plugging a random mailed device into your network, even behind a VLAN.

    I definitely would never do this if I didn’t have absolute full and complete access to every part of the pi’s software, or preferably set it up myself (optionally in collaboration with the requester) and the requester only had read-only access to it.




  • I think it is the other evidence that it is vibe coded

    • Brand new account
    • Dev only responds to non-technical or feel-good comments
    • other commenters have pointed to AI teltale vibe coding syntax signs in many of the files
    • Claude extra files in early commits and changing gitignores to do it.

    Advertised Vibe coded projects absolutely are by default bad and here is why:

    • Developers do not understand what they have built, so can’t debug it beyond “Claude, fix this”
    • Vibe coded projects are easy-come, easy-go very often abandoned (73% of the vibe projects on flathub, and those are the people who thought far enough to decide putting it on flathub was worth it)
    • developers can’t answer any questions on security when the app will be handling credentials, be hosted on a server, or attach to some sort of live service -> absolutely gaping security hole that you just have to cross you fingers that Claude didn’t do another “oops, you are completely right to push back,1500 common attack vectors were left open and you are now part of a CSAM botnet, do you want me to fix it?”

    If someone wants to make small scripts, one-off test firmware for a home project, writing test cases, design reviews, boilerplates, etc… Are arguably good usecases.

    Vibe coding an ongoing software service is almost always a hard no-go and statistically will be abandoned and unupdated, leading to even more security and usability issues.