I wouldn’t remove the network card. That also kills the Bluetooth remote.
Unplugging it from ethernet/wifi may also not be enough. If it’s connected via HDMI-HEC, it could get Ethernet over HDMI. LG doesn’t specifically list HEC support, but at this point, I’m not sure they can be trusted.
Safest path is to block its IP addresses at router level, unplug it from ethernet, factory reset it, only go through a trusted streaming device without HEC support, block all the LG servers at router level, and power the TV down when not in use.
I wouldn’t remove the network card. That also kills the Bluetooth remote.
It’s a sacrifice I’m willing to make.
Unplugging it from ethernet/wifi may also not be enough. If it’s connected via HDMI-HEC, it could get Ethernet over HDMI.
This is why it’s unplugged from power until I can properly control it without compromise. If that means I rip out the hardware in favor of some generic “is just an HDMI receiver with an LG display attached”, then so be it. Or it goes in the trash. IDK yet.
LG doesn’t specifically list HEC support, but at this point, I’m not sure they can be trusted.
Model # 65UT8000AUA, which is rootable. I already rooted it though 😂
Safest path is to block its IP addresses at router level, unplug it from ethernet, factory reset it
Yep. I blocked it on my UDM. I don’t think it even has an ethernet port, now that I think about it… I should check.
only go through a trusted streaming device without HEC support, block all the LG servers at router level
The only thing plugged into it is an Apple TV. And we rarely use it these days. I do run Pihole on my network, but admittedly I haven’t kept track of the shit coming out of the TV.
and power the TV down when not in use
They do this even when “turned off”. That’s why it’s unplugged.
The remote is still needed so you can pick the AppleTV from input sources, adjust volume, or select picture mode. AppleTV, AFAIK doesn’t have HEC. You need it on both ends for one device to tunnel via Ethernet. AppleTV also doesn’t do ACR and has third-party Jellyfin support. Not so sure about other streaming stick/boxes.
Two other potential sources for the TV getting out: 1) TV may silently turn wifi on and scan for open routers nearby, and 2) if the REMOTE has wifi on it. Both would be easy to honeypot.
It’s pure madness we all have to speculate about ANY of this. Anyone in LG’s corporate line who approved this crap should be demoted for sheer stupidity.
Out of curiosity, I checked online. You can find basic, LG-compatible remotes for under $7 USD. At that price, I can’t imagine it’s more than just infra-red. In that case, the TV’s network board can be disconnected without losing any functionality.
Fortunately, CEC alone is not enough to get out to the net.
The remote is still needed so you can pick the AppleTV from input sources, adjust volume, or select picture mode. AppleTV, AFAIK doesn’t have HEC. You need it on both ends for one device to tunnel via Ethernet. AppleTV also doesn’t do ACR and has third-party Jellyfin support. Not so sure about other streaming stick/boxes.
The interface is navigable with the single button they give you on the bottom (Remember buttons? I 'member…), so that’s workable. I know the Apple TV reports itself as such on the TV’s input selector. Not sure if that’s related to this HEC thing though.
It’s pure madness we all have to speculate about ANY of this. Anyone in LG’s corporate line who approved this crap should be demoted for sheer stupidity.
I don’t disagree there. But that’s the thing - it’s not just LG doing this. Nearly every “smart” TV manufacturer does it.
I’ve been working hard to rid my house of this spy shit, but the TV went under the radar for a long time. This has given me a good motivation bump to keep at it, knowing that what I’m doing isn’t for nothing. And my wife is 100% onboard, which really helps.
I have ZERO doubt other makers pull the same shit. I’ve been through Sony and Samsung. LG just had the best picture quality. Didn’ think they would abuse the trust. They have.
LG also sells really decent home appliances. We have a few. Not sure I trust them not to be abusing that trust.
Yeah, I’m like hyper aware of these shenanigans at this point.
Hell, we just bought a HiSense portable AC that I didn’t realize had wifi until it was delivered. I straight up ripped out the wifi module as soon as I took it out of the box. I actually just got some parts for a fully local ESP32 replacement that I found on a whim after a bit of googling 😂
I wouldn’t remove the network card. That also kills the Bluetooth remote.
Unplugging it from ethernet/wifi may also not be enough. If it’s connected via HDMI-HEC, it could get Ethernet over HDMI. LG doesn’t specifically list HEC support, but at this point, I’m not sure they can be trusted.
Safest path is to block its IP addresses at router level, unplug it from ethernet, factory reset it, only go through a trusted streaming device without HEC support, block all the LG servers at router level, and power the TV down when not in use.
What a stupid way to lose trust.
It’s a sacrifice I’m willing to make.
This is why it’s unplugged from power until I can properly control it without compromise. If that means I rip out the hardware in favor of some generic “is just an HDMI receiver with an LG display attached”, then so be it. Or it goes in the trash. IDK yet.
Model # 65UT8000AUA, which is rootable. I already rooted it though 😂
Yep. I blocked it on my UDM. I don’t think it even has an ethernet port, now that I think about it… I should check.
The only thing plugged into it is an Apple TV. And we rarely use it these days. I do run Pihole on my network, but admittedly I haven’t kept track of the shit coming out of the TV.
They do this even when “turned off”. That’s why it’s unplugged.
The remote is still needed so you can pick the AppleTV from input sources, adjust volume, or select picture mode. AppleTV, AFAIK doesn’t have HEC. You need it on both ends for one device to tunnel via Ethernet. AppleTV also doesn’t do ACR and has third-party Jellyfin support. Not so sure about other streaming stick/boxes.
Two other potential sources for the TV getting out: 1) TV may silently turn wifi on and scan for open routers nearby, and 2) if the REMOTE has wifi on it. Both would be easy to honeypot.
It’s pure madness we all have to speculate about ANY of this. Anyone in LG’s corporate line who approved this crap should be demoted for sheer stupidity.
CEC covers most use cases for me. I barely touch the TV remote. Some models have physical joystick controls if you still want back into the menus.
Out of curiosity, I checked online. You can find basic, LG-compatible remotes for under $7 USD. At that price, I can’t imagine it’s more than just infra-red. In that case, the TV’s network board can be disconnected without losing any functionality.
Fortunately, CEC alone is not enough to get out to the net.
The interface is navigable with the single button they give you on the bottom (Remember buttons? I 'member…), so that’s workable. I know the Apple TV reports itself as such on the TV’s input selector. Not sure if that’s related to this HEC thing though.
I don’t disagree there. But that’s the thing - it’s not just LG doing this. Nearly every “smart” TV manufacturer does it.
I’ve been working hard to rid my house of this spy shit, but the TV went under the radar for a long time. This has given me a good motivation bump to keep at it, knowing that what I’m doing isn’t for nothing. And my wife is 100% onboard, which really helps.
I have ZERO doubt other makers pull the same shit. I’ve been through Sony and Samsung. LG just had the best picture quality. Didn’ think they would abuse the trust. They have.
LG also sells really decent home appliances. We have a few. Not sure I trust them not to be abusing that trust.
Yeah, I’m like hyper aware of these shenanigans at this point.
Hell, we just bought a HiSense portable AC that I didn’t realize had wifi until it was delivered. I straight up ripped out the wifi module as soon as I took it out of the box. I actually just got some parts for a fully local ESP32 replacement that I found on a whim after a bit of googling 😂