Your smart TV apps contain proxy software that let strangers use your internet connection
Smart TV owners face a hidden security risk lurking in their app stores. Security researchers recently discovered that a large number of apps for LG and Samsung televisions contain software development kits that turn your home internet connection into a residential proxy node. This means your TV could be selling access to your IP address to strangers without your clear understanding. Once a device acts as a proxy node, outside parties can route their internet traffic through your home network. This effectively hides their activity behind your digital identity, which can lead to your IP address appearing in security logs for actions you did not commit.
According to research from the threat intelligence firm Spur, over 42% of apps on LG webOS were found to contain this functionality. Samsung devices also showed significant exposure at 26.5%. Many of these apps are simple utilities like screensavers or basic games. When users download these apps, they are often presented with consent forms that are vague about what is happening under the hood. By clicking agree, users unknowingly allow these apps to monetize their home bandwidth, often even while the television is not in active use.
Following a report by Brian Krebs, LG Electronics announced it is taking steps to address the issue. The company is currently working with app developers to ensure that proxy options are removed from their webOS applications. LG stated that any applications that continue to operate as residential proxy nodes face suspension from the platform. This move aligns LG with other major platforms like Amazon and Roku, which have already restricted the use of such software on their devices.
While some companies argue that residential proxies serve legitimate purposes like market research or ad verification, the risks to individual users remain high. A compromised device on your network can potentially expose other hardware in your home, such as printers, cameras, or router administration panels. Experts emphasize that the average user does not have a clear mental model of the risks associated with sharing their residential IP address. For now, the best defense remains caution when installing third-party applications and checking app permissions whenever possible.