Some consumers may have TVs in their homes that can listen in to their conversations even while turned off.
According to a new report by tech researchers Gamers Nexus, Level1Techs, and other independent analysts, some LG smart TVs are using technology that "can be exploited to convert the TVs into covert listening devices."
Automated Content Recognition technology has been used in smart TVs to "listen" to conversations around them for use in targeted advertisements or establishing viewing habits.
Gamers Nexus found that several LG TV models it tested included ACR tracking tech and security weaknesses.
ACR works by taking samples of pictures or sound that last just a few seconds from whatever is on your TV screen. Using these snippets, it can identify what an individual is watching and compare the sample to a larger database of shows and advertisements, according to Malwarebytes.
According to the outlet, a firmware analysis and packet captures showed that LG TVs can identify many of the devices on their local networks. That includes phones, PCs, and even smart-home appliances. The TVs can also collect information on other local networks, like their names and signal information.
The device data paired with the ACR data can provide LG with a robust profile of what its customers are watching and which devices they're using.
Unfortunately, if a malicious actor were to compromise a smart TV, they could use the internal microphone to capture the audio from an individual's home, even if the TV was turned off. The researchers even showed that the TVs stored the audio when the set was unplugged and retrieved it once an internet connection was restored.
A compromised smart TV could also provide an attacker access to an individual's home or business networks or a pathway toward probing other devices.
The Independent has requested comment from LG.
Malwarebytes recommends that owners of these TVs install their firmware updates promptly, especially those that deal with security, and review their TV's privacy settings to turn off ACR, personalized ads, viewing information collection, and other unnecessary features.
The site also recommends that users actually read the user agreements prompted by tech companies and decline optional advertising and voice-data features when they can, and consider keeping things like smart appliances, TVs, and other non-essential devices on a separate network.
Consumer Reports notes that owners of smart TVs can't stop all the data collection that happens through connected devices, but turning off ACR features does help limit what gets scooped up.
LG is not the only company that has been scrutinized in the public eye for its ACR practices. Vizio faced scrutiny from state and federal regulators in 2017 for using ACR technology to collect data without its users' knowledge or consent. That investigation caused other TV companies to be more careful about asking permission for data collection.
Back in March, Samsung settled with the Texas Attorney General's Office over its data collection practices. It agreed to stop using ACR tech to collect data on Texan customers without their explicit, informed consent.
