Who’s watching what you’re watching? Avast finds vulnerabilities in Vizio smart TVs

VIZIO Reference Series Event
Jeffrey Van Camp/Digital Trends
Security researchers at Avast have demonstrated a number of vulnerabilities and potential attacks against Vizio smart TVs, including intercepting data that displays a person’s viewing habits.

Under the wide umbrella of the Internet of things and smart homes, Avast began to pull apart the security of a Vizio smart TV and found that it was susceptible to man-in-the-middle attacks due to HTTPS certificates that were not being validated.

Avast discovered that the TV was constantly accessing tvinteractive.tv, a website run by a company called Cognitive Networks. The service appears to gather a timestamp that reports what someone is watching and when, and then sends that info to the content provider or advertisers. Avast even discovered that the TV would accept a forged certificate when connecting to the site as it does not fully validate the HTTPS certificate. Instead it just validates the checksum at the end of the data being transferred.

Essentially, the HTTPS certificate is what makes a connection secure, validating the information and telling the sender what a site actually is. Without it, a hacker could potentially steal the information. Carrying out a man-in-the-middle attack in which it impersonated the tvinteractive.tv with forged HTTPS credentials, Avast was able to crack the data that was being sent and view it.


“This data is the fingerprint of what you’re watching being sent through the Internet to Cognitive Networks. This data is sent regardless of whether you agree to the privacy policy and terms of service when first configuring the TV,” said the researchers.

The data is more like a snapshot of pixels rather than a clear view of what you are watching. Here’s an example from Avast. Vizio has a way of deactivating this tracking through the following commands: Menu -> Reset & Admin -> Smart Interactivity -> OFF.

Avast has dubbed its discovery as a possible attack vector into a person’s home network. It’s just the latest evidence that shows how a smart TV can make your local network vulnerable, and Avast claims that it could be a possible means to display content remotely on someone else’s TV.

“Further investigation is needed to demonstrate a proof of concept; however, this appears to be a potential attack vector for remotely displaying unwanted material on a person’s TV,” said Avast.

Vizio has patched these vulnerabilities and says the update will install automatically, but there is still no report on whether this update has been successfully delivered to all TV owners yet.

Deals

Walmart slashes prices on Vizio D-Series 4K TVs before Prime Day 2019

There has never been a better time to make the jump to 4K, and the Vizio D-Series UHDTVs are on sale right now from Walmart for super cheap. Whether you want a smaller TV for a bedroom or a big-screen for your home theater, check these out.
Wearables

Not on my watch: How to fix the most annoying Apple Watch problems

Have you been struggling with one or several Apple Watch problems? Here, we’ve compiled a list of some of the most common issues people are having, along with a few workarounds and fixes for dealing with them.
Deals

Best Prime Day 4K TV deals: Samsung, Vizio, and LG early discounts

You don't have to wait until Black Friday to score a fantastic deal on a 4K TV ⁠— Amazon's Prime Day is right around the corner, and with it we're expecting to see discounts on televisions from the likes of Samsung and Vizio.
Home Theater

What is YouTube TV? Here’s everything you should know about the TV service

YouTube TV is becoming an increasingly major competitor to other streaming services. Not sure if the service might be right for you? Don’t worry, we have a guide detailing everything you could want to know about the service.
Computing

Razer slashes up to 50% off mice, keyboards, and Blade laptops for Prime Day

Gamers can get all sorts of deals during Amazon's annual Prime Day sales event. For Prime Day 2019, you can grab Razer gaming mice, keyboards, and Blade laptops at discounts of up to 50% off. These deals start on Monday, July 15.
Computing

Dell launches $200 discount on XPS 13 and Inspiron laptops for Prime Day 2019

If you're in the market for a new laptop, Dell's Cyber Monday in July sale might be worth considering along with your Prime Day 2019 shopping plans. Dell's sale has a wide variety of discounted laptops, including its XPS 13 laptop.
Computing

Linux is now beating Windows on Microsoft’s own turf, and Azure is better for it

According to remarks by a developer at Microsoft, there are now more instances of Linux-based operating systems running on the company's Azure cloud platform than Windows-based ones.
Deals

Alienware m15 headlines Dell’s gaming PC sale to take on Amazon’s Prime Day

If you're looking to save some money on a new gaming PC or laptop, you may want to skip Amazon's Prime Day for Dell's Cyber Monday in July event. As part of the sale, you can score up to $710 in savings on the Alienware m15.
Computing

The best Prime Day laptop deals: Razer, HP, and Dell XPS discounts

Amazon Prime Day is just around the corner, and it's time to start preparing for some amazing laptop deals. Every year, we see huge discounts on gaming laptops, MacBooks, Chromebooks, and more.
Computing

AMD says it duped Nvidia with a price fakeout, escalating a two-front chip war

According to a recent interview with Scott Herkelman of AMD's Radeon Business Unit, AMD successfully convinced Nvidia they would launch their new GPUs at a higher price than they did, sabotaging Nvidias RTX Super launch.
Computing

Will the Surface Pro 7 ditch Intel chips for Qualcomm’s 5G support?

Microsoft might announce a new Surface Pro 7 towards the end of this year and according to new rumors, it might do with a new chip under the hood. Not an Intel chip though, but one from AMD, or even Qualcomm.
Computing

You can get a 2018 MacBook Air for just $999 with this latest deal from B&H

Other retailers like B&H are offering their own sweet laptop deals during Prime Day 2019. In fact, you can score a 13-inch 2018 MacBook Air with a Retina display at a $100 discount from B&H right now.
Computing

Upgrade your gaming rig with our favorite graphics cards for every budget

If you're serious about games, a good graphics card is essential. There’s no one-size-fits-all option for graphics cards, but our recommendations can help you pick from the best graphics cards for your needs.
Computing

AMD or Intel? We take a look at the pros and cons of both processors

When it comes to selecting a CPU for your PC, there's no shortage of chips for you to choose from. With Ryzen, Threadripper, and Core i9 CPUs though, the AMD vs. Intel argument is muddier than ever.