To make your smart TV safe from spying, manufacturers need to up their game

Smart TV Makers Voice Security
Comedian Yakov Smirnoff used to notoriously joke that “in Soviet Union, television watches you!”

It was a funny sound bite, and one that didn’t make literal sense at the time (at least in the West), but in this era of smart TVs, it’s entirely possible. Just like your laptop or cell phone, a smart TV is potentially a portal into your most private spaces, and an easy target for any ne’er-do-well with the inclination of hacking into your home … or even the companies that build them.

Evocative headlines recently alleged that Samsung’s smart TVs were spying on their owners — it turned out the truth was much less ominous, but once widespread media frenzy put smart TVs under the spotlight, there was no going back.

Even if manufacturers weren’t spying, it became clear that they aren’t doing enough to ensure that the eye in your living room isn’t watching you. And they have a lot of work ahead of them if they want to get there. Here’s what smart TV security looks like now, and what needs to be done to make it better.

Speaking in tongues

The Samsung scandal began with the notion, inspired by a line in its Terms & Conditions, that its smart TVs were always listening, recording, and uploading to the cloud. This simply isn’t the case, for Samsung’s smart TVs or any other brand’s.

Privacy policies like the one that put Samsung under the microscope don’t provide enough context.

A Smart TV has to be awakened with a set command before it actually records anything. When it does record your query, it sends that audio data to the cloud, over to a third-party for processing, and then back down to the user with the results. This is really no different than how Apple’s Siri or Google Now work, which is why you have to have an Internet connection for them to work.

So if lots of other products do the same thing – and have done so for quite some time — why did Samsung end up taking so much heat? Part of the problem is the process was never articulated well. The specific line that put Samsung under the microscope, in particular, didn’t provide enough context.

Spell it out … all of it

But perhaps the bigger issue at play here is one of expectation: People don’t expect to worry about the security of their TVs. They know to protect themselves when using devices like phones, tablets, and laptops, but passive devices like TVs don’t raise the same guard.

“A TV is for entertainment, so it shouldn’t become a device you have to manage by learning how to keep it secure and how to keep your personal content personal,” says Barbara Kraus, director of research at Parks Associates. “A TV manufacturer shouldn’t put a feature in that doesn’t have a customer benefit, and if it does, it should be designed with consumers’ privacy and security in mind, as opposed to that being an afterthought.”

LG Smart TV

This means communicating what the benefit of the feature is, how it works, and what you can do if you don’t want to opt in. For instance, any voice recognition feature that might feel intrusive should be able to be turned off, even after you’ve already agreed to the terms in using it. Of course, doing so will block out other, related features, and which those are should be spelled out.

Consider LG’s privacy policy, for example, which states, “you do not have to agree to the Privacy Policy, but if you do not, not all Smart TV Services will be available to you.” While the overall distinction is clear, what’s actually being taken away isn’t explicitly noted or listed. In any case, it’s a good bet your Smart TV will get dumbed down.

“That can almost come across as punitive,” says Kraus. “If you don’t do this, we’ll take away that. You need to tell me how this is valuable to me, and don’t say it’s because I can target advertising to you. That may not necessarily be everybody’s idea of a benefit.”

Companies aren’t the only threats

Since Smart TVs are Internet-connected devices that pull data from outside a home network, they carry a potential risk for privacy leaks or security vulnerabilities. Hackers could conceivably use one as a backdoor into your home network and the other connected gadgets you have lying around.

The biggest threat to your data is by way of the manufacturer or third-party misconfiguring or mismanaging it. A 2013 iSEC Smart TV research report focused on remote attacks when the TV could be compromised through the browser, video chat applications, social-media applications, or malicious applications.

“These are the most likely paths for attackers, but it’s unlikely the general public will be targeted through their TVs because the market share and user base is still too small,” says Aaron Grattafiori, principal security analyst at iSEC Partners. “Existing attacks against other devices, such as laptops and home routers, are still too successful and easy for them to avert their attention.”

But if they do find holes, hackers may find them far slower to be plugged than on a computer. Grattafiori notes that since manufacturing teams creating these devices rarely undergo security audits, they may never fix vulnerabilities or holes located within them with patches, opting instead to simply go about fixing them in next year’s model.

Still, he says, you should try to stay updated. “As with any computer or ‘smart’ devices, always install your updates, disable or unplug features you’re not using, and be careful installing Smart TV applications,” Grattafiori says. “Finally, if you’re shopping for a new TV, and only really want to use it for Netflix, Amazon Prime, or something like that, pick up a Chromecast — and a dumb TV.”

That last idea is nice in theory, but unfortunately it’s nearly impossible to find a high-quality TV that isn’t smart. And to be frank, turning off certain features and being diligent about updates all sound like Band-Aid measures – literally, like sticking a bandage on your laptop’s built-in camera. There has to be a better way.

Trouble in the cloud

When your TV listens to you, it doesn’t figure out what you’re asking with a processor inside. It usually hands the recording to a third party in the cloud that processes the recording and spits back a translation — like Nuance Communications. The company powers many different voice-recognition systems behind the scenes, including Siri. Nuance declined to comment on how it manages voice data when contacted by Digital Trends for an interview. But we’ve recently learned what happens to what you say to your phone behind closed doors.

“You need to tell me how this is valuable to me, and don’t say it’s because I can target advertising to you.”

Apple, for instance, records virtually everything you say to Siri, and hands much of it off to a third party for processing, ostensibly so that Siri can be improved to better handle the curve balls we throw at her. Unfortunately, sending data off to the cloud immediately introduces potential security risks. What’s to say it doesn’t get intercepted? What ensures your neighbor isn’t the employee who helps translate your request for the best hemorrhoid cream?

“If the third party or manufacturer is storing, logging or collecting anything at all, it’s game over as anonymizing the data is next to impossible,” says Aaron Grattafiori, principal security analyst at iSEC Partners.

So perhaps the answer is for manufacturers to ditch the cloud entirely and go with a different system instead.

Safer inside

So if the cloud’s not private, how can your TV respond to voice commands? Simple. Use speech-recognition services that are baked right into the TV – no cloud required.

Many devices already process some commands in the TV, and some in the cloud. Sensory is one of the companies that provide embedded commands for various consumer electronics firms, and it wants to change that.

As an example, if you’ve ever used Motorola’s Moto X smartphone, you know that you can train the phone to wake up on a custom command using your voice, even when you don’t have a data connection. The company calls it “Truly Hands-Free” and it has nothing to do with the cloud. That’s Sensory’s technology, and it’s widely deployed in mobile phones, wearables, toys and home appliances and some in-car systems, among others.

But it’s limited to a small array of canned phrases, so Sensory is looking to do more through its Truly Natural voice-recognition technology. Though smart TVs have never really been a target market for Sensory, it will be with this new platform.

“Truly Natural can recognize 1 million different phrases with the same kind of accuracy we’re seeing in the cloud,” says Todd Mozer, CEO at Sensory. “We’re using the same sort of algorithmic approach, but we’re doing it with a much smaller footprint. If we’re not sending all that data into the cloud, how are we adapting? We’re adapting to individuals, which works better than adapting to the general population.”

Sensory uses “domains,” which are techno-speak for content categories. Sports, for example, are a domain of Siri, which has been tailored to understand what users are asking for when they request sports scores.

One key difference in how embedded recognition works is that that the wake-up command isn’t voice-neutral. Anyone can say “Hey Siri” to wake up an iPhone, but the Moto X needs to hear the proper phrase in the actual owner’s voice to light up.

moto x voice controlMozer says his company wants to dive deeper and add another layer of security, which could include biometrics like face detection or the device you carry with you that’s connected to the TV, like a smartphone. “We will permit voice passwords you define, that others don’t know,” he says.

With Truly Natural launching this month, Sensory is already experimenting with moving up to 60 million phrases, though a significant number of those would be numbers and addresses for mapping purposes. Still, movie, TV show titles, artists, albums and songs could just as easily be in there, too.

“You really only need to go to the cloud when you want data from it. When you want to set an alarm or play a track, why go to the cloud?” he says. “Everybody focused on the cloud first, and now they’re realizing the best solution is going to be a combination of built-in client and cloud.”

A more private future

So Samsung isn’t listening to your tirades in the living room, and hackers aren’t scooping your bank PIN number out of thin air as you read it aloud in front of the TV. Not yet anyway. But the tools are there, and manufacturers will need to prioritize security updates and rethink how voice recognition is done to really keep your living room secure.

In the meantime, if you’re the paranoid type, maybe you want rethink that TV in the bedroom. Or go for an old-fashioned solution: Slap some tape over the mic.

Product Review

Spacious and intuitive, Samsung's Family Hub makes the case for the smart fridge

Samsung's 28-cubic-feet Family Hub fridge aims to not only keep your food cool, but also be the brains of your home via a large computer screen on the outside panel door. Just how smart is it?

Best deals on smart locks so you’ll never have to worry about unlocked doors

Is your front door locked? We found the best deals on smart home door locks that take the worry out of wondering if your home is secure. You can lock or unlock your doors remotely and some models let you control locks with voice commands.

Stop your PC's vow of silence with these tips on how to fix audio problems

Sound problems got you down? Don't worry, with a few tweaks and tricks we'll get your sound card functioning as it should, and you listening to your favorite tunes and in-game audio in no time.
Home Theater

Cutting the cord? Let us help you find the best service for live TV streaming

There's a long list of live TV streaming services available to help you cut the cord and replace your traditional TV subscription. Each is different in important ways, and this guide will help you find the best one for you.
Movies & TV

Lose the torrents. Here's how to watch 'Game of Thrones' online (legally)

Game of Thrones is one of the most popular shows on TV, but unless you're a cable subscriber, finding a way to watch isn't always easy. Check out our guide on how to watch online, whether you prefer using HBO, Hulu, or Amazon.
Home Theater

Block the outside world, tune into your own with the best in-ear headphones

Over-the-ear headphones offer top-flight sound, but they're not so easy to take along with you. If you're looking to upgrade your portable sound, check out our favorite in-ear headphones -- there's a model for every user and every budget.
Home Theater

Get ready to ditch your amplifier: New LG TVs add a powerful way to go wireless

WiSA, a wireless technology designed for high-end home theaters, might finally start seeing more love. LG's top-tier 2019 TVs will be WiSA certified, and that could mean a new wireless future for premium surround sound.

Don't know what to do with all your old DVDs? Here's how to convert them to MP4

Given today's rapid technological advancements, physical discs are quickly becoming a thing of the past. Check out our guide on how to convert a DVD to MP4, so you can ditch discs for digital files.
Smart Home

The Apple HomePod gets a whole lot cheaper today at Target

Apple's HomePod hasn't been the most popular smart speaker on the market but for users who are all in on Apple's heavily policed ecosystem of devices, this smart speaker is on serious sale at Target this week.
Home Theater

Kill your cable and switch to streaming with our painless guide

If you're going to quit cable or satellite for a streaming TV solution, you're going to want to get it right the first time. We've outlined exactly how to get started, step by step. Follow our lead, and you'll never look back.

Best Products of 2018

Our reception desk has so many brown boxes stacked up, it looks like a loading dock. We’re on a first-name basis with the UPS guy. We get new dishwashers more frequently than most people get new shoes. What we’re trying to say is: We…
Home Theater

Still listening on tinny TV speakers? Try one of our favorite soundbars

You no longer have to sacrifice sound for size when selecting home audio equipment. Check out our picks for the best soundbars, whether you're looking for budget options, pure power, smarts, or tons of features.
Home Theater

These top-line smart speakers conduct the most sophisticated symphony: Your life

Stuck talking to yourself? Get an A.I. assistant to keep you company! Whether you put your stock in Alexa, Google Assistant, or Siri, we've picked out the best smart speaker for any smart home ecosystem.

Choosing one of these smart TVs under $300 will make you look like a genius

Buying a good cheap smart TV is easier than ever. To help you out, we've sniffed out a half dozen of the best models out there with prices starting at just $130. We've even thrown in a couple 4K smart TVs, with these UHD models still…