These researchers got drunk to hack an LG TV
Summary
Graham Cluley and Liam Potter discuss a Gamers Nexus investigation revealing LG smart TVs record audio even when off, exploit vulnerabilities, and sell user data for targeted advertising. They also cover Manux, a greedy Android malware that combines info-stealing, ransomware, and "jump scare" harassment features. The episode features an interview with Andy Hornold of Intruder on mid-market security challenges, plus picks for the flag identification site FlagLookup.com and the true crime podcast "Killer in the Code."
Topics discussed
Intro: Crypto scam banter and episode 485 introduction
Nostalgia: Weird Science and the Memotech MTX computer
Teaser: What this episode will not cover
Sponsor: Intruder and the gap in pen testing frequency
LG TV Hack: Researchers get drunk to bypass EULA
Legal loophole: Inebriation and contract validity
Privacy breach: TVs listening when 'off' and crypto scam test
Capabilities: Long-range audio capture and future features
Data collection: Home scanning and location tracking
Privacy controls failure: Data retention and offline storage
Risks: Espionage, hacking, and proxy usage
Advice: How to secure your smart TV
Sponsor: ThreatLocker and agent AI in cyber attacks
Manux Hotax: Malware naming conventions rant
Manux Hotax: Android malware features and distribution
Manux Hotax: Ransom tactics and haunted device behavior
Sponsor: Vanta and compliance automation
Pick of the Week: FlagLookup.com and flag culture
Pick of the Week: AI cracking the Zodiac cipher
Interview: Andy Hornold on AI pen testing and security risks
Outro: Show notes, credits, and Flex Car sponsorship
Listen ad-free on Castria