With a massive attack surface that generates billions in dollars of revenue for manufacturers, often times the data collected by these devices is more valuable then the physical product itself. A look into what data is observable through targeted network traffic analysis and the protocols and endpoints they communicate through.

After seeing the recent investigation made by independent journalists and security researchers, revealing numerous security and spying concerns from LG TVs, it prompted my own further research into additional devices manufactured by Roku and Samsung.

This talk will go over the 3 step process used to collect and analyze network traffic that exposed excessive data leakage, including tokens, and eventually finding an exploitable CVE that allowed for unauthenticated control of the TV.

Learn how to check your own Smart TV’s for potential privacy and security concerns and also more importantly what you can do to try and protect some of your digital privacy from the onslaught of advertisers and attackers.