Hacker News new | past | comments | ask | show | jobs | submit
As far as I can tell, there is no write up. This is a reddit post with screenshots of a Twitter/X post by @log4j. Even the Twitter post doesn’t seem informative, but Reddit isn’t a source for the information by any means.

The original link was on HN two days ago with no traction.

https://twitter.com/log4j/status/2113014142600953868

So a bit of background I spent the last 17 years going Smart TV app development.

Not a lot here is any sort of surprise to anyone in the industry.

Always on audio is common on a whole swath of devices - any that want to do Alexa style voice prompts need it. ACR is table stakes for modern TVs reselling viewer data has driven down TV prices to the point where there is no going back.

The policy file here is how you build Tizen apps. It’s a list of specific features your app needs access to and certain levels of access (controlling the TV For example) require different levels of contractual relationships with Samsung.

Everything Samsung collects should be covered in their, very dense, TOS.

I spent a couple years working at the platform (AndroidTV + Google Assistant) level on smart TVs.

> any that want to do Alexa style voice prompts need it

Not technically true. More modern smart TVs (~post-2021) put speech recognition models for the hotword only onto the DSP, and then have the DSP wake up the CPU for further auditory processing when it detects a hotword or remote button press. There are major power-efficiency benefits to this, because the DSP uses a fraction of a watt and can easily keep running while the TV is sleeping, while the CPU, Internet, and rest of the circuitry is a major power hog. Your smart TV or streaming dongle would basically never sleep if it were forever running the audio capture.

For that matter, it's pretty rare for the device to actually run the speech recognition models on-device. Smart TV manufacturers are very sensitive to BOM costs, which means that their hardware is only powerful enough to run machine-learning models at the extreme high end of their product range. Most of the time the full audio gets streamed back to the Internet and the speech recognition & voice assistant gets run in the cloud, with commands streamed back to the TV.

I won't say that it never has always-on audio listening; a significant number of devices I tested did. But I'll say this comes because they're poorly implemented. The DSP hotwording approach requires coordination between hardware and software developers, oftentimes across companies, and it's more complex to implement and a lot of executives don't care about the marginal consumer benefit it gives. Many smart TVs just guzzle power when they're off instead.

Yeah I don’t disagree, but should clarify that I’m just referring to the security policy that provides access to the ambient mic. How the app/platform handles that audio is a different path that I’m not entirely familiar with.
N you please answer one thing for my peace of mind?

If I use a TV like the ones you’ve worked on, and never ever connect it to any WiFi network since the day I bought it, is there any way they still call home and pass their payload? Like searching for and connecting to an open WiFi network, some kind of relay through another device over Bluetooth or any other way I haven’t thought of yet?

> ACR is table stakes for modern TVs reselling viewer data has driven down TV prices to the point where there is no going back

Really? There’s no “spyware free” marketing angle? Even Amazon has always sold a Kindle variant with no ads for $20 more.

Not really, that said it’s trivial to disable, you can opt out either via their settings or just by not connecting the TV to the internet.

I will say that how “completely” disabling ACR via settings works is not terribly clear and there are a few lawsuits questioning wether “opting out” actually works as presented.

loading story #50226065
Except it's not covered in their TOS
Oh no, how will Samsung survive this, they will have to send $5 to few thousands of people for the damages if they decide to start a class action lawsuit and if a judge/jury decides it was really causing damages... as a reminder Samsung Electronics made almost 250 B-B-B-B-illion dollars in revenues just last year.
AFAIK the penalty in the EU is up to 4% of global revenue.
Maybe not the same exploit but I found another guy who was also able to debloat his TV: https://github.com/jss8649/quiet-tizen
These posts are engagement farming, they should be banned in HN, it’s like sending a marketing buzzword email to a technical engineer, useless.
What are you talking about? I have a samsung frame that I'm in the middle of rooting because of this excellent information.
I always advise people to never, ever use Reddit as a reference for anything.
Why and what reference do you rec instead? Even this site gets fake news that stays up for hours.
I think that's the point. If you have to go looking for a reference and don't easily find one, it's probably fake.
Books, and your grandma’s notes on making jam, I guess.
I would avoid and distrust most social forums, such as reddit, that have Pookas which are fond of rumpots, crackspots and how are you bix6? -- https://www.youtube.com/watch?v=NeEsx2QLJ40
Sure, ‘knee-jerk’ reddit is unreliable, but many upvotes over time with supporting comments can be a strong signal of truth
It’s unfortunately only a symbol of bot activity or popularity with the crowd in the subreddit.
What do you mean? I can post whatever I want on Reddit and I can make it have as many upvotes as I need. They basically make bot farms undetectable, by hiding histories and automatic username selection. Literally nothing should be considered truth with Reddit as its only source
> Literally nothing should be considered truth with Reddit as its only source

Don’t get me wrong: I completely agree that Reddit should not be the only source, and go further that nothing should be assumed to be true based on Reddit signals (such as upvotes and comments). This is why I carefully chose my words: these can be strong signals of truth.

I think it’s also worth parsing out that I don’t think this is valid across all subreddits.

Why? Their system is literally mined for its Q&A merit by search engines. If it was all very bad information, NYSE: RDDT would not exist.
Stock prices are based on earnings, not on factual accuracy of content.
In Reddits case the stock price is based on nobody noticing that most of the users fled. Now they have to AI translate Indian content into English (and vice-versa) to keep up the illusion that people still use it.

At some point this will drive away the remaining users and it will just be bots and Reddits machine translations of those bot posts. At that point AI companies will just be paying to train on machine translated versions of content they generated to begin with.

If that were true, all the AI companies would have negative stock prices. Promises of (best case) future earnings are part of stock prices.
Future earnings are earnings, in the future.