LG to Ban Residential Proxy Apps from Smart TV Ecosystem
LG Electronics USA will suspend smart TV applications that incorporate residential proxy SDKs, following research that found widespread use of these components in games and utilities.
LG Electronics USA has announced plans to suspend any applications built for its smart TV platform that utilize residential proxy Software Development Kits (SDKs). This decisive action comes in response to security research revealing that a significant percentage of apps available on LG's webOS store were enabling unknown third parties to route internet traffic through users' televisions.
The security firm Spur's recent investigation highlighted that over 42% of apps on LG's webOS platform and more than 25% of apps for Samsung's Tizen operating system included these residential proxy SDKs. These components, often bundled with seemingly innocuous applications like games and utility tools, effectively turn a user's smart TV into an always-on proxy node, rented out to paying customers.
John Taylor, Senior Vice President at LG Electronics, stated that a residential proxy network is not an intended use for LG smart TVs. The company is actively working with developers to remove this functionality from their applications. Failure to comply with this directive will result in the suspension of the offending apps from the LG Content Store.
LG's commitment extends to strengthening its app evaluation processes to prevent future occurrences. The company aims to enhance platform quality and user experience by ensuring that residential proxy networks are not integrated into its smart TV applications moving forward. This review process is reportedly already underway.
App developers can monetize their creations through residential proxy providers, which pay for the integration of SDKs that transform user devices into proxy nodes. Spur's report identified Bright Data as a major provider of such SDKs found on both LG and Samsung smart TVs. While proxy providers often claim adherence to know-your-customer policies and implement technical safeguards, the research points to a lack of meaningful transparency and user control.
Spur argues that the core issue lies in the widespread embedding of these SDKs in devices consumers do not typically consider as computers and are ill-equipped to audit. The firm emphasizes that a one-time consent prompt, often buried within an app's terms, is insufficient for meaningful transparency, ongoing control, and platform oversight. The risk is further amplified when consent is given by individuals within a household who may not fully understand the implications, such as minors.
LG's move to purge these SDKs is a significant step towards enhancing user privacy and security on its smart TV platform. This initiative addresses concerns about unauthorized data routing and potential misuse of user bandwidth and network resources. The company's proactive stance signals a growing awareness among hardware manufacturers about the security implications of third-party SDKs embedded in consumer electronics.
While LG's action is commendable, it also highlights a broader challenge in the smart TV app ecosystem. The reliance on third-party SDKs for monetization can inadvertently introduce security and privacy risks, necessitating robust vetting processes by platform owners. LG's commitment to strengthening its evaluation procedures is a crucial step in safeguarding its users and maintaining trust in its smart TV offerings.