The piece argues that the U.S. Digital Millennium Copyright Act lets television makers use encryption to prevent owners from removing invasive software from devices they own. The FULU Foundation, a nonprofit founded by right-to-repair advocate Louis Rossmann, is asking the Copyright Office for an exemption so people can disable smart-TV surveillance. The case turns on automatic content recognition, or ACR: software that samples a TV’s audio or picture, creates a fingerprint, and sends it to a server to identify what is playing. This monitoring can cover antenna broadcasts and devices connected through HDMI, not just content watched through the TV’s apps.
Testing described in the account found that a Samsung TV continued transmitting tracking data after its owner turned off the relevant setting. A researcher who gained root access to an LG television decrypted data sent to LG Ad Solutions, also known as Alphonso, and found location details including an address, coordinates, and market area. The LG set identified programs through sound: muted video produced no fingerprints, while audio over a black screen generated 48 in about three minutes. Servers also assigned recognized material to genres such as religion, health, or politics. These findings show how ACR can reveal viewing habits and location, while DMCA restrictions can make removing the tracking software legally risky.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Penlink’s Webloc, which uses advertising data for surveillance, has been purchased by security agencies across multiple countries. Citizen Lab warns the system enables intrusive mass surveillance, with particular risks in authoritarian states. (citizenlab.ca)
Nvidia chips reportedly reached China in large quantities after Commerce Secretary Howard Lutnick declined to enforce export controls and failed to replace them. Lutnick should resign, the author argues, over the resulting national security risks. (nytimes.com)
DOC-foundry uses AI agents to create Sigma security detection rules, then has a simulated attacker test them. A deterministic referee checks coverage before a stakeholder review chain approves the rule and records its review trail. (github.com)
The FBI warns that the FaceStealer scheme targets cryptocurrency holders and steals their funds. Treat unsolicited offers and links with caution, and verify crypto services before sharing information or sending money. (fbi.gov)
Cloudflare’s abuse-reporting page is reportedly blank, leaving visitors unable to use the form it directs them to. The page is intended for reporting abuse hosted through Cloudflare. (news.ycombinator.com)
Home Assistant stores refresh-token secrets and signing keys in plaintext, while some tokens never expire and survive password changes. Anyone who obtains the configuration directory or a backup can retain access to the home, and restoring a backup can revive old tokens. (seclists.org)
Today's best Hacker News stories, summarized and screenshotted, one email a day.