Developers have built two open-source tools that use AI to remove ads and tracking from Android-based smart TVs. DumbTV targets Fire TV Edition and Android/Google TV devices from makers like Sony, TCL, Philips, Hisense, Xiaomi and Nvidia Shield, aiming to strip interface advertising, block Automatic Content Recognition (ACR) tracking, and prevent unwanted updates. CleanYourTV uses a Wi‑Fi approach that requires no root and was developed with Anthropic’s Claude Code; it automates steps to remove sponsored tiles and manufacturer clutter and has been tested on a range of TVs. ACR technology silently fingerprints audio and video - sometimes even from HDMI-connected sources - to profile viewing for targeted advertising, so stopping ACR can materially reduce tracking though it may not eliminate all ads.
AI coding agents simplify the technical workflow by translating plain-language requests into device-specific commands, lowering the barrier to modification but increasing the risk of mistakes. Misidentified firmware, package dependencies, or recovery paths can render a TV unusable, and behavior varies across chipsets and launchers. Safer options include third‑party launchers (ATV Launcher, Projectivy, FLauncher) and built-in privacy controls; disabling ACR (sold under names like Viewing Information Services or Live Plus) reduces personalized ads but won’t restore full manufacturer-free ownership. The broader shift prioritizes minimal, unobtrusive interfaces for user control over embedded ad ecosystems.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.