Television used to be a one-way device: it received a signal and showed it, and nothing you did in front of it went anywhere. The set in a Bangladeshi living room today is different in kind. It runs an operating system, connects to Wi-Fi, installs apps, stores the passwords for YouTube, Netflix and the local OTT services, may hold a card number for subscriptions, and has a microphone in the remote or the bezel. It is, in every way that matters to an attacker, a computer — one that its owner has probably never updated, sitting on the same network as the family’s phones and laptops.
How a TV gets compromised
- Fake apps and “updates”. Sideloaded apps from unknown sources — common on Android TVs sold with pre-installed pirate streaming apps — are the most direct route for malware.
- The home Wi-Fi. If any device on the network is compromised, the TV is reachable from it; and a TV with a weak or default password is the softest target on most home networks.
- Open ports and Bluetooth. Screen-mirroring services and always-on Bluetooth expose interfaces that can be probed from a phone in the next flat.
- The microphone. Voice control is convenient, and a TV whose microphone can be switched on remotely is a listening device in the room where the family talks.
International security reports over the past two years record rising incidents of malware, data leaks and hijacking through smart TVs — not because TVs are uniquely weak, but because there are now more of them than desktop PCs, and they are patched far less.
What the manufacturers do
The larger brands have started to build phone-grade security into their TVs. Samsung’s Knox is the best-known example: protection anchored in the chip, so that compromising an app does not give access to the underlying system; real-time monitoring that blocks suspicious processes; encryption of stored login and payment data; and automatic security patches when new malware is identified. Google’s Android TV and LG’s webOS have comparable, if less prominently marketed, mechanisms. What none of them can do is patch a TV that never checks for updates or a user who installs a cracked streaming app.
Seven settings to check tonight
- Install pending system updates (Settings → Support/About → Software update) and turn on automatic updates.
- Restrict the microphone permission, and choose offline voice control where the TV offers it so audio does not go to the cloud.
- Do not install apps from unknown sources; remove pre-installed pirate apps.
- Use a strong password and two-step verification on the Google, Samsung or LG account the TV is signed into.
- Do not save payment details on the TV; subscribe from a phone instead.
- Never connect the TV to an unknown Wi-Fi network, and put IoT devices on a guest network if the router supports it.
- Review the TV’s privacy settings every few months — viewing-data collection and voice recording are usually on by default.
Comfort is the point of a smart TV. The awareness that it is also a device that accumulates your data, and that its security is worth asking about before buying, is the price of the comfort.
