log4j (@log4j) on X
A security researcher who goes by @log4j kept getting weirdly targeted ads on his 2025 Samsung TV. So he went looking for why. The firmware was encrypted, so he used zero-day exploits to get a root shell on his own TV. What he says he found: an always-on voice service, automatic content recognition (ACR, which fingerprints whatever is on your screen), location data, and a full telemetry pipeline. A full write-up hasn't been published yet, so treat the details as early. Here's what I love about this. The same tools that make surveillance cheap also make it easier to see. AI can help regular people read firmware, decode network traffic, and figure out what their own devices are doing. Big Brother gets a little schadenfreude for once. Humanity for the win. Have you turned off ACR on your TV? (It's in the privacy settings.)