Samsung TV firmware shows always-on listening

A researcher using the pseudonym @log4j has identified data collection and active listening mechanisms within the firmware of his 2025 Samsung smart television. The technical analysis reveals the existence of a background service capable of utilizing connected home microphones and running local artificial intelligence models to classify ambient sounds.

Configuration files and background services

According to the researcher's publications, the Tizen operating system of these televisions contains a configuration file named security-policy.xml. He adds that a service named csapi-tv-service-alwaysonvoice is always active.

Internal counters and data transmission

The researcher has shown screenshots of internal counters labeled EV201 SOUNDSENSOR_ON, designed to classify specific sound events: dog barking, baby crying. The data, according to his analysis, would be transmitted to an endpoint identified as lcprd1.samsungcloudsolution.net, a domain attached to Samsung's cloud infrastructure.

Additional surveillance features

The security researcher also notes the presence of an ACR automatic content recognition system, geolocation modules, a packet logger named rmdemon, and a list of more than 400 partner entities registered in the television's configuration for data collection and sharing.

Bluetooth microphone and targeted ads

In a separate publication, the researcher also documented the operation of the Bluetooth microphone in the Samsung soundbar, used to relay voice commands to Bixby without direct interaction with the remote control. He owns a relatively new (2025) Samsung TV and reported receiving targeted ads.

Privacy concerns and encryption challenges

The researcher described the situation by stating, "he has finally found a company that really listens to its customers." He noted that reversing the firmware was difficult due to AES encryption and required advanced methods like UART/JTAG. He discovered a root shell and described the findings as a "privacy horror."

Broader debate on smart devices

This new case related to Samsung televisions brings back one of the most important debates when discussing internet-connected devices: their usefulness compared to the risks associated with their use. Owning a smart television provides direct access to the internet and therefore to online services (streaming, internet browsing, screen sharing, voice control through assistants such as Alexa), but this comes with security and privacy risks.

Previous investigations and legal actions

A large technical investigation conducted by specialized media outlets Gamers Nexus and Level1Techs revealed that some LG OLED televisions collected significant data about their network environment. The researchers claimed that the devices transcribed and tracked audio data in the room. The attorney general of Texas has filed mass lawsuits against the major global manufacturers (Sony, Samsung, LG, Hisense, TCL), accused of abusing ACR technology.

FBI warnings and privacy alternatives

Even the FBI has, in the past, issued formal national alerts regarding smart televisions. The federal agency pointed out that hackers can easily take control of the poorly secured cameras and microphones of these televisions to observe and eavesdrop on the privacy of families within their own homes. The GitHub repository Awesome Privacy lists a variety of free and open-source alternatives for users seeking privacy-respecting solutions.

Call for user awareness and reflection

The article also asks readers to consider their views on data collection by smart televisions, whether it constitutes a privacy violation or a useful service, and what measures they take to protect personal data on smart televisions. It invites readers to reflect on their preferences for external devices and expected developments for smart televisions in the future.