LG bans residential proxies in smart TV apps
Imagine your smart TV, the one you use to relax on the couch, secretly routing third-party internet traffic. It sounds like a movie plot, but it was the reality – and a security problem – for millions of LG users. The home appliance giant, LG Electronics USA, recently announced that it will suspend apps from its webOS store that turn TVs into residential proxy nodes. A welcome measure, but one that raises deeper questions about user consent, app monetization, and platform responsibility.
The Hidden Side of Your Smart TV: Disguised Residential Proxies
Less than a month before LG's announcement, a revealing investigation by security firm Spur brought to light a concerning practice: more than 42% of apps available for download in LG's webOS store included SDKs (Software Development Kits – a set of tools for creating apps) that transformed the user's television into a residential proxy node. For those unfamiliar, a residential proxy node is an internet connection point that uses the IP address of a common residence, making internet traffic appear to come from a legitimate domestic user, rather than a datacenter server. This is often used for activities such as data collection (web scraping), ad testing, or to bypass geographical restrictions.
Spur's research also found that over a quarter of apps for Samsung's Tizen operating system had similar residential proxy components. These SDKs allow unknown third parties to route their internet traffic through the user's TV, often without clear and explicit consent. For app developers, this is a form of monetization: proxy providers pay for these SDKs to be included, turning the user's device into a "rental" for paying clients. Bright Data, one of the largest proxy networks, was identified as responsible for most of these SDKs in both LG and Samsung TVs.
LG's Response and the Challenge of User Consent
Following Spur's findings, John Taylor, LG's Senior Vice President, confirmed that the company is working with developers to remove the residential proxy option from its apps on the webOS platform. Those who do not comply will have their apps suspended. "A residential proxy network is not an intended use for LG smart TVs," Taylor stated, emphasizing the company's commitment to strengthening its app evaluation process.
While LG's action is a step in the right direction, the underlying problem is much larger. Spur argues that the main problem is not the existence of proxy networks, but rather their large-scale incorporation into devices that most consumers do not perceive as computers and do not have the ability to audit. As Trevor Sutter of Spur pointed out: "A single consent request, hidden in a TV app, does not replace meaningful transparency, ongoing control, and platform oversight." The risk is amplified when consent comes from individuals in the household, such as minors, who use the device but should not give such authorization.
Proxy providers, such as Bright Data, claim to follow rigorous "know your customer" (KYC) processes to validate legitimate uses of their services and incorporate technological countermeasures to prevent their clients from interacting with other devices on the proxy user's local network. However, the central question remains: does the user have real awareness and control over what their device is doing?
A Worrying Pattern: From Proxy to Invasive Advertising
The news from LG about residential proxies comes at a time when the company was already under the spotlight for another questionable partnership. Recently, the YouTube channel Gamers Nexus revealed that certain high-end LG LCD monitors automatically install an app that promotes paid McAfee antivirus subscriptions. Worse still, the app arrives via Windows Update without any request for user approval.
This episode, although in a different context (monitors versus TVs), echoes the same concern about user consent and the imposition of unwanted software. Both cases demonstrate a trend of companies seeking extra monetization or commercial partnerships that can compromise user experience and privacy, often exploiting gray areas of consent or lack of transparency.
Why This Matters?
For builders and decision-makers in technology, these incidents are a critical reminder that user trust is an invaluable and fragile asset.
- For App Developers: The pursuit of monetization must be balanced with ethics and transparency. Including SDKs that turn devices into proxy nodes, especially without clear consent, is an unsustainable practice that can lead to app suspension and reputational damage.
- For Platform Leaders (like LG and Samsung): App store governance and evaluation processes are fundamental. Allowing such SDKs to proliferate undermines trust in the platform and requires a quick and decisive response to restore credibility. Responsibility goes beyond the code; it encompasses the complete user experience and the protection of their privacy.
- For Founders and Innovators: This is a case study on the risks of partnerships that prioritize short-term profit over user experience and security. Building a successful product or service requires a solid foundation of trust, and that means being transparent about how data is used and how hardware/software operates.
LG's decision to ban residential proxies from its smart TVs is an essential step. However, the larger lesson is that companies need to go beyond reactive compliance. It requires a proactive commitment to transparency, user control, and a rigorous evaluation of all forms of monetization and partnerships. Otherwise, the "smart side" of our devices can quickly become a point of vulnerability and frustration for users.
Sources
📬 Enjoyed this? Subscribe to the Vaccari's Code newsletter for the next wave of software & AI trends, straight to your inbox: Subscribe here