Bounty Hunter Uncovers Extensive Surveillance in Samsung Smart TVs

Cybersecurity bounty hunter log4j uncovered troubling privacy violations after noticing unusually precise advertisements appearing on their Samsung television. The researcher decided to examine the firmware of their 2025 model TV, leading to the discovery of what they characterized as extensive surveillance capabilities built into the Tizen operating system.

log4j documented their findings through a series of posts on X, revealing that the TV collects granular telemetry data through packet logging, performs audio analysis, captures screenshots, and maintains cross-device identifiers for advertisement targeting. The researcher theorizes that Samsung TVs experience performance degradation because the system dedicates substantial processing resources to analyzing user data, including audio streams, visual content, and behavioral patterns tracked through a region-specific convolutional neural network.

i own a relatively new (2025) samsung tv.i kept getting weirdly targeted ads.i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.zero days it is. root shell on new samsung TVs!discovered PRIVACY HORROR. write up? https://t.co/EsxxCy1b6aOctober 21, 2026

log4j

The artificial intelligence system identified by log4j monitors viewing habits, including which videos users watch, which advertisements they skip, and how far they progress through content. Notably, the researcher discovered that even televisions lacking built-in microphones contain code designed to activate microphones on connected peripherals, such as soundbars or Bluetooth speakers, to capture ambient audio.

Hugging Face engineer ngxson attempted to verify the microphone activation behavior using a Flipper Zero device and observed the television opening its microphone for exactly five seconds before stopping. ngxson cautioned that their testing was conducted on a rooted Tizen television with multiple settings already disabled, meaning an unmodified device might exhibit different behavior patterns.

@log4j Ok so right off the bat, it opens the mic for exactly 5 seconds then stop. Seems like a strange way to test mic (?)Then no more recording since then, but need to keep observing more to conclude https://t.co/PSHIfMG2oOOctober 23, 2026

ngxson

During their investigation, log4j utilized OpenAI tools to assist with local reverse engineering work. OpenAI subsequently terminated the researcher's account, citing cyber abuse concerns. log4j disputed the ban, asserting that they employed the tools exclusively for local analysis rather than to identify or exploit vulnerabilities, and maintained they did not violate the platform's terms of service.

Samsung and Tizen are not isolated cases of television manufacturers implementing surveillance features. LG televisions have faced similar accusations regarding customer monitoring. Many television owners have reported experiencing slowdowns in device performance despite the absence of new features or resource-intensive applications, with some attributing this degradation to bloatware, though log4j's discoveries suggest data processing activities may be responsible. The researcher is preparing a detailed technical report documenting their methodology so others can conduct comparable investigations.

In a closing remark, log4j wryly observed that they had "finally found a company that truly listens to its customers."