Skip to content
NewA calmer, faster ZeroHour
StoryResearchhigh

Samsung and Vizio TVs keep ACR-like traffic after opt-out

2 sources · 2 articlesFirst reported Updated ()
What's new

October 22: Both outlets detail the 12-TV, 5,943-test study, persistent Samsung and Vizio ACR-like traffic, and an open server holding over 57 million results.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

A 12-TV study found Samsung and Vizio still sent ACR-pattern traffic after opt-out; an open server held over 57 million results.

The Watching the Watchers study tested 12 commercial televisions from 10 manufacturers, covering about 95% of the U.S. smart TV market, across 5,943 automated experiments. Samsung Tizen and Vizio SmartCast kept sending traffic consistent with automatic content recognition after researchers disabled the feature. Most of that traffic was encrypted, so the study could not confirm viewing data or retention. Opt-outs stopped ACR traffic on tested LG webOS, Sony Google TV, Amazon Fire TV, and VIDAA sets; GBHackers says Roku’s opt-out did not cover its own streaming service. VIDAA sent ACR data, including audio fingerprints and device IDs, over unencrypted MQTT, and an unauthenticated server exposed more than 57 million detection results tied to over one million televisions.

Key facts
  • Samsung’s streaming service showed ACR-like traffic in all 30 opted-out tests.
  • Vizio contacted its Amazon Kinesis ACR endpoint in every opted-out run.
  • Findings apply only to the tested devices and firmware, according to GBHackers.
  • VIDAA MQTT ACR messages stayed unencrypted even after login was required.
  • Vizio WatchFree+ put program or channel names in DNS and TLS server names.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • Cyber Security NewsNames the study, 95% market share, and over one million TVs.
  • GBHackersRoku gap, three-hour exposure window, and firmware-only caveat.
Vendors
SamsungVizioLGSonyVIDAAAmazon
Products
TizenSmartCastVIDAAWatchFree+webOSGoogle TVFire TVRoku
Countries
United States

Coverage

oldest first · one row per article · UTC
  1. · 3d ago Cyber Security NewsFirst report

    Samsung and Vizio TVs still send ACR-like traffic after opt-out

    A 12-TV study found Samsung and Vizio kept ACR-pattern traffic after opt-out, while an open server held over 57 million detection results.

  2. · 3d ago GBHackers

    Samsung and Vizio TVs still send ACR-like traffic after opt-out

    A study of 12 TVs found Samsung and Vizio opt-outs did not stop ACR-like traffic, while encryption blocked confirmation of the payload.