<>
LG Electronics plans to suspend smart TV applications that utilize software development kits to turn residential televisions into always-on proxy nodes, according to an announcement made in July. The decision follows security research revealing that a significant portion of apps on LG’s webOS platform allowed third parties to route internet traffic through consumer hardware without explicit network-level transparency.
The policy shift addresses a growing monetization trend where developers embed residential proxy SDKs into simple games, screensavers, and utilities. According to findings published by security firm Spur in July, more than 42 percent of apps available on LG’s webOS store and over a quarter of apps on Samsung’s Tizen operating system contained these proxy components.
LG Enforcement and Developer Compliance
Responding to queries about the Spur findings, LG Senior Vice President John Taylor stated in July that residential proxy networks are not an intended use for LG smart televisions. Taylor confirmed that the corporation is actively working with app developers to purge the proxy functionality from the webOS platform.
“If this option is not removed, these apps will be suspended,” Taylor said in an emailed statement to KrebsOnSecurity, noting that internal platform audits are underway. LG intends to tighten its developer submission guidelines to block future software builds that incorporate residential proxy SDKs.
Proxy providers compensate developers to include these SDKs, effectively renting out consumer internet connections to paying corporate clients. Bright Data supplied a majority of the proxy SDKs discovered across both Samsung and LG ecosystems, according to Spur’s analysis.
Proxy Provider Defense and Consent Frameworks
Bright Data defended its business model by stating that its network operates entirely on user consent and adheres to platform terms set by LG and Samsung. Every peer opts in via a dedicated prompt and receives value in return, according to a statement provided by Bright Data in July.
“Every customer is vetted, and our practices have now undergone a second independent audit by PwC,” the Bright Data statement reads. The company also noted that it employs technological safeguards to prevent external network users from accessing local home devices connected to the proxy node.
Despite these safeguards, security researchers argue that burying consent inside a one-time TV app prompt fails to establish meaningful transparency. Spur researcher Trevor Sutter emphasized that households contain minors and other secondary users who may inadvertently grant permissions without understanding the network security implications.
Hard-Coded App Controversies
The webOS proxy crackdown arrives as LG faces separate scrutiny regarding software bundling practices on its consumer hardware. In July, hardware review channel Gamers Nexus demonstrated that select high-end LG LCD monitors automatically install promotional software for McAfee antivirus subscriptions via Windows Update without displaying an explicit user consent prompt.
While LG moves to cleanse its smart TV app ecosystem of residential proxy tools, the parallel monitor software distribution highlights ongoing challenges regarding third-party promotional software integrated into consumer electronics.
Frequently Asked Questions
What is a residential proxy SDK in a smart TV app?
A residential proxy software development kit is a piece of code embedded in an app that routes external internet traffic through a consumer’s home internet connection, effectively turning the television into a proxy server for paying clients.
How many LG apps contained proxy software?
Security firm Spur found that over 42 percent of applications available on the LG webOS app store contained residential proxy components prior to the company’s enforcement announcement.
What action is LG taking against non-compliant developers?
LG stated that it is giving developers an opportunity to remove proxy SDKs voluntarily, but apps that fail to comply with the new rules will face immediate suspension from the webOS platform.
>
Worth a look