• 9point6@lemmy.world
    link
    fedilink
    English
    arrow-up
    62
    arrow-down
    1
    ·
    edit-2
    9 months ago

    Worth pointing out this isn’t any proper Android TV devices, but rather those cheap boxes that are often basically SBCs with AOSP installed on them which are predominantly sold as easy piracy boxes.

    Edit: in fact, the article doesn’t currently have TV in the title

    • Vent@lemm.eeOP
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      1
      ·
      9 months ago

      Leaving out the TV makes it less precise and more clickbaity because then it sounds like Android phones are affected.

    • Zanz@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      9 months ago

      Can you even get an actual Android TV device now that isn’t a Chromecast or an Nvidia shield? Other than a few TVs that mostly come with malware (tcl, Sony, Hisense) I can’t think of anything else that has actual Android TV you can buy as a consumer.

    • PoopMonster@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      9 months ago

      Walmart sells Sceptre 4k tvs which are dumb, sure they aren’t OLED or have amazing refresh rates but they are the perfect TV for most people, it’s much easier to chuck and buy a new $20 streaming device when updates make it crawl to a near stop than it is to do the same with a $600+ TV.

      • Knocturnal@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        9 months ago

        These new Led backlit tvs die like every 2 years and need led strip replacement. I had to repair mine 3 times now while my old lcd tv never died in 15+ years and I gave it to my dad who is using it for past 8 years daily.

    • DudeDudenson@lemmings.world
      link
      fedilink
      English
      arrow-up
      5
      ·
      9 months ago

      I’m annoyed that they don’t sell them and that even if you don’t connect a smart tv to wifi to keep it dumb it’ll still not just be a display and it’ll try to shove stuff in your face

      • LappingDog@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        ·
        9 months ago

        I bought a Hisense and it had the option during setup to disable most smart features and leave it in “basic mode”. I was already going to put an Apple TV in it so I just left it there and I’ve been happy. Only thing a tv needs is settings and the ability to change inputs.

        • notenoughbutter@lemmy.ml
          link
          fedilink
          English
          arrow-up
          3
          ·
          9 months ago

          android tv has this option at setup, like Sony and whatever else

          your Hisense has android tv pre-installed

      • viking@infosec.pub
        link
        fedilink
        English
        arrow-up
        3
        ·
        9 months ago

        Most TVs have an office or presentation mode hidden somewhere in the settings, that will get rid of the ad-ridden interface and replace it with a plain and functional one. That plus no wifi, ever, gets them sorted.

        • job3rg@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          1
          ·
          9 months ago

          Whats the malware going to do?

          Lock you out? Instant refund and negative review. Steal your info? Cant send info out without internet.

          • the_lone_wolf@lemmy.ml
            link
            fedilink
            English
            arrow-up
            1
            ·
            9 months ago

            But it will still be a bloat and take up resources like any deamon/service and resources are already very low on these devices!

            Not connecting to internet is not a solution but buying dump TV is.

    • MeanEYE@lemmy.world
      cake
      link
      fedilink
      English
      arrow-up
      4
      ·
      9 months ago

      I have an old Toshiba LCD TV which is a bit thick in comparison to today’s devices but it’s so good and robust. Also no smart features what so ever. Comes with a bunch of inputs and has some features not found on modern devices. It also came with full schematic should it ever need servicing. Every now and then I’ll get the urge of getting oh so new and shiny OLED then remind myself about builtin expiration date and stupid “smart” features.

    • DarkThoughts@kbin.social
      link
      fedilink
      arrow-up
      9
      arrow-down
      1
      ·
      9 months ago

      Are non smart TVs even still a thing nowadays? I don’t own or watch any TV so I honestly don’t know how the market currently looks like.

        • wjrii@kbin.social
          link
          fedilink
          arrow-up
          10
          ·
          9 months ago

          Depends on your definition of “quite pricey.” There’s no equivalent of a $250 50" Insignia FireTV, but I’ve seen Samsung signage displays on Amazon for about a $75-$100 premium over their comparable Smart TVs. They also don’t come with a stand, so if you weren’t already buying a VESA mount you’ll need to add another $40-80. There is a significant premium, but it’s not necessarily orders of magnitude.

          • grayman@lemmy.world
            cake
            link
            fedilink
            English
            arrow-up
            2
            ·
            9 months ago

            And they’re made better… To be on 24x7. So you’re also paying for a better quality display. That’s worth paying for too.

      • guyrocket@kbin.social
        cake
        link
        fedilink
        arrow-up
        8
        ·
        9 months ago

        Apparently “smartness” has not invaded projectors…per a comment I read here on kbin a while back from a projector owner. This really encourages me to buy one.

      • Chozo@kbin.social
        link
        fedilink
        arrow-up
        8
        ·
        9 months ago

        They’re harder to find, for sure. Especially if you want a large screen.

        When I was shopping around a few years ago, the only 65" TV I could find without smart features was a Sceptre, which is Walmart’s electronics brand. Speakers so bad that I had to buy a sound bar, and the display isn’t that great, but it gets the job done and I don’t need to worry about it being an attack vector.

  • itsraining@lemmy.world
    link
    fedilink
    English
    arrow-up
    32
    arrow-down
    3
    ·
    9 months ago

    That’s why you should build your own media center from an old machine. Much safer and more private.

    • 👁️👄👁️@lemm.ee
      cake
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      9
      ·
      9 months ago

      I swear shit like this is why Lemmy is so incredibly out of touch with the real world. I can’t take the community seriously anymore.

      • CeeBee@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        9 months ago

        People have been using old computers as media centres for decades at this point. Not sure what you’re on about.

          • CeeBee@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            9 months ago

            Legally would be DVDs, Blurays, and DRM-free sources.

            I’ve torrented movies I have physical copies of before. It’s faster than ripping and encoding it myself. And notice I didn’t say “pirated”?

            You can’t pirate something you legally own a copy of. That fast was a major factor in some of the high profile lawsuits against individuals. If the person being sued owned a copy of the movie/song then they dropped it from the list.

      • smileyhead@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        9 months ago

        Because something is not popular and not available in typical electronic store doesn’t mean it’s not real.

        I know having a private life may seem unreal in recent ~10 years, but it surely can be done without giving up modern life. All it takes is a little time for research and saying “no” sometimes. The hardest part are always areas where more people like that are needed to say “no”.

      • Copernican@lemmy.world
        cake
        link
        fedilink
        English
        arrow-up
        2
        ·
        9 months ago

        I agree. Too many comments and threads are hijacked or over represented by the pro piracy crowd. I wish more communities would just ban the shit post of “yar, time to sail the high seas” that seem to be the top comment on any media related post.

      • ChaoticNeutralCzech@feddit.de
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        9 months ago
        1. Connect old PC to TV. Both can be 15 years old.
        2. (optional) For better performance, get a small SSD alongside the big HDD (a 64GB / partition will do), maybe have a homemade NAS ready too
        3. Install Lubuntu, Mint XFCE, Puppy Linux or any other distro of choice
        4. Set up KDE Connect, qBittorrent and VLC
        5. Enjoy
        • Limit@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          9 months ago

          OK I’ve tried in the past to make a decent streaming box from both windows media center edition and various Linux distros. But I need something that is simple, can be controlled entirely from a remote, and has the major streaming apps (Netflix, disney, etc). I haven’t really found any solution that’s easy enough for non techie people to use. I have a standalone roku box that works ok we also have a roku TV which is a giant piece of garbage, and I’m considering buying an external roku or nvidia shield as a streaming box instead, I do have a couple of raspberry pi 4s I could use one but again I’m faced with the same issues.

    • Maximilious@kbin.social
      link
      fedilink
      arrow-up
      0
      arrow-down
      1
      ·
      9 months ago

      You’re going to build your own smart TV that can handle new HDMI and Displayport advancements too?

  • redcalcium@lemmy.institute
    link
    fedilink
    English
    arrow-up
    22
    arrow-down
    2
    ·
    edit-2
    9 months ago

    These are just generic Android TV devices that use Allwinner board. Allwinner made these kind of generic boards for Android TV and Android Auto head unit and sell them to OEMs. The OEMs then “customize” it by adding their APKs into the ROM provided by Allwinner. I doubt the malware come from Allwinner. Maybe it’s just one (or more) OEM that include whatever APK they found on the internet without checking.

  • Kissaki@feddit.de
    link
    fedilink
    English
    arrow-up
    7
    ·
    9 months ago

    In total the researchers confirmed eight devices with backdoors installed—seven TV boxes, the T95, T95Z, T95MAX, X88, Q9, X12PLUS, and MXQ Pro 5G, and a tablet J5-W.

    The other thing discussed is fraudulent android apps that have been removed from the play store.

  • AutoTL;DR@lemmings.worldB
    link
    fedilink
    English
    arrow-up
    7
    ·
    9 months ago

    This is the best summary I could come up with:


    This week, cybersecurity firm Human Security is revealing new details about the scope of the infected devices and the hidden, interconnected web of fraud schemes linked to the streaming boxes.

    “They’re like a Swiss Army knife of doing bad things on the Internet,” says Gavin Reid, the CISO at Human Security who leads the company’s Satori Threat Intelligence and Research team.

    “This is a truly distributed way of doing fraud.” Reid says the company has shared details of facilities where the devices may have been manufactured with law enforcement agencies.

    In the second half of 2022, Human Security says in its report, its researchers spotted an Android app that appeared to be linked to inauthentic traffic and connected to the domain flyermobi.com.

    When Milisic posted his initial findings about the T95 Android box in January, the research also pointed to the flyermobi domain.

    The company’s report, which has data scientist Marion Habiby as its lead author, says Human Security spotted at least 74,000 Android devices showing signs of a Badbox infection around the world—including some in schools across the US.


    The original article contains 455 words, the summary contains 180 words. Saved 60%. I’m a bot and I’m open source!

  • wjrii@kbin.social
    link
    fedilink
    arrow-up
    3
    ·
    9 months ago

    My OctoPrint server runs on one of these (previous homeowners left it lying around), but I completely nuked Android and installed the Armbian distro for the Inovato Quadra (itself just a carefully sourced and rebranded TV box). It was tedious though, and I’d never buy one for that purpose when there are dedicated SBCs.

    • heeplr@feddit.de
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      9 months ago

      installing your own OS and/or bootloader is a pain and most of the time unfeasable. And that’s the only way to safely kill software based backdoors.

        • heeplr@feddit.de
          link
          fedilink
          English
          arrow-up
          1
          ·
          9 months ago

          on Android, the OS is the firmware. If you talk about peripheral firmware, I’d not call it “software based” anymore.

  • Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    8
    ·
    edit-2
    9 months ago

    Its called google and it infects all stock android devices

    Anyway I actually have one of those devices. It was support to be a birthday present but it came with some baggage. By the time I realized it I couldn’t return it