LG Electronics has announced it will suspend any apps built for its smart TVs that covertly turn the television into an always-on residential proxy node. The move comes less than a month after cybersecurity firm Spur.us published research revealing that more than 42% of games and other apps available for download on LG's webOS store contain SDKs that allow unknown third-parties to route their internet traffic through a user's TV.
The research, which also found similar issues in over a quarter of Samsung's Tizen OS apps, highlighted the widespread use of residential proxy SDKs. These SDKs allow app developers to monetize their creations by turning the user's device into a proxy node, which is then rented to paying customers. In the case of LG and Samsung smart TVs, Spur found proxy SDKs bundled with everything from simple games like Pac-Man to screensavers and file utilities.
A Platform Crackdown
Responding to questions from KrebsOnSecurity, an LG spokesperson stated the company is working with developers to remove the residential proxy option from their apps on the webOS platform. "A residential proxy network is not an intended use for LG smart TVs," the spokesperson said. "If this option is not removed, these apps will be suspended."
LG Taylor confirmed that the company's review of the apps is "well underway now" and that they are committed to keeping such networks out of their app store. The company will also strengthen its evaluation process for developer-submitted apps.
A Pattern of Questionable Practices
While LG's decision to crack down on proxy SDKs is welcome, the company recently came under fire for another questionable practice. It was revealed that certain LG LCD monitors automatically install a driver that promotes paid McAfee antivirus subscriptions through Windows Update without an approval prompt. This raises concerns about the company's commitment to user privacy and security beyond just app store oversight.