Editor: Porcia Akua Holmes
A reverse engineer who goes by the handle log4j says a firmware audit of their 2025 Samsung TV uncovered extensive data collection inside the Tizen operating system. The findings, posted publicly, describe audio capture, screenshot logging and cross-device ad tracking running on consumer hardware.
Inside the Tizen Firmware Findings
The researcher began investigating after noticing unusually specific advertising on their set. Reverse engineering the firmware proved difficult because it was AES encrypted, so they moved to hardware-level access to obtain a root shell on the device.
What they reported finding inside Tizen went well beyond standard telemetry. The code reportedly handles packet logging, audio categorization, screenshots and a cross-device tracking identifier used for advertising.
The researcher also described a fallback mechanism for televisions without built-in microphones. In that scenario, the system reportedly seeks out connected devices that do have microphones, such as a soundbar or a paired Bluetooth device.
Why the Hardware Feels Slow
One of the more consequential claims concerns performance. The researcher theorizes that Samsung TVs feel sluggish because the hardware is busy processing user data, including audio, screenshots and computer vision models running locally.
That framing reframes a familiar consumer complaint. Owners have long blamed bloatware for slow smart TV interfaces, but the audit suggests the processing load may be tied to data extraction rather than unused apps.
Independent testing has been limited. Hugging Face engineer ngxson reported that their own Tizen TV opened the microphone for five seconds and then stopped, with no further activity observed over several hours. That device, however, was already rooted with multiple settings disabled, so an unmodified television could behave differently.
Why This Matters
The immediate impact falls on Samsung TV owners who assumed their set was a passive display. If the reported behavior is accurate, every viewing session generates a stream of behavioral and environmental data that feeds advertising systems.
The broader consequence is regulatory. Smart TV data collection sits in a gray zone that privacy law has been slow to address, and detailed technical findings like these give regulators concrete material to work with. Manufacturers may face pressure to disclose what sensors do by default and to offer genuine opt-outs rather than buried settings.
For the security research community, the episode also highlights a growing friction point. The researcher used OpenAI tools during the reverse-engineering work and said their account was later banned for cyber abuse. They disputed the ban, stating the tools were used only for local analysis and not to exploit vulnerabilities.
The Wider Smart TV Privacy Pattern
Samsung and Tizen are not isolated cases. LG has faced similar accusations of monitoring viewers, though the company strongly denied the claims and said tracking and snooping concerns were not true.
The recurring nature of these allegations points to an industry-wide business model rather than a single manufacturer's misstep. Advertising revenue has become a meaningful part of television economics, which creates structural incentives to collect more data.
The researcher is preparing a comprehensive write-up covering their methods so others can replicate the audit. Until that lands and independent verification follows, the findings remain a detailed allegation rather than a confirmed vulnerability disclosure.
