I have heard good things about Apple TV as a better alternative to most smart TV native apps. Would some TV’s pair better with this than others for privacy? I don’t want the TV doing anything other than being the display for Apple TV.
I am curious what success others have had.
When I brought it home, I never connected it to Ethernet or WiFi. Instead, I connected it to my laptop over USB, then using adb I uninstalled almost every application from it. It took me quite some time to figure out what app is possible to remove and what should be kept to let TV functionality to work. I even had to factory-default it a couple of times because some random apps I removed were crucial for Android to work. :) I think it took me 5-6 hours to clean it. Now it has only basic TV functionality like any dump TV does, I can watch air and cable TV channels, watch movies and play music from USB storage. If there's a need to watch something online, I connect it over HDMI to my small mini-PC that runs FreeBSD. I think I'm satisfied with the result. :-)
PS: Yesterday I opened the case and disconnected WiFi antenna. Just in case.
Did the TCL not have this option?
Second, never use the "apps" built into the TV.
Next, don't plug Ethernet into the TV. Plug HDMI cables into the TV.
Use a box of your choice on the other end of the HDMI cables. This is now the box that you trust. (Roku? Shield? Blu-ray? MacBook? PC? Linux? Playstation? XBox? Whatever you want.)
The Smart TV itself is now fine. Choose the devices you plug into it to play content. The TV just shows it.
Other than that, I agree regarding TV, with one caveat: you might want to update the firmware right away, or at some point. The device might need to phone home for that. In order to achieve that, you can put up a temp WLAN AP with your smartphone.
With regards to my STB: I am considering cancelling all my subscription services and simply downloading everything to my NAS. This already runs Jellyfin. Then all I need is a Jellyfin client and HDMI. Perhaps a RPi 4 or RPi 5 would be suffice there.
https://en.wikipedia.org/wiki/HDMI#HEC
Any chance the TV can phone home via that? One would have to make sure the HDMI cable physically doesn't have the Ethernet pairs, or set the trusted box to filter the traffic.
Can you explain why you can't just not give the TV your Wi-Fi password?
Or are we worried about the case when the TV did have Wi-Fi (due to it being mandatory for some initial setup, say), but we don't trust that "Forget Network" and "Wi-Fi off" are actually honored?
Suppose the device surreptitiously reconnects to Wi-Fi in spite of being told to forget it. You may be able to block it in your router and failing that, change the access point password.
No?
This. Never trust software switches. See my other reply for what I suggest instead of "streaming boxes" that aren't any better than the TV firmware.
Why?
Sure, I would be disturbed that it's doing that sort of thing in spite of Wi-Fi being explicitly turned off.
What is the threat to me though?
https://www.theguardian.com/technology/blog/2011/apr/25/goog...
https://theweek.com/tech/wifi-signals-now-tracking-users-at-...
https://www.youtube.com/watch?v=hlbjUvkoyBA
https://wigle.net/
And here's the opt-out steps to get Google to stop scanning your Wifi: https://support.google.com/maps/answer/1725632#how_opt_out&z...
LG denies TV spying claims, says tracking and snooping concerns 'not true' (635 points, 2 months ago, 494 comments) https://news.ycombinator.com/item?id=49645480
If the devices still scan all the time...
Living on the countryside there is no such problem.
If they choose a Firestick or Roku what's the difference? XD
The easiest solution is to never give the TV network access at all (no WiFi, no Ethernet) and only drive it over HDMI, via an Apple TV for example. The onus then shifts to how much you trust Apple, and the TV becomes mostly a dumb display. That still isn’t a 100% guarantee, though, since the TV has radios and could potentially talk to other networks or devices without your knowledge. If you want certainty, the only real option is to remove the radios entirely, which can have side effects, like the remote no longer working if it relies on BLE.
Personally, I don’t like LG’s “smart” apps, so never using them isn’t much of a loss.
But if you’re more technically inclined and want to use a product you paid for the way you want, you can do what I did with my C1:
Root it, put it on a restricted VLAN with no WAN access and no outbound privileges to any device on the LAN, and enable SSH. These displays run webOS, which is Linux-based. Yes, you can literally SSH into your TV. :)
That let me deploy my own custom app that I drive over the network. My display also never actually turns “off”. I just paint black pixels when I’m not using it, so it’s very snappy when I want something on the screen. It works as a spare data and metrics display while I’m working, and as a media player (a simplified DIY Plex) when I’m not.
So I get the “smart” part of the TV without the privacy concerns.
What I’ve ended up doing was I got an LG and never hooked it up to Wifi/internet, and then use an Apple TV to watch things on.
It’s a bit annoying if I want to switch to a game console as Apple TV can’t control the TV’s input channel, but otherwise works very well.
Make sure the TV supports HDMI CEC.
Yeah they do. Go to your shopping center or airport and you'll see LG and Samsung displays everywhere. And that's the key word, 'displays' not 'TVs'.
Both sell large displays meant for 100% user ownership with no spyware or mandatory internet connection, you just have to buy those and not their TVs.
The catch? They come at steep prices compared to consumer TVs, unless you can land a deal on the used market. But that's the cost of turning a profit on screens with no spyware and ads.
(I don't care about integrated speakers though)
If you're a videophile you might care. Most people would not notice.
Hotel TVs, same panels as consumer models with different supporting hardware and stock calibrations. These are actually dimmer than the consumer models to increase panel longevity.
They tend to lack gaming features like high/variable refresh rate but they're more functional as normal TVs than digital signage displays.
They have similar OSes as the consumer models and can run the same apps but don't have ads unless the operator wants them to and can be centrally managed, support internal IPTV networks, etc.
And how will my 50 year old mom and 70 year old grandpa know how to do that? "Hey Claude scan the wifi for a LG TV, hack it, root it and give me the keys to install what I want, then lock out LG from access it?"
As always, the sane fix is in government legislation and enforcement of privacy regulations. But this isn't happening since knowledge of smart device spyware across politicians and the voting population is small and governments want to use that data dragnet that smart devices enable for their own means.
Well, why not?
For a long time they haven't been just dumb displays. They also run Tizen or WebOS for digital signage applications.
I don't think that the cost of TVs has gone down when they added spyware and ads.
You could say that that's the cost of turning less profits, rather, and I suspect that TV manufacturers keep the costs of normal displays high just to discourage their purchase by normal people.
Yes because you have to fetch a shitty TV remote with buttons inspired by a Boeing 747 cockpit, which must be aimed directly at the TV because it uses shitty infra-red.
Am I close? :)
[0]: https://en.wikipedia.org/wiki/Amazon_Sidewalk
"Anymore"? So far there's no evidence any TVs are using it, so you're safe for now.
Then you hooked it to an external device of a surveillance capitalism company that trains on your data to manipulate you. Why?
Or plug in a cheap mini PC running a TV friendly Linux distro and give your data to no one.
Apple could easily make tens of billions dollars extra if they spied more on their users.
The biggest indightment of Apple in my mind is the copy and pasting of links into iMessage. iMessages "helpfully" renders a preview so a dumb consumer doesn't have to see an ugly long text of a url. But in doing so, it also happens to hides the utm code that is used for tracking by marketers.
They've got their eye on that tens of billion dollars extra.
Linux is not a viable option for TV for the vast majority of users. There are no sit back, remote driven apps for the services they use.
But JellyFin and Plex exist for people who don’t want that.
Source: I work at Apple. The privacy story isn’t just marketing, it’s very real and part of every discussion.
Yes, it "just works". Why wouldn't it?
I watch any movie or TV show I want in 4k via Kodi, but then can alt tab to a Terminal or a real web browser.
Privacy, and dramatically more functionality than any TV would ship with anyway.
Using this setup to type this message right now on pc hooked to a projector in my garage from my couch.
It turns out we never needed Smart TVs in the first place. Just treat it as a screen for a desktop computer.
Iirc, Amazon uses a tool they call “sidewalk” for this purpose
The TV belongs to you and it will obey you with modest effort.
I have a BenQ (710tki iirc) that is like this and I believe it meets all your stated requirements (size, resolution, etc). I’ve been very happy with it.
The main issue switching to a projector is figuring out where you are going to position it (different projectors have different throw distances).
More money and more setup, but very worthwhile in the end IMO.
Not that I would forget that tiny detail when I mounted mine. Of course not.
More practically, when I am not using that, I just watch tv shows and such on my desktop computer running NixOS with a nice and modern (1440p 170Hz high quality but not highest possible end IPS) monitor over displayport.
Other options include a projector, buying a very large computer monitor marketed panel, or using something that is modern enough to be fine, but not so new that it has malware in it (like a friend who was moving gave me a very heavy but also very nice plasma tv, with zero malware on it).
Basically, anything except something marketed as a consumer grade TV. The last time that I had to displeasure of dealing with that it was when my parents bought one and asked me to set it up, and the built-in Roku software refusde to even display from an HDMI or DP input unless it was logged in and connected to WiFi! Alas, I was not able to convince them to return it, but I did decline to have anything to do with it.
Your TV is probably just one of the many devices that sends a scary amount of requests to a bunch of shady servers. With a firewall + DNS server that you control and a decent blocklist you should be able to block most requests and you won't be exposed if a new device connects to your network (for whatever reason).
Yes, those are good options, but in true HN spirit, my suggestion is a plain Linux distro. The firewall/router is just a few iptables lines, which AI can now provide in a few seconds.
Samsung the frame 65" for $2000 constantly pesters about $15 monthly subscription to change the art on the display to their selection of public domain historical artworks. Otherwise you're stuck with the default slideshow, which you're now forced to see since the whole sales pitch of the display is showing art when turned off.
atleast they had the decency to not show ads as default art instead... but i wouldn't put it past them
Step 2 is to connect a TV box, but if you replace Samsumg, LG, or Google by Apple or Amazon, you have made no progress at all towards privacy.
Having researched this topic extensively, there are two main options for real user control and privacy. First, you can run an ordinary Linux distro on a mini PC, with a "launcher" such as Plasma Bigscreen. It's fine with an airmouse, but you will be mostly running upscaled desktop apps that aren't remote or controller friendly.
The best solution is actually to keep the mini PC and compile Lineage OS (Android TV 17) for a generic x86 target. This is a true degoogled Android TV distro that can, with some more hacking, run any ARM TV app from F-Droid, Aurora or other source. It is by far the best solution in that it is a true 10-foot UX and is compatible with almost all TV apk apps out there. The downside is that this not exist off-the-shelf. I spent a couple of days putting this together with Claude and it takes several hours to compile. I also found several upstream bugs in the process and will be submitting patches to the AOSP and Lineage.
Unless you view privacy as all or nothing, I'd say replacing Google with Apple is progress. I think the majority of people are more upset at the idea of how their data is being sold for advertising than they are concerned about being able to act completely out of sight of any actor.
I eventually got an NVIDIA Shield Pro, for which I:
1) Blew away the default launcher and installed Projectivity
2) adb disabled nearly all of the background Nvidia/Google services, following a guide
3) Removed all of the preinstalled streaming apps and added back the ones I use, opting for more privacy-respecting alternatives like Smarttube over YouTube standard.
Finally, I then factory reset my TCL TV and put its Google TV into "Basic" mode, which makes it a dumb TV for all intents and purposes. The TV itself is not allowed to connect to the internet anymore for any reason--everything goes through the set-top box.
The skeezy thing is the TV still tries very hard to get you to enable regular mode. Like if you try to launch ANY app of ANY kind, it will throw some pop-up about needing to connect to the internet to do so, and then flashing some fine print about how this will revert the TV to normal Google TV/Android TV mode. I had a guest in my house using the TV while I was in another room and suddenly asking me for my WiFi password, and when I went to see what was up, saw that they were halfway through opening the floodgates again before I stopped them.
Jellyfin is the answer if you are looking to spend a premium on a privacy-focused media experience.
So only disconnecting the antenna or destroying it would work, unless you live remotely.
Ah, here:
> DiabloD3 43 minutes ago | unvote | parent | next [–]
Doesn't work, all the spyware modules connect to open Wifi of neighbors, and soon, LTE.
reply
> nvme0n1p1 37 minutes ago | root | parent | next [–]
This is repeated every time this topic comes up, but so far it's just a conspiracy theory. An urban legend. An old wives' tale. Are there any documented cases of this happening?
reply
I can find no verified reports of this behavior. People are looking for it.
> all the spyware modules connect to open Wifi of neighbors, and soon, LTE.
I can find no verified reports of this behavior. People are looking for it. Cellular connections have been theorized since the beginning but have not been discovered.
Given the number of qualified people seeking out these behaviors, if they appear we will know it - with certainty.
Imagine you wouldn’t have this but technically the front two speakers are on a much higher end naim amplifier (connected to my audio stuff) but it has avr pass through. Sometimes an extra button to switch it to turn the front two speakers back to avr mode.
Also, Android TV boxes sometimes have shenanigans installed by the manufacturer, but they are easy to customize to only run what you want, and they run fine without a Google account.
As far as I can tell, there's no way to use an Apple TV box without linking it to an Apple account and letting them spy on you.
But you still need to accept Google TOS, before being allowed to do anything
Given what happened with games very recently, perhaps the question should be rephrased to: "Which modern TVs support flashing unsigned firmware?"
What sort of screen? Well, whatever you can tolerate. I use a very old commercial display I got through an e-waste reseller. It’s not great, but it was cheap ans has worked fine for years. If you insist on a “TV” screen or any monitor/projector with connectivity, pick one you can root. As other users have pointed out, simply “don’t connect to the Internet” unfortunately isn’t enough to guarantee your data stays private.
I bought one of their TVs in 2019, it's fabulous if your criteria is "turns on, displays what is connected to its inputs, and has decent video quality", and nothing more. I would recommend them heartily, if you can get access to one.
The monitors lack the tuner and the cable/antenna connector; so, if you're only playing of a computer, they should work fine.
I have two Sceptre TVs and I recommend them, as well, if you can find them.
I was so/so on the purchase but after watching all the heck around 'smart" TVs I'm wondering what I'll do when these die. They were like 50% cost of the industrial display category, which seems my only option in the future.
Hoping these LLMs get us to jailbroken TVs soon.
So plug it in, and update it once.
Then you can do all the things these other comments suggest.
These are generally meant to display (static) advertisement media, you'll have a false experience watching movies or playing games on them.
Its unbelievably talkative over the network! In the 7 days just passed, its been 90% of the blocked requests by volume (there's no allowed domains from that IP).
I'm still not convinced it isn't sneaking out data somehow - piggybacking off a connection somewhere to the neighbors TV. Its HDMI runs through a stereo amplifier, so it can't piggy-back off the connected PC that runs it.
Maybe the PC (Mint) can run AirPlay somehow and I can disconnect it entirely from the internet?
I feel overly paranoid about this device relative to everything else in the house, I'm not sure how justified that is.
I think we've overshot the mark a bit about TVs' connection abilities. A built-in SIM was one early conjecture. And while it hasn't been seen in the wild, it is often assumed to exist.
More to your point, we've not seen connections (assumedly ad-hoc wifi) to a neighboring device and uploading data to manufacturer, partner, etc.
We have recently seen a case of data collection, that included wifi scans. What we have not seen is a device that connects to other APs on it's own.
I saw 1 redditor claim that this occurred but it was not substantiated. Lots of folks are looking for this behavior but it hasn't been found.
This tells me that our existing methods of self-protection are effective.
- Don't connect it to the network
If you can't tell whether your disconnected TV is spying on you but you know that you cannot trust it, it's better to treat it as compromised.
I know there are lots of advocacy groups and youtube channels that are testing TV models and would LOVE to be the first to break this story and publicly shame Samsung or whoever. But it simply hasn't happened.
Not sure if there’s even a used market for older TVs, though
Sony stopped releasing security patches a while back and there are no longer apps whatsoever and they all were crap - the youtube one was pure torture because of how slow it was and the web browser was just as miserable as ie6.
But besides that I can send it commands to it via its IP and control it, consume stuff via a DLNA daemon, do screen mirroring, and all the usual tv stuff. The image quality and sound are still great after 10+ years though I can't care less about oled 4k 120Hz and all that stuff. So it's no longer a "smart" tv but it's not also so "dumb" for a now dumb tv.
Really I think in store is the way to go. Some "low" and "mid" tvs look identical to me. Some "high end" are meh. Some other "low end" look great. I think it's a bit of a crapshoot. Not sure currently but Samsung QLED used to be rated well but I always thought LG OLED looked worlds better. I've always liked LG OLED although I've heard their firmware has gotten pretty predatorial...
My thing is, don't use an Apple TV. For the last 15 years or so I've just used a Mac Mini plugged into a big TV, and it's perfect. Get a wireless keyboard and trackpad and one of the many available trays that will hold them together. I'm literally typing this right now on this exact setup.
If you have the room and price is no object you definitely want at least 5.1 theatre, both movies and TV programs sound great in 5.1. The next step up is a second subwoofer, even for music subwoofers take a load off your other speakers and reduce distortion.
Also, do not plug any Internet-facing devices into it, have a captive SBC that connects to a LAN server hosting (legally owned) videos.
Thanks everyone for more practical comments, definitively bookmaking this post.
[1] https://github.com/Gathin23/cleanyourtv
https://allaboutcookies.org/smart-tv-tracking-privacy-opt-ou...
Never connect to internet is the best option.
Still, might be best to run an android tv box yourself, and plug hdmi.
Ok I'm cheating, it's a monitor. Only it's the size of a TV and there's a remote.
But no tuner and no ARC.
But I don't care.
Zero smarts, boots in a millisecond, auto-wakes on device power-up, input switching just works, no half-baked HDMI-CEC hell. No wifi. No network. Nothing to spy on me because it's a FUCKING MONITOR and THAT'S IT.
https://www.lg.com/us/monitors/lg-48gq900-b-gaming-monitor
Or a projector against a wall.
I researched a bit for business displays from Samsung and these also have enshittified with "smart" features, so it lost my trust as well.
I use my monitor with a fire TV stick and it renders very well. LG 4k panel.
I recently picked one up at Sam's Club. Since my use was only to display an external HDMI source, I never even configured Wifi. Unfortunately, they're now wise to this. If it detects its been offline for ten or so start-ups, the TV will 'helpfully' force you into the Wifi config workflow on the next start. It seems to keep an internal counter in flash memory which nothing but a factory reset will clear. In my tests, it seemed like it can be kept offline forever but at the cost of manually dismissing the Wifi config workflow with three clicks on the remote every ~10 power-ons.
The TV also will not turn on and just display an external HDMI source even though it has a "Remember Last Source" feature. That feature does work as expected with any internal streaming source but external sources must first be manually selected with the remote after each power on (also undocumented in the manual).
I figured this out because I bought this small TV to be a wall-mounted screen in the dedicated bathroom of our home theater room. It's only job is to turn on while someone is in the little bathroom and display a copy what's on the main 150" projector screen in the next room, then turn off when they leave. The on/off is handled by a motion sensor and standard Home Assistant automation but after power on it correctly shows the Last Selected external HDMI source for 1 second, then blanks the screen. The source is already selected and working but being blacked out until you manually re-select the same source with the remote (only if it's external). This is clearly an undocumented anti-pattern added specifically to prevent the TV being used unattended as a display screen, picture frame, digital sign etc. Why? Because Vizio (now owned by WalMart) doesn't get rev share if it's: 1) Not online, and 2) Only displaying external sources. That's why it demands manual "proof-of-life" before it'll grudgingly deliver the basic functionality it claims on the box.
This made me angry - and the TV was otherwise the perfect size and feature set for my use case. So I programmed an ESP32 with an IR emitter so that every time the TV powers on it sends the remote presses to manually clear the "Please Connect Internet" message and re-select the already-selected external HDMI. Very annoying to be forced to figure this out but now it works fine and no one even sees the annoying messages as they're already gone before by the time we enter and see the screen. So, fuck Vizio :-). Although, I'm pretty sure almost all current consumer TVs now sell all your data exactly the same. The only differences may be the depth of dark patterns they deploy to resist offline usage.
To be fair, aside from all the super evil dark patterns, it's a shockingly good quality small TV (24-inch) for $88. Although it's obviously not a high-end display (no native HDR or 24fps), the chipset does do a decent job tone mapping external HDR (and HDR10) sources to SDR and it does proper 3:2 pull-down to display 24 frame external sources at 60fps - which very few TVs in this size do well (or at all). This is why I kept it and spent the time 'fixing' it. Of course, this is only because the TV is subsidized by the $35-$60 avg yearly revenue TV manufacturers reportedly can collect from advertising, app install payments, rev shares and selling all your viewing data. For $88 at local retail, it's probably being sold at a small loss. What's sad is I would have paid double that for the same TV without the dark patterns (in fact, I did buy and return two 24" TVs before this one for $160 and $200 but they couldn't even display external HDR or 24fps sources at all - which was a requirement since this secondary display has to display sources configured for the main projector).
The smarts you connect to the TV can vary.
Apple Ts manage things in some good ways.
NVidia Shields are good in others for Android TV.
The Android TV platform is likely more customizable (check youtube the past few weeks) to get it how you want.
Last, but not least, some poeple may just hook up a web browser to the TV and then contain that.