log4j, a reverse engineer and cybersecurity bounty hunter, began investigating after noticing 'weirdly targeted ads' on their 2025 Samsung TV. By obtaining a root shell on the device, they found code in the Tizen OS that extracts user information including audio, screenshots, and a cross-device advertising ID (AID). A region-specific convolutional neural network tracks a viewer's actions, such as which videos are watched and which ads are skipped, all intended to improve ad targeting.
The researcher also found behavior designed for TVs without built-in microphones: the system scans for connected devices with microphones, such as soundbars or Bluetooth peripherals, to use them for audio recording.
Hugging Face engineer ngxson tested the microphone on their own rooted Tizen TV using a Flipper Zero tool and observed that the television opened its microphone for exactly five seconds before closing it. No further recording was detected in hours of monitoring. However, ngxson noted that their TV had multiple settings disabled, so an unmodified unit might behave differently.
log4j said they used OpenAI's tools for local reverse engineering, but OpenAI later banned the researcher's account citing 'cyber abuse.' In comments, log4j defended the work, calling the ban the result of a primitive classifier.
Other smart TV brands, including LG, have previously faced similar accusations of spying on customers. Many owners have reported significant slowdowns in their TVs, which some suspect may be related to the data collection activity log4j identified.
The researcher plans to publish a comprehensive guide on how to replicate the findings.
