this post was submitted on 15 Sep 2024
40 points (97.6% liked)

Security

630 readers
3 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 1 year ago
MODERATORS
LinearArray@programming.dev
40
1.3 million Android-based TV boxes backdoored; researchers still don’t know how (arstechnica.com)
submitted 3 days ago by kryllic@programming.dev to c/security@programming.dev
12 comments fedilink hide all child comments
 

Researchers still don’t know the cause of a recently discovered malware infection affecting almost 1.3 million streaming devices running an open source version of Android in almost 200 countries.

you are viewing a single comment's thread
view the rest of the comments
[–] CaptObvious@literature.cafe 7 points 3 days ago (2 children)

Well that’s encouraging. Thank all the gods I only own dumb TVs

[–] pandapoo@sh.itjust.works 10 points 3 days ago (3 children)

This is about the boxes you plug into the TV, like a Roku, or Fire TV, except it's the cheap Chinese white box rebranded Android TV boxes you buy on places likeAmazon, Ali, and eBay.

[–] BB_C@programming.dev 2 points 2 days ago

They don't even run Android TV. They run a modified (normal) Android. This is well known, but the article also mentions it.

[–] CaptObvious@literature.cafe 4 points 3 days ago

Ah, so it is. My bad

[–] burgersc12@mander.xyz 2 points 3 days ago (1 children)

So basically a non-issue unless you just plug the cheapest streaming box you can get your hand on into your devices.

[–] pandapoo@sh.itjust.works 4 points 3 days ago* (last edited 3 days ago) (1 children)

I didn't say they're the cheapest, just that the boxes I'm personally aware of with this problem are white box rebranded ATVs.

But I haven't looked through the entire list, so it's entirely possible that some other more well-known and "respectable" device brands are also compromised. If you have an Android TV box, you should probably search the list to find out.

[–] BakedCatboy@lemmy.ml 3 points 3 days ago (1 children)

Isn't the article about tv boxes that you use with your dumb TV so you can watch streaming stuff on it? I don't think any TVs are affected

[–] CaptObvious@literature.cafe 4 points 3 days ago

Seems like that’s true. My bad