Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking

A cybersecurity researcher has claimed to uncover extensive tracking capabilities inside the Tizen operating system running on a 2025 Samsung Smart TV. The reported findings include automatic content recognition (ACR), targeted advertising, viewing activity analysis, geolocation-related functions and audio-processing components.

The researcher, known online as log4j, said the investigation began after noticing unusually targeted advertisements on the television. After examining the device’s firmware, the researcher reported gaining root access and discovering software components associated with collecting and analysing user activity.

However, the findings have not been independently reproduced on an unmodified television. Samsung has not publicly responded to the specific allegations described in the researcher’s posts.

What Did the Researcher Discover?

According to posts published on X beginning October 21, 2026, log4j examined Samsung’s Tizen firmware and identified multiple components associated with tracking and advertising.

The reported capabilities include:

• Automatic content recognition: Identifying television content and collecting viewing-related information.
• Viewing activity analysis: Tracking which videos are played, how long viewers watch and whether advertisements are skipped.
• Targeted advertising: Using viewing information and identifiers to support personalised advertising.
• Screenshot processing: Components reportedly associated with capturing or processing screen content.
• Network and location functions: Software associated with network mapping and geolocation.
• User profiling: Building profiles from viewing behaviour and other device information.

The researcher also described an advertising identifier, or AID, that could help associate activity across devices.

These findings raise questions about how smart TV operating systems process viewing information and how clearly users are informed about the data involved. Nevertheless, the presence of a software component does not by itself prove that the component is active, that information is transmitted externally or that every television model behaves identically.

Claims About Microphone Monitoring Raise Privacy Concerns

One of the most controversial parts of the investigation concerns audio-related software.

Log4j reported finding a component described as an always-on voice service, alongside telemetry associated with sounds such as dog barking and babies crying. The researcher also claimed that some televisions without built-in microphones could identify connected devices, including soundbars or Bluetooth equipment, that might provide microphone capabilities.

These claims have not established that Samsung televisions continuously record conversations or routinely transmit household audio for advertising purposes.

A separate test by Hugging Face engineer ngxson reportedly observed a microphone opening for approximately five seconds before stopping. However, the test was conducted on a rooted television with several settings disabled, limiting the conclusions that can be drawn about an ordinary device.

The distinction is important: discovering audio-processing code is not the same as proving continuous recording, external transmission or use of that information for advertising.

How Automatic Content Recognition Works

Automatic content recognition, commonly called ACR, is a technology used by some smart TVs to identify or analyse the content being watched.

Depending on the implementation and user settings, ACR can help services understand viewing habits, measure audiences and deliver personalised recommendations or advertisements.

Samsung’s own Smart TV ACR support documentation states that the feature can collect viewing history, device identifiers and IP addresses when the relevant Viewing Information Services option has been enabled.

The company also states that users can opt out of ACR through their television’s privacy settings.

However, recent independent research has raised questions about how reliably users can verify the effects of those choices. An October 2026 study examining several smart TV platforms reported continued network traffic consistent with ACR activity on some devices after users opted out. Because much of the traffic was encrypted, the researchers could not conclusively determine the contents of every transmission.

The findings underline the importance of transparent privacy controls and independently verifiable data-handling practices.

Advertising Identifiers Can Connect Viewing Activity

Advertising identifiers are used by digital services to associate activity with a device or advertising profile.

In the context of smart TVs, these identifiers can help advertising systems understand viewing behaviour and deliver relevant promotions. Depending on the service and its privacy practices, information may also be shared with advertising partners or other service providers.

Log4j claimed that the television examined contained mechanisms for connecting viewing activity with other device-related information.

The precise extent of this alleged cross-device tracking has not been independently established. Users should consult the privacy notices applicable to their television model, region and enabled services to understand what information may be collected and shared.

Earlier Legal Action Has Focused on Smart TV Tracking

The investigation comes amid broader scrutiny of automatic content recognition and smart TV privacy.

In December 2025, Texas Attorney General Ken Paxton sued several television manufacturers, including Samsung, over alleged collection of viewing information without informed consent.

In February 2026, the Texas Attorney General’s Office announced an agreement with Samsung concerning ACR viewing-data collection from Texas consumers. The agreement requires express consent under the terms described by the office.

These legal developments concern the collection and use of viewing data. They do not independently confirm the newer researcher’s claims about microphone-related software or the behaviour of the specific television examined.

OpenAI Account Suspension Adds Another Controversy

Log4j also reported that OpenAI deactivated their account on October 23, 2026, citing alleged cyber abuse.

The researcher disputed the decision, claiming the work involved local reverse engineering rather than using OpenAI tools to discover or exploit vulnerabilities. The researcher suggested that automated safety systems may have incorrectly classified the activity.

OpenAI has not publicly explained this specific case in the material reviewed for this article. Therefore, the reason for the account suspension remains unverified.

The episode highlights a broader challenge for AI-assisted security research: tools must distinguish legitimate defensive investigation from activity that could facilitate unauthorised access or misuse.

How to Reduce Smart TV Tracking

Consumers can take several practical steps to review their smart TV privacy settings.

1. Review ACR and viewing information settings.
Look for options related to Viewing Information Services, personalised advertising, viewing history and content recognition. Disable optional features you do not want to use.

2. Review privacy permissions during setup.
Read privacy notices carefully rather than accepting every optional service automatically. Menu names and available controls vary by model and software version.

3. Check microphone and voice-assistant settings.
Review voice-control permissions and connected audio devices. Disable microphone-related features you do not need.

4. Limit unnecessary data sharing.
Review advertising preferences, connected accounts and optional personalisation services. Check whether the television offers separate controls for analytics and advertising.

5. Keep the television updated.
Install official firmware and security updates to address known vulnerabilities.

6. Consider network-level privacy controls.
Advanced users can review their router’s connected-device list and network activity. However, encrypted traffic can make it difficult to determine exactly what information is being transmitted, and indiscriminate blocking may disrupt legitimate services.

7. Consult the manufacturer’s privacy notice.
Review the privacy documentation for your specific television and region, as data practices and settings can differ.

Conclusion

The reported Samsung Smart TV investigation highlights growing concerns about data collection, targeted advertising and transparency in connected household devices.

Although log4j claims to have identified extensive tracking-related capabilities in a 2025 television, the most serious allegations particularly those involving microphone activity and audio-based advertising remain unconfirmed by independent testing on an unmodified device.

Consumers should review privacy settings, understand the implications of optional tracking services and keep their devices updated. Manufacturers, meanwhile, should make data collection practices transparent and provide clear, meaningful controls over personal information.

As smart TVs become increasingly sophisticated computing platforms, privacy and security deserve the same attention as picture quality and entertainment features.

Sources:

• Samsung Smart TV ACR Support Documentation
• Ars Technica: Research on Smart TV Tracking After Opt-Out
• Tom’s Hardware: Report on the Researcher’s Claims

CyberExy   Secure Tomorrow.