From Decrypt · By Ryan S. Gladwin
In brief
X user log4 says he reverse engineered his Samsung TV’s firmware and found a file listing functions including an always-on microphone, automatic content recognition, and targeted ads.
Cybersecurity experts say AI is making reverse engineering accessible to anyone, meaning more hidden functionality in everyday devices is likely to surface.
They added that data collection may be one reason TV prices have stayed low for decades.
A researcher found that their Samsung smart TV was tracking them through several functionalities, including an "always on” microphone—and experts warn that similar tools could exist on other "everyday devices."
X user log4j claims to have reverse engineered his Samsung smart TV's firmware and discovered what they call a "privacy horror." One file called 'security-policy.xml’ featured functions including an always-on microphone, automatic content recognition, geo-positioning, network mapping, a targeted ads service, and user profile building, while Samsung TVs without a built-in microphone will look for one on connected devices such as a soundbar or Bluetooth speaker.
But a community note on the post points out that Samsung openly advertises some of these features. Its Pet Care and Family Care tools on Vision AI TVs listen for sounds like barking or crying and alert owners through the SmartThings app.
i own a relatively new (2025) samsung tv.
i kept getting weirdly targeted ads.
i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.
zero days it is. root shell on new samsung TVs!
discovered PRIVACY HORROR. write up? pic.twitter.com/EsxxCy1b6a
— log4j (@log4j) October 21, 2026
James Bore, a cybersecurity and technology consultant, told Decrypt that this isn't a new finding but just adding awareness to something that most people weren't aware of.
"The amount of monitoring that smart devices, from TVs to voice assistants to cars, do isn't secret as such, just not something promoted," Bore said. "If you read privacy policies and [End-User License Agreements], it's all in there in almost every case, but most people don't read those."
Jake Moore, Global Cybersecurity Advisor at cybersecurity firm ESET, told Decrypt that this could be the start of a wave of similar findings, as a trend of AI-powered reverse engineering has swept the internet.
"AI-assisted reverse engineering may make it easier and faster for researchers to uncover and explain how devices collect, process, and share data," Bore agreed, "but the underlying collection itself is generally not new or unknown."
Decrypt has reached out to Samsung for comment and will update this article should they respond.