Actual DNS queries captured from Samsung TV (Wireshark data)

Collection infrastructure:
logupload.samsungcloudsolution.com  # Analytics upload
sea-nax.samsungcloudsolution.com    # Content recognition
d.samsungcloudsolution.com          # Device identity tracking
api.samsungcloudsolution.com        # ACR data transmission

Smart TV app queries:
pservice.interpark.com              # Korean shopping service (Samsung owns Interpark)
api.smartthings.samsung.com         # IoT device coordination

Frequency - Every 15-30 minutes, continuously
Data size - 50-500KB per query (depends on what you're watching)
Pattern - Follows TV usage, more queries when TV is on

LG webOS tracking infrastructure

Primary trackers:
logv2.xLGlog.com                    # LG's central logging server
lggedge.lgthinq.com                 # LG ThinQ environment integration
lgtvsdp.lgthinq.com                 # LG TV Smart Device Protocol

Behavioral tracking:
tracking.webos.lgtvsdp.com          # WebOS behavior tracking
personalization.lgthinq.com         # Profile building

Frequency - Every 10-20 minutes when connected
Pattern - Sends data even when TV app is not in focus

Vizio's most aggressive tracking infrastructure

Core tracking endpoints:
data.vizio.com                      # Primary data collection
vzw-analytics.vizio.com             # Viewing analytics
vizio-ums.vizio.com                 # User management system
vizio-ads.vizio.com                 # Advertisement tracking

Demographic enrichment:
epix.vizio.com                      # Premium content partnerships
infonetics.vizio.com                # Data broker partnerships

Frequency - Continuous (even when idle)
Data size - 2-10MB per hour when watching
Special behavior - Collects data from HDMI devices (Google Chromecast, Roku sticks)

#!/bin/bash
Configure isolated VLAN for smart TV
Requires - UniFi controller or similar managed network

Step 1 - Create isolated network in router
OpenWrt example:
uci add network interface tv_vlan
uci set network.tv_vlan=interface
uci set network.tv_vlan.type=8021q
uci set network.tv_vlan.ifname=eth0
uci set network.tv_vlan.vid=100
uci set network.tv_vlan.proto=static
uci set network.tv_vlan.ipaddr=192.168.100.1
uci set network.tv_vlan.netmask=255.255.255.0
uci commit network

Step 2 - Configure firewall to block VLAN ↔ Main network communication
uci add firewall zone
uci set firewall.@zone[-1].name=tv_zone
uci set firewall.@zone[-1].input=REJECT
uci set firewall.@zone[-1].output=ACCEPT
uci set firewall.@zone[-1].forward=REJECT
uci set firewall.@zone[-1].network=tv_vlan
uci commit firewall

Step 3 - Connect TV to isolated VLAN
TV settings - WiFi > Connect to "Guest Network" or VLAN SSID

TV cannot see or access any device on your main network
TV can still reach internet, but cannot reach your computers, phones, etc.

#!/bin/bash
Block traffic between TV and rest of network using iptables

TV_IP="192.168.1.100"
MAIN_NETWORK="192.168.1.0/24"

Create firewall rules to isolate TV
iptables -A FORWARD -s $TV_IP -d $MAIN_NETWORK -j DROP
iptables -A FORWARD -s $MAIN_NETWORK -d $TV_IP -j DROP

Allow TV ↔ Internet
iptables -A FORWARD -s $TV_IP -d 0.0.0.0/0 -j ACCEPT
iptables -A FORWARD -d $TV_IP -s 0.0.0.0/0 -j ACCEPT

Save rules persistently
iptables-save > /etc/iptables/rules.v4
systemctl restart iptables

Recommended setup:
1. Buy basic "smart TV" without smart features (Samsung/LG 50" 4K: ~$300)
   OR use older TV you already own
2. Connect Apple TV 4K ($129-199)
   OR use high-end Roku without Roku channel
   OR use Nvidia Shield ($200)

- TV has zero network connectivity
- All streaming goes through Apple TV (which has privacy controls)
- TV manufacturers cannot collect any data

Downsides:
- No voice control integration (must use device remote)
- No TV-specific apps (YouTube, Netflix through Apple TV instead)
- Upfront cost higher, but privacy benefit significant

For any smart TV:

1. Disable WiFi in TV settings
   TV cannot transmit any data
   Downside: Cannot use streaming apps

2. Disable Voice Assistant
   Settings > Voice > Off (all platforms)
   Microphone is inactive (but data may still be collected)

3. Disable Location Services (if available)
   Settings > Privacy > Location > Off

4. Set network hostname to random string
   Settings > Network > Hostname > (device name)
   Harder for data brokers to link TV to you

5. Disconnect TV after use
   Power off TV using physical button, not remote
   Some TVs collect data in standby mode

#!/bin/bash
monthly_tv_audit.sh - Verify tracking is actually blocked

echo "=== Monthly Smart TV Privacy Audit ==="

Test 1 - Verify DNS blocking is active
echo ""
echo "Test 1: DNS Blocking"
echo "Query Samsung tracking domain..."
if ! nslookup samsungcloudsolution.com 2>&1 | grep -q "can't find"; then
    echo " WARNING: Samsung domain still resolves"
    echo "   Action: Check Pi-hole/dnsmasq blocklist is active"
else
    echo " Samsung domain blocked"
fi

Test 2 - Monitor firewall blocks
echo ""
echo "Test 2: Firewall Rules"
echo "Checking iptables rules..."
iptables -L FORWARD -n -v | grep -i "drop" | head -5
echo "If no results, firewall rules may not be configured"

Test 3 - Check Pi-hole admin panel
echo ""
echo "Test 3: Pi-hole Statistics"
echo "Visit http://raspberrypi.local/admin"
echo "Check 'DNS Queries' tab:"
echo "  - Should show 0 queries to Samsung/LG/Vizio domains"
echo "  - If > 0, tracker domains are not blocked"

Test 4 - Monitor bandwidth patterns
echo ""
echo "Test 4: Background Bandwidth"
echo "Turn off TV for 2 hours, monitor traffic..."
echo "Expected: <50MB background traffic"
echo "Actual: [Run 'nethogs' or 'iftop' and observe]"

Test 5 - Analyze network captures
echo ""
echo "Test 5: Recent Network Capture"
echo "If you have tcpdump logs, check for:"
echo "  - Any packets destined to Samsung/LG/Vizio IPs"
echo "  - Any DNS queries for tracking domains"
tcpdump -r traffic.pcap 'dst host 54.192.0.0/16' 2>/dev/null | wc -l
echo "Result: Should be 0 packets to Samsung servers"