Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'd never give a Samsung device unfiltered internet access.


Samsung is truly the worst of all big tech companies. All their first party apps contain ads. They kill hard fuses if you want to change things, and meanwhile bundle the devices of a large segment of the costumer base with first party Israeli spyware with full system and background install access.

I bought a Samsung watch once, had to reverse it to enable functionality that was advertised a year before but never delivered. It died because the watch decided to suck in water during a reboot while swimming, they quoted me almost the full price to repair it, even though it was clearly a software bug that caused another advertised feature (namely it's ipx rating) to fail.

And while I also wouldn't give Xiaomi iot devices on the network full internet access, at least I can use those things normally.


Besides the fact that Xiaomi devices are completely untrustworthy, they are usually great pieces of hardware. I bought a Xiaomi vacuum years ago. Everything was in Chinese and I had to watch a youtube video to figure out how to set it up. Besides that, the whole unboxing and setup experience felt like an Apple product. That vacuum was light years ahead of the iRobot it replaced. Incredible product and cheaper than just about everything else available at the time. That's when I realized American tech was toast.

I agree with you 100% about Samsung. They make nice hardware, but the software experience is among the worst in the industry. I don't know how they can be considered a premium product. I would never use one of their phones again. Straight up adware. I'm surprised they don't inject ads into the photos you take. They have ads everywhere else - even in the phone dialing app. Their TV's are still good as long as you don't connect them to the internet. Once they start putting LTE radios in them to download ads without wifi, I will be done with those too.


Out of the cheap phones I bought over the years, Xiaomi was the only manufacturer that didn't load up their phones with crapware backdoors. Samsung and Oppo was shiped with one of those crapware backdoors that installed apps beyond your back.

Eventually I got fed up, and started using hand-me-down iPhones for second phones.


> cheap phones

Maybe this is where the difference comes from?

> Eventually I got fed up, and started using hand-me-down iPhones for second phones.

Wonder how it would be if you tried a hand-me-down Galaxy flagship for comparison - that would be a more fair comparison. Cheap Androids are not in the same category as iPhones.


>I would never use one of their phones again. Straight up adware.

I was reading this thinking "that sounds awful, I'm never getting a Samsung phone" before snapping back to reality and realising that I'm staring at one.

I've never seen the issues you're talking about. I don't see any ads on my phone. I'm not using the default launcher, but aside from that it's stock. I would've turned off Bixby and whatever other rubbish it has when I first got it.

Ads in the dialing app!? I agree wholeheartedly that Samsung is being enshittified, but on my phone I can't see ads anywhere, least of all when I'm dialing a number.


Right. Ads in the dialer? I saw that once, with one of the Chinese brands. Samsung? Never.

In fact, I've been exclusively on Samsung phones for over a decade now, never had any experience remotely similar to what GP describes. My greatest annoyances are 1) Bixby, and 2) apps being pretty basic and missing obvious functionality (but then it's not like any other vendor offers better apps...).

I'm going to guess GP is in the US; I'm in the EU, and maybe phones for EU market come with less of this kind of bullshit.


We literally got an email at work telling us not to watch anything work related on any Samsung TVs because by default they will take screenshots of your content and send them back to Samsung for analysis unless you opt out. Absolutely bonkers.


How do you limit it’s Internet access besides not plugging it in?


At the risk of a smart-ass reply, I think you could say the same for almost any consumer electronics

Even if you don't suspect malfeasance / advertising / surveillance, a lot of these devices and their software are sloppily developed and highly insecure


"unfiltered internet access"? How would you even know what to filter?

Block it entirely, and hope it that doesn't connect to your Samsung phone via Bluetooth or WiFi and use it as a proxy.


Some devices refuse to to operate if they can't make DNS queries.


Such devices should be retuned for a full refund. Vote with your wallet.


My devices that do this were bought off aliexpress for about a quarter the price of a reputable brand. They do function and I purchased them expecting I would have to do some finagleing to get them to work and not phone home.


Then they can exfiltrate data over DNS.


I mean, only if the DNS server is one run by the company in question.

I own nonzero such devices that hit 8.8.8.8 as an internet access sanity check so I have to keep just that IP allowed for them and block all other traffic.


DNS is a hierarchical protocol. You can exfiltrate data as long as the DNS server is resolving recursively.


Good to know. I didn't know that.

For my devices in question I can see the size and frequency of the requests in OpenWRT and doubt it's actually doing so.


Then give it a DNS server to look up.


Yes exactly.


I mean, at some point, victim-blaming does sound like the correct response here.

If the answer to your question involved giving money to Samsung, then you asked the wrong question, and you need to do better next time.


All I meant was that sometimes if you fully block a device it refuses to work, and you may need to selectively unblock just 8.8.8.8 for that device.

Obviously buying such a device is bad, but sometimes you get one for free or close to it and it's worth the hassle to not pay hundreds for a better one.


Services like ControlD and NextDNS have built in blocklists for IoT telemetry and bullshit. I'm sure it's easy to do it with PiHole as well.

I use ControlD and it's blocking 38% of all DNS requests in my household. 8% of that is IoT telemetry. It's unbelievable how much of this bullshit is built into the products we use.


What I've done for the small handful of wifi connected devices I have is to have them connect to "internet sharing" from my laptop's wifi.

Naturally when my laptop is using its wifi to create a hotspot it isn't actually connected to the internet, so they never actually get access to the internet.

(Doesn't work if you actually want the internet, and not just wifi, related features of course)


IIRC there were some Pihole blocking lists for Samsung, Apple and Microsoft etc.


Give them access to a segregated home network.


How long until they ship with embedded 5G modem? Would you wrap your Samsung devices with alu foil?


I think they may go the easier way first: with online only OOBE where you cannot access all tv features until you acknowledge and accept the "legal" stuff first.

You know, bit like Microsoft forces you to create online account after installation is done


There's always going to be enough of a "dumb TV" market among the elderly / linear-only / no internet crowd to make that an extremely bad idea.

Sure, some (high-end) TVs might do this, but definitely not all of them.


Dumb tvs exist today; they just sell for a premium to make up for the lost adtech sales revenue.

I suspect this will continue. Ads and no privacy for poor people. The wealthy & well educated will have tvs that don’t spy on them.


Or connects to the Samsung TV of your neighbor, who definitely granted all access to the internet.


This idea has been around since at least a decade ago. The truth is, only a fraction of customers care about ads or privacy, and only a fraction of technical people in that group are capable of doing network filtering (VLAN, MITM, DNS blocklist, whatever). The absolute numbers are so small, as long as manufacturers can extract enough value from the remaining 99% of customers, they just don't care.

I have had a lot of friends amazed by the fact that when they connect to my home Wi-Fi they stop seeing ads. Zero of them interested in implementing something similar in their home.


How do you do it particularly? Pi-Hole or something else like NextDNS with adblock? (or Mullvad adblock DNS)


the other thing is that it would not be as effective as presumed because 5G cell service in residential areas in the US is spottier than people realize. A lot of us are relying on WiFi calling.


Soldering your TV in 2026 sounds like real fun ...


I've been reading about that risk since smart TVs came out. It's not worth the cost for the manufacturer.


A couple years ago I thought my fridge was appropriately blocked from the intarwebs. But a router update flipped the bit on activating the default guest network (which I normally keep turned off.) So for about 6 months my fridge was getting out to the net via the guest network. I found out about it when I got a call from my ISP asking what the heck was going on. Apparently a bot net had found my fridge and was doing all manner of bad things.

Moral of the story is... always double check your router settings to make sure enshittified iot devices aren't making you look like a newb.


Sounds weird, why would you give your fridge your wifi password in the first place?

Well the real question is why would you buy a connected fridge in the first place. Not that I visit fridges alleys in stores on a regular basis but I have never actually seen one.


> Well the real question is why would you buy a connected fridge in the first place.

It’s getting so you don’t have a real choice. You can buy a fridge (or any appliance pretty much) that is basic and doesn’t do the connected thing. But often you want the upscaled models because of real hardware features that are desirable. And these are always bundled with the “connectivity” options. It used to be you just ignored these bits. But they’re getting more and more invasive.


what hardware features in a fridge can you not live without apart from "keeps inside cold & light comes on when I open the door" ?


I don't know about "live without", but automatic defroster, crisper drawer, ice maker, water dispenser, alarm when the door isn't closed. being divided such that my food choices fit easily into the fridge (some people want to put a large wide pizza box directly into their fridge), power consumption.I dunno if you'd call looks a hardware feature, but it has to match the rest of the kitchen decor. The TV in the door isn't something I want at all though.


I may an idiot and haven't been in the market for new appliances for a while, but between an ice maker and a door alarm, how could you possibly require Internet acccess? Does it offer an app on your phone to operate the ice maker when you're not home?


travisgriggs said refrigerator manufacturers limited desired hardware features to models which had undesired network features. This was the last comment which mentioned network features.

delaminator asked what hardware features could not be lived without.

fragmede listed desired hardware features.


Louis Rossmann has one. He loves it!

https://www.youtube.com/watch?v=YQTIuX84ids

It has a large Android tablet in the front door, so it can show you ads – coming soon.


probably the ice maker or something. I bought new appliances a few months ago, and I made sure none of them had WiFi. I even paid £50 more for the washing machine that didn't have an app.



Their TVs will connect to open networks without asking you. Perhaps the fridges do the same.


Are there evidence it is really happening? Which open wifi network are left in residencial neighborhood? My neighbors aren't tech savy yet they use the wifi configured provided with the router which has a passphrase. I believe even in McDonalds you get the wifi password only upon purchase in the receipt. Most open networks I still encounter are in big stores such as IKEA or airports and you still have to register to connect. I doubt the signal woukd reach even the closest houses anyway.


> Are there evidence it is really happening?

https://news.ycombinator.com/item?id=45867034

> Which open wifi network are left in residencial neighborhood?

Some neighborhoods are mixed use. Some residences are in dense buildings. Some people configured guest networks with no password. Some ISPs made their home gateways captive portal access points.


Having a guest network doesn't mean it is open. It can just means you have a passphrase that is different than other home devices and that you may be isolating them in a separate VLAN.

I would never run an open network on my home connection, there are way too many legal risks unless you can log who is connect to it and when.


No one said guest network meant no password.


omg - why let your router update? :)

most updates are downgrades in my experience unless it addresses something very specific


Not updating the router just sounds like another security incident waiting to happen. The botnet will just be on your router instead of your fridge


Updates themselves are a security risk, because they're a first-party malware vector. Pick your poison.


I just avoid all Samsung CE.


Muy samsung odyssey g9 monitor connected for the first time through my phone, also Samsung.


I'd never buy another samsung device


I'd never give a Samsung device ~~unfiltered~~ internet access.

FTFY




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: