Philips smart TVs 'open to serious hacks'

1 min read

Smart TVs from Philips have been found to suffer from a number of serious security flaws that could allow hackers to not only steal information from attached USB sticks, but also pilfer authentication cookies to give them access to viewers' online accounts.

The flaw was uncovered by Luigi Auriemma of the Revuln security research group. The hacks work against Philips Smart televisions that have a feature known as Miracast enabled. Miracast allows TVs to act as Wi-Fi access points that nearby computers and smartphones can connect to so their screen output can be displayed on the larger set. The hacking vulnerability is the result of a recent firmware update that allows anyone within range to connect to the TV, as long as they know the authentication password...Miracast. Once someone has connected to the network, they can use publicly available software to download any personal files that may be contained on USB drives plugged into the Philips Smart TV. Even more concerning is the fact that connected devices can steal the browser cookies that many websites rely on to authenticate users when they access their private accounts. The video below, posted by Auriemma, shows the ways in which the flawed Smart TV firmware can be exploited. It makes for interesting viewing.