A researcher using the handle @log4j alleges that a 2025 Samsung TV’s Tizen firmware contains audio-sensing, viewing-analysis and advertising-related capabilities used for surveillance. The claims began on October 21, 2026, and expanded over several days through screenshots, configuration fragments and descriptions of firmware behavior.
The allegations remain unconfirmed. The available sources contain no independent replication or Samsung response addressing the specific claims. They also leave a crucial question unresolved: which capabilities were present in the firmware, which were enabled, and what information actually left the television?
Samsung separately advertises microphone-based barking detection through Pet Care. That documented feature provides useful context, but it cannot verify the researcher’s broader account.
How the Samsung TV Allegations Began
In the October 21 opening post, @log4j said unusually targeted advertising prompted an investigation of a relatively new Samsung TV. The researcher described encountering encrypted firmware, then claimed to have obtained root access through previously unknown vulnerabilities.
Root access means elevated control over a device’s operating system. It can expose files and services unavailable through ordinary settings. The post, however, did not provide a reproducible exploitation procedure or demonstrate that microphone data caused the advertisements.
2113014142600953868A follow-up post alleged always-on microphone functionality, automatic content recognition, location-related capabilities, network mapping, targeted advertising and user profiling. The researcher identified an accompanying screenshot as coming from a file named security-policy.xml.
On October 23, @log4j further alleged that audio was classified before information was reported to Samsung, pointing to telemetry paths containing barking and crying event counters, sensor preferences and camera-streaming duration.
By October 24, the researcher said a longer document contained about 44 writeups covering individual functions and would probably be released within days. That promised report is absent from the available evidence, so the public posts remain the basis for assessing the allegations here.
