This week a developer published a writeup of rooting his 2025 Samsung smart TV and switching off its content tracking — a system that, by his account, captured the screen several times a second to identify what was playing, and did the same to whatever was plugged into the HDMI port. He had to find a private exploit and reset the device to a rooted session to do it. The striking part isn't that one TV could be tamed. It's that taming it required a zero-day — because the tracking wasn't a bug. It was the product working as designed.
how often on-screen content was captured, per the Texas Attorney General's filing
what one developer needed just to make his own TV stop watching
Samsung, LG, Sony, Hisense, TCL — sued by Texas over ACR; Samsung settled first
A developer, Jake Stevens, published a writeup of rooting his 2025 Samsung U8000F smart TV and turning off its content tracking — by his account a system that captures the screen several times a second to identify what's playing, including when the set is just an HDMI monitor for a console or laptop. He had to use a private exploit and a rooted session to do it, and is clear it's a single-device case study, not independently reproduced.
The verifiable backbone is stronger than any one hacker's claim. A peer-reviewed 2024 ACM IMC study measured this directly: Samsung sends on-screen fingerprints roughly once a minute to an Automatic Content Recognition server, and the capture keeps running when the TV is only an external display. In December 2025 the Texas Attorney General sued Samsung, LG, Sony, Hisense and TCL over ACR — the filing cites captures as often as every 500 milliseconds — and Samsung settled first, in February 2026, without admitting liability. (The IMC study also found the opt-out does stop the traffic; use it.)
Notice what it took to make the television mind its own business: a zero-day. Not a settings toggle a normal person would find — an exploit and a root session. That's the tell. The tracking isn't a defect bolted onto an otherwise-private device; it's the reason the device is connected in the first place. A smart TV earns its margin by knowing what you watch, so watching you is the feature, and stopping it is the thing you have to fight. This isn't really about Samsung, or any one brand in that lawsuit. It's about a design: anything that has to phone home to function will, and you'll be the last to know the details.
A developer rooted his 2025 Samsung TV to stop it screenshotting the screen to identify content — a behaviour a peer-reviewed study and a Texas AG lawsuit independently document across major TV makers. It took a zero-day.
The tracking isn't a bug — it's the business model. A connected device that must phone home to work is a surveillance surface by design, and opting out is a fight you have to find, not a default you're given.
Remove the destination. If the intelligence runs on the device in the room and sends nothing out, there's no fingerprint server to disable and nothing in transit to intercept — privacy by architecture, not by settings.
A device you own should not require an exploit to serve only you. The more a product depends on sending your life to someone else's computer to function, the more of your privacy is spent by default — and the harder it is to get back. The durable answer isn't a better opt-out. It's an architecture with nowhere to phone.
On-device.
AuraVision runs the intelligence on hardware in the room — voice-only, with no camera, sending nothing out. There's no content-recognition server to opt out of, because there's no server at all: pull the internet from the wall and it still works. We don't make televisions, and we didn't audit anyone's. The point is the architecture — the only way a device can't phone home with your life is to have nowhere to phone.
Know someone who should see this? Send it to them.