Samsung says it's restricting app registrations and removing apps with SDKs that can turn smart TVs into residential proxy exit nodes, after a similar ban by LG (Zack Whittaker/TechCrunch)

Samsung plans to ban Smart TV apps containing residential proxy software after researchers discovered that certain apps could route internet traffic through users' home connections. The issue arises from specific software development kits (SDKs) that developers can incorporate into apps. Once activated, these SDKs can use a television's internet connection as part of a residential proxy network.

Security researchers obtained root access to a Samsung Smart TV and found an app bundled with Bright Data's SDK, an example of residential proxy provider software. The SDK remained dormant within the app until it contacted remote servers to retrieve configuration files at launch, allowing the app to potentially evade detection during the app review process.

Samsung's policy change follows LG's adoption of a similar ban after uncovering similar issues with Smart TV apps. While using residential IP addresses is not illegal, these proxy services have found ways to route internet traffic using residential IPs, often leveraging Smart TVs due to their trusted nature. The researchers argue that most users would grant consent without understanding the implications, especially if the viewer is a child.

One concerning finding was that an app featuring this proxy SDK had previously been featured in Samsung's Editor's Choice list, highlighting the challenges faced by app stores in guaranteeing app integrity. As more applications rely on third-party SDKs, conventional app reviews may struggle to account for components whose behavior changes after approval.

This research emphasizes the importance of caution when granting permissions and removing apps that are no longer trusted.