Researchers Succeed in Hijacking ‘Smart’ TVs

Although I've seen little interest so far in interactive TV, either off-air or via cable, the concept of giving viewers the ability to click on a link on their TV set and obtain additional information on a news item or product remains attractive. The concept is part of the ATSC 2.0 standard and has already been rolled out in Europe using the HbbTV (Hybrid Broadcast Broadband TV) standard.

Several news stories this week reported about a paper from Yossef Oren and Angelos Keromytis at the Network Security Lab at Columbia University which showed how someone could use a cheap antenna transmitting a modified TV signal to reach a smart TV that could do nasty things. These include directing it to a hacked website or to post messages as the viewer if the TV set were logged onto a site such as Facebook.

The hijack involves receiving an off-air broadcast, adding or modifying HbbTV data, and then re-transmitting the signal at sufficient power to replace the original signal at viewer’s antenna. The paper describes the hardware and software necessary to carry out an attack on a DVB-T signal.

Such a system would have to have sufficient isolation between the receive antenna picking up the unmodified signal and the antenna transmitting the nefarious HbbTV data, but the power required wouldn’t need to be that high. The paper says that one Watt could cover an area of about 1.4 square kilometers.

Even though the system analysis was based on DVB-T, the authors used New York City in their example. The researchers conducted a proof-of-concept lab experiment using an OEM DVB-T USB stick, a Linux computer with VLC, and a Dektec DTU-215 DVB modulator. The victim TV was a smart set manufactured in 2012 and running the manufacturer’s latest software. Although the researchers used DVB-T, it seems the same approach would work with ATSC under certain circumstances.

Doug Lung

Doug Lung is one of America's foremost authorities on broadcast RF technology. As vice president of Broadcast Technology for NBCUniversal Local, H. Douglas Lung leads NBC and Telemundo-owned stations’ RF and transmission affairs, including microwave, radars, satellite uplinks, and FCC technical filings. Beginning his career in 1976 at KSCI in Los Angeles, Lung has nearly 50 years of experience in broadcast television engineering. Beginning in 1985, he led the engineering department for what was to become the Telemundo network and station group, assisting in the design, construction and installation of the company’s broadcast and cable facilities. Other projects include work on the launch of Hawaii’s first UHF TV station, the rollout and testing of the ATSC mobile-handheld standard, and software development related to the incentive auction TV spectrum repack.
A longtime columnist for TV Technology, Doug is also a regular contributor to IEEE Broadcast Technology. He is the recipient of the 2023 NAB Television Engineering Award. He also received a Tech Leadership Award from TV Tech publisher Future plc in 2021 and is a member of the IEEE Broadcast Technology Society and the Society of Broadcast Engineers.