Following the recent security disclosures regarding smart TV telemetry and LAN snooping, I decided to do a root-level network audit of my LG G1 running webOS.
After auditing 44,800 packets and a 267,000-query DNS log, I observed several interesting behaviors:
- webOS daemons query roughly 36 LG domain families, firing heavy telemetry bursts mid-boot.
- The TV’s internal DNS stub completely bypasses local `/etc/hosts` modifications on the device, meaning network-level sinkholing (Pi-hole / AdGuard Home) is mandatory.
- Fallbacks to public resolvers (8.8.8.8 / 1.1.1.1) occur when services fail, so blocking outbound Port 53/853 at the router level is required for true isolation.