Smart TV Game Secretly Rerouted Home Internet Traffic for Years, Discovered via Claude AI
Israeli investor Shahar Tzafrir discovered that a free smart TV game used his home internet connection for a commercial proxy network for two years, flagged by Anthropic's Claude.
A seemingly harmless free game downloaded to a living room television and used only once continued to route home internet traffic for nearly two years. Israeli tech investor Shahar Tzafrir uncovered the hidden activity after using Anthropic's Claude artificial intelligence tool to analyze anomalous network behavior on his LG television.
According to Tzafrir, the operation is linked to Bright Data, an Israeli commercial proxy network operator that routes internet traffic through residential connections. Tzafrir shared his discovery on X, sparking widespread debate regarding the security and transparency of smart devices connected to home networks. Or Lenchner, CEO of Bright Data, addressed the discussion, emphasizing the company's consent mechanisms and compliance standards.
Claude Identifies Anomalous Network Traffic
The discovery occurred by chance while Tzafrir was developing a home automation project using Claude. While configuring a control system for air conditioners and televisions, he granted the AI tool access to his home router. Claude flagged unusual network activity, leading to an examination of installed television applications.
Claude noted that blocking the traffic directly was difficult due to various routing techniques, prompting the AI to assist in auditing the television apps. Removing a specific free game installed nearly two years prior immediately halted the unauthorized traffic. Tzafrir noted that the application continuously routed data even when the television was turned off or placed in standby mode.
Commercial Use of Residential Proxies
The service utilized by the television falls under the category of residential proxies. These networks allow corporate clients to route internet requests through private IP addresses rather than corporate servers. This practice is widely used for web scraping, market research, price monitoring, and gathering large datasets required for training artificial intelligence models.
To expand their network capacity, proxy providers frequently integrate software development kits (SDKs) into consumer applications. App developers may offer free access or financial compensation in exchange for user participation, while operators sell access to corporate clients.
Security Implications and Industry Response
Lenchner defended Bright Data's operations, stating that the company complies with strict security audits, anti-virus protocols, and annual independent reviews conducted by PwC. He maintained that the company does not monitor personal device activity, focusing strictly on retrieving public web pages.
However, security researchers highlight the broader risks associated with embedded proxy SDKs. A recent study by cyber intelligence firm Spur examined smart TV applications and found proxy components present in roughly 34 percent of tested apps on LG and Samsung platforms, underscoring ongoing visibility and consent challenges in the Internet of Things ecosystem.
