When an entire class of technology states on the packaging that it was made in China but intended "for overseas use only," this should really give you pause before plugging it into your network.

You will find this verbiage on a lot of Android TV streaming boxes for sale at the major retailers. There's a very good reason the country that makes this crap doesn't want it on their own networks. My advice: If you have one of these Android streaming boxes on your network or get one as a gift, toss it in the trash. I'll have a lot more about this in the New Year, but these things are responsible for building out a botnet that currently has ~2M devices and is growing rapidly. https://blog.xlab.qianxin.com/kimwolf-botnet-en/

For the record, I am mainly interested in seeing the major US retailers moving to stop selling these devices, period. That seems to be happening, at least on the ones that are being called out. But the only reason that's happening now is because more people (present company included) are starting to make a lot more noise about it.

https://bsky.app/profile/did:plc:ije2xwkpyayz53imvbibvuqf/post/3marmcx23cc2f

@garykamm.bsky.social

Super box cracked down is starting. Amazon has pulled all Sales along with Walmart. file:///var/mobile/Library/SMS/Attachments/e0/00/4E61D35B-6286-4BA3-9324-17E847C4904D/IMG_0205.png

Bluesky Social
Since I started writing about these particular video devices, I've gotten a lot of messages from readers asking, okay, but what about *this* model, as if just having a different model number or brand makes a difference. The underlying hardware and software is functionally the same.

I'll add that pro-piracy advocates are militant in their observation that technology is not inherently this or that, that it's all just how the technology is used. The subtext is, okay, maybe these things are designed w/ zero security and are a major security liability, but hey you can still flash them with whatever you want and run your own stock firmware or hardware, etc. No reason to distrust these devices at a more fundamental level, even though every single point of evidence about their design, manufacture and sale points to the opposite conclusion being the correct one.

Also, the people saying the loudest that this is a nothingburger are the same people who think flashing firmware and running custom ROMs is a thing they want to do. Most people who buy these devices a) have no clue what a liability they are and b) wouldn't begin to know how to do that, or that they might need to. To me, it's a form of class snobbery.

@briankrebs I wonder how many advertising/display systems are using this. I know of at least one that was based on Android TV boxes.