Dear viewer, these subtitles were generated by a machine via the service Trint and therefore are (very) buggy. If you are capable, please help us to create good quality subtitles: https://c3subtitles.de/talk/46 Thanks!
So this talk will be held
by Martin Have.
I cannot pronounce the it's
perfect. Yes, OK.
He is currently working at around
professionals and you probably
met him because he was working
on the Bluetooth technology.
And in fact, today he will talk about.
No, in fact, no.
It's because
there is and there isn't any relation
with that.
Talk to us about the
new technology that is going to be on the
new smart TVs and how to act on those.
Thank you, Martin. Sorry.
Thank you for the introduction.
So thanks for the introduction.
Today, I'm going to talk about HPV,
who if you have heard about HPV TV
so far, while it's a lot of people,
that's probably because of the media
attention it got recently.
Who's here to see some porn?
No.
Oh, I'm sorry, no foreign here today.
So first, I'm going to talk about
HPV as a as a standard,
then I'm going to do to
show you about the current adoption.
I did some statistics off the channels
on Astra.
I show possible attack vectors and
mitigation and a project
of mine which is called hell
HPV TV access limitations
and conditions will be some
recommendations for you to play with
and no porn.
So who am I?
My name is Martin Halford.
I'm currently working with the security
consulting firm called
Enrons Professionals.
I'm the co-founder of Triptonide Arc.
No,
I I'm a Bluetooth security
expert. I'm based in Salzburg, Austria.
And you find me on all kinds of
networks.
So what happened so far with TV
security are, let's say, smart TV
security first in September
2012.
It's like the first occurrence
where people were hacking
Samsung smart TVs.
Locally, they were able to
have use sticks that allowed them
to to work on the root
shell in
March 2013 and can sequester.
It's been a very interesting talk
where they showed that even
Trojans are possible on smart TVs,
and in May
2013, the TV Darmstadt published
a paper on the privacy issues with HPV
TV.
Shortly after that, I published
an article about security issues with
with HPV TV.
And after that,
in August, people
were attacking smart TVs at blackhead
with poorly designed apps like
Skype.
In November 2013, news surfaced
that LG is transmitting info
about the user back to the company,
which actually is not related
to HPV TV, even though it got
mentioned that like this infests?
So where does HB TV
come from? It's a pan-European effort.
It's been two projects a French
one and a German one that's
combined their efforts into HPV TV,
and it's
published in June 2010,
and it adopts existing specifications
like the team LC profile
and YPF, the open IPTV
Forum Standard.
The goal is to combine broadcast content
with online content.
How this works is shown afterwards.
The intended use cases for HPV TV
are some are things like
enhanced teletext catch of services,
video on demand, interactive
advertisement, personalization,
voting, gaming and so on, and
the social experience of watching TV
should also be included.
So how does this all work?
First, we have to the right,
the TV station, which is producing
the content or buying the content and
airing it over
like in this example
via the BBC over a
satellite infrastructure.
There's also other ways of distributing
that you know that Steve BBC or
BBC with terrestrial or cable.
And finally, the video and audio
content is displayed on the TV.
How does that all change with hybrid
broadcast broadband TV?
Here's a scene that the station
not only publishes this audio and video
stream, but also augments some
information into that stream,
which is then distributed via the
same ways like DVDs,
T or C, and it's displayed on
the TV again, with the addition that
the TV, when it's HBO
TV capable, is able to read
this information which get augmented into
that stream and
establishes an HDTV connection back
to the station.
So the main
thing about this concept is it's a red
button.
I found this red button on there,
which is known as a panic button, right?
And obviously BBC
kind of came up with this idea of the red
button.
And during the talk,
you will find out why it's still a good
idea to be in panic when you see this
kind of button.
That is the slide that seven
on media shows
their customers, their advertisement
customers.
What you're seeing there is a chart of of
unique devices that are
consuming the program from
this firm.
It's like proceedings that aids
compliance and some more.
Hmm. And it's
pretty accurate.
But as you can see
something saying, this is from Nielsen
or any other company doing
these kind of inquiries.
You have to think about where did they
get that information from?
How do they know that?
And in order to understand that,
just imagine you come back home, switch
on your television, and that is what you
see.
Actually, I have to explain this.
The stock was held last time in India.
That's why this is still Bollywood.
But what you're really seeing
when you look at that is
a Cookie Monster Cookie Monster
because.
Your TV is a browser, and this
specific use case, the red buttons
displayed like an HD Mail page
overlapping the the the actual
image, and it's
mostly transparent.
It only shows you a section like
displayed in their press the red
button in order to see more.
And
the page is actually loaded by the
television in the moment the person
switches to that specific station.
And that was like the big privacy
issue with that because the television
station is able to see when
you are watching without
you being able to opt out.
In order to collect some data,
I used to transfer in proxy approach.
I extracted the channel from
the television and
I was simply having some scripts
that switched the channels
over the network.
You find some scripts doing that, and
I adopted that for like sending
keys from that channel list.
And then I script for copying
or saving the proxy log per
station.
And what I got is it's a data basis
with a lot of URLs that are already
published on the Unite page.
I will show you some
links afterwards.
And this is the basis for
first investigation.
What you see here is the total number
of channels that are not
radio stations.
There's TV HD channels
and about 100 19
of them already have an HPV
TV signal in there.
So but that boils down
to only about 40 different hosts
and maybe about 15 entertainment
providers from Austria, Germany,
Switzerland and Poland.
Entertainment providers a word that I
have to explain. Maybe it's
different from a station that offers
content which is stream like TV.
An entertainment provider is
an institution that delivers online
content via HPV TV,
and in the end, you will see it's like
every network like
proceedings that AIDS is an entertainment
provider, and there's some that
to all the local TV stations.
You will see that in the your eldest.
If you're interested in that.
And what you see as well
is that some of the
entertainment providers are channels
are using ad servers.
Openness seems to be very popular for
that. It's I found that
in two different stations and
Onyx
used that.
I don't know if you watch and it's
I don't like it, but I
caught them in the act of displaying
the banner as a kind of frame
to the image which got resized
in order to fit in that frame.
Since they don't have restrictive
directory settings, I was able to
see that they already started with that
in October 2000 11,
which is pretty early in this area
because almost no device by that
time was capable of displaying
HPV TV content.
Also, RTL too uses that for
showing banners in their Portal page,
so a little more friendly than
the OnLeaks approach.
And of course, they use GIPHY in order to
find out where you live and what
the right banner for you
should display.
There's also a lot of use of third party
tracking tools like Google Analytics,
it's almost implemented in 22
different channels.
Among these are like very
large companies
like almost every channel
that the proceedings at aince media games
is publishing.
There's other tracking services used
with four channels.
It's each liquor and
gaming use for Poland, and
seven channels are using cookies
where, whereas it's not clear yet
if the ID within that,
these cookies are changing.
I tried to find out, but didn't
have so much time for that yet.
So the legal aspects of that, since
I'm not a lawyer, I won't focus on
that very much.
They said in Germany, at least, they're
still meeting the sets, and
paragraph 15 talks
about the collection of usage data
and the tone tracking could
be considered illegal.
As I was mentioning earlier,
there's very few parts of the
applications that allow you to opt out
from data collection.
The idea is that the to
offer that.
So what we learn from this is that not
only Big Brother is watching you.
You should be well aware that there's a
lot of private companies collecting data
about your TV watching.
Right.
So if you look at that from a security
perspective, there's
a few points where
we see easy ways to
manipulate or more or less easy
ways to manipulate the information
being transmitted from the TV station
to the TV.
First, there is
a possibility of attacking the play out
system, like
the the media house, doing the
production and airing that to the
distribution channel.
How likely is this?
Depending very much on the
depending media station
or media house,
but from what you see later
in the stock, some of these media
houses do not have a good understanding
of of security, and maybe
this is feasible in some cases.
The impact level would be very high to
to inject
different information at the very source
of this information so
that attacking satellites
are DVB, T or C could
also be an opportunity to inject
information.
I'm not really aware about the
probability
that someone could get into a satellite
system and replacing the DVP
content on there, but
maybe it's different for DVT or did you
see
the impact level of this varies depending
on the range that this technology
serving?
But how about this satellite of hacking,
you should ask Travis Goodspeed
if he has some ideas with that
water, no watering hole attacks
like the web server at this
at this TV station site.
If you get there and
are able to inject
information there, the impact is
also very high since this is the only
source of information that is requested
from the TVs.
No matter of the off
the distribution channel.
So there's a very old configuration
on one of the service within that lists.
I checked back yesterday.
They still didn't fix it.
Maybe I should start telling people
about that.
I don't know if you're aware of the
versions of very old.
It's up for one
two.
I don't know how likely it is
to get in there, but you could give it
a try. Maybe
attacks on DNS are also happening.
I put my gym skills
where like at the limit here.
This is, of course, an authentic NSA
slight DNS spoofing.
Our cash fighting is a very common
attack.
The traffic is diverted to
deliberately to a wrong
server by resolving
the name incorrectly.
And in the end, it's about injecting
own content, right, as
this is not used in a lot of cases, so
men in the middle, it's very possible or
by any other means of the of the
ones I introduced.
Yet now it's possible to inject
own content, and this sometimes could be
very hard.
So let's put ourselves into the situation
of a really evil person,
as we all know, Dr. Evil wants
to destroy the world.
And how does he destroy the
world's best?
Anyone.
He uses HPV TV.
Sure.
So how would he do that in detail?
Hackers could, for example, inject their
favorite movie clips, right?
These facial expressions remind me of the
responsibilities of two girls, one cup
of every. If anyone knows that,
I'm just suggesting stuff you could
display there.
There's a new a brand new tracking
project, which is called the spoof
ticker, and the spoof ticker is
crafted to overlay the new
stickers off German TV stations
with snippets of
their posterior on.
Stefan Zuckerman gave permission for
this, and I have to say
it while testing that sometimes it's
really hard to tell the difference
between original.
You see the spoof Tiger in action.
Yeah. I don't have to read that to you.
I'm actually looking for English
language, can news like that?
And I think The Onion does have something
like that. But if you have ideas,
I will show you how to give these
ideas to me.
Sure. Since the browser
of the TV has a full blown JavaScript
engine built in, sometimes
they just use web kit or other
Open-Source implementations
of browsers, and of
course, your television could become
part of a botnet.
Very much, depending on the hurt of
that botnets,
your television could be used to
to do network scans, maybe
in your home network, time based,
you know how that works. There's a very
good page on this is called A&E lapsed at
ARC.
They show how to do that.
Time based scans with HD Mail
means or JavaScript means
bitcoin mining could be a possibility,
even though televisions are not really
performance. They have JavaScript
built in. But to the other hand, there is
not really an implementation for bitcoin
mining that purely based
on JavaScript.
But what's very possible is like
MD5 hash cracking or password
hash cracking or
DDoS attacks or any other
attack that you could think of in
conjunction with JavaScript, right?
And you could generate new TV
performance.
Just say like whenever there's
a certain TV show on
within that moment, all
the televisions are part of Adidas attack
and requests a certain
server.
How about this music
music, Duncan started attacks, resistance
is futile.
Just imagine every time this airs,
every TV watching it, and it's a lot
of them connects to the public
stations, right?
In order to to
demonstrate against this kind of
programing.
So what are the countermeasures?
What could you do in order to protect
yourself from from being spied
on, from being part of an evil
attack to somebody else?
You could, of course, build a fortress,
a couch fortress, and it's supposed to be
very funny, as you could see
probably the little guy smiling.
But is that an effective countermeasure?
I don't think so.
You could disconnect your smart TV, like
many others did already.
There's a very recent research
showing that almost half of the
owners of a smart TV do
not even connected to the internet.
Probably they knew already
you could use a proxy, a firewall, and
there's a lot of projects
based on the Raspberry Pi.
But in the end, it's just one more device
in your living room, and you have a high
effort of maintaining blacklists
of which channel should get through
and otherwise
easier for that, you could use a
DNS approach to block or
allow certain hosts.
But the same problems appear here.
You have to maintain these lists again.
And here's the solution.
It's called how the
HPV TV access limiter, and
it's there to serve and protect smart
TVs and your privacy.
How HAL works It's a virtual
server based in Germany,
and it implements a DNS server which
spoofs every address,
but not the ones on a whitelist.
And it's spoofing all the named
resolutions with the IP address of
the server itself, which then serves
some fake content which
prevents the television of
getting a timeout or contacting
the original server, which might do some
statistics on your behavior.
It's in the very early stages, though,
hell just started,
and it's.
It's planned that there's at least
four stages that are
repeated iteration rationally.
The first stage is collecting data.
It's currently happening, and
it's collecting data about the HPV
TV application,
data on the different entertainment
provider sites and about smart
TV data.
Stage two would be data analysis
definition of criteria for HPV
TV apps just to find out which
ones should get on the white list and
to the other hand, which ones should be
blocked.
And there's also like semi-automatic
HPV TV app auditing.
I will explain that later how that works.
And finally, there should be a white list
which is productive.
You know, there should be that the server
there, you shouldn't really think about
much and just use it.
Which units does hell comprise
off, there's this data collection
unit, and what you see here is the fake
red button.
And when you see that your
television already sends this
information, which is displayed here,
it's a station name.
It's a very unique DVD
triplets because the station name
is not even very
unique. There's three sad three sad
HD like in this example,
sometimes they don't differentiate in the
name, but for sure in the DVD
triplets.
Then I send the
TV manufacturer and the red
button the URL, which is accessed
or should have been accessed.
And this is a smart TV
auditing unit.
And what you see is like every
little square there is stands for
a test which
checks on
five objects like web sockets,
web searches, APT cache, section storage,
local storage, web estriol.
All the things that got introduced with
H.M. five and might be interesting from
a security perspective.
And to the other hand, there's a lot of
objects that are specified
in the OPF standard,
but are rarely implemented in current
versions of the TV browsers.
For example, application manager, which
is always implemented VIDEO broadcast for
sure. But things like
internet messaging service, for example,
could generate a lot of surface, which is
interesting.
And, of course, it tries to find
places where personal
data could reside
in the browser and tries to find out
about things like that.
And there's an HPV TV app auditing
unit, and it's currently based
on HD track,
the HD track website Copier.
I'm pretty sure some of you
know that which downloads
the whole page and does also some
JavaScript in order to get
more content.
It's very basic, and it allows
static code analysis, so you could tell
whether IP addresses are
accessed. You could tell whether
certain objects are called from
the HP TV application,
but there's a lot of room for
improvement.
The goal is to have a DNS server for
smart TVs that only
lets clean servers and points through
to the television and
to collect security, relevant information
about smart TVs without
having to buy all of them.
Sure, it's an expensive thing.
And to the other hand, there should be
a list that lists all kinds of HPV
TV services worldwide,
which one person in one
country could not achieve
by him or herself.
I'm sure you want to know how to use
that, and you just type the
following IP address as the
DNS server off your smart TV and
everything else should happen.
Also spoofed ticker will show up.
If you do that and switch to the right
channel, that's how you can try that
out yourself.
There's an upcoming cooperation
with the Community
Television Service in Salzburg.
I don't know if you know about community
TV show things stations like that.
They have a funding
member base and it's supposed
to be a very
new approach to user generated content
on TV.
And they're really interested in
having things like the spoof ticker in
their show, in their program.
And that's why I think there might be
some upcoming cooperation soon
next year.
There is a device called Open
Caster.
It allows you to
play around with this.
This you see Object
Caruso, which is carrying
the information I was talking about
before.
And there you could try out how
your television reacts to certain inputs
in this feels.
There is a mighty experts
HPV TV test suite.
These guys did the I.D.
and set the F HPV TV portal,
and they have this open source test
suite, which is really interesting if you
are trying to look into that in more
detail and trying to do your own
applications, but especially
for doing own applications, I found
something that I didn't know before.
It's been.
It's a TV application
layer, it's a BBC project, it's
open source as well.
And it's a framework that
eases the development
of HPV TV applications.
And I'm faster
than expected.
Unfortunately,
the slides I'd like to give credit to a
lot of people that
were directly or indirectly involved
in the whole research process.
Thank you, everybody who's on
there and in this room.
If they questions I have Mozart falls in
exchange.
Exactly.
Uh, is there a question in?
OK, there you go.
Well, it's not so much a question as
a general point of information
is that, uh, the ability to see
changing channels of use changing
channels in real time is not unique
to HPV TV.
Uh, there's, uh, the down link on
all IPTV and set top boxes,
of course. And also,
uh, I believe all modern cable
set top boxes do this as well.
So this is not unique to HPV TV, it's
just it's just a way to trick it onto
satellite and digital terrestrial
as well.
Also, I'm active in a well,
I'll take that up with the later.
Yeah, collect your most of all,
thank you throughout the year.
The IP address again.
Say it again, please.
Could you show this slide with the IP
address again, please?
Oh, sure. Good idea.
And did you check if you can use
a camera?
Hey, wait.
There was a question on microphone three.
All right.
Yeah, just a short question.
I do not own a TV that could do that,
but when you research that HPT,
HPV, TV stuff, did you find actually
anything useful that it was what
it was used for?
There's an add on for Firefox,
which could be argued if it's useful
or not. There's Oprah does
browsers for smart TVs as well, and they
have a VM that you could run
and try to to test
your HP TV applications.
But I did not really
succeed using these in in a probable
way.
I mean, if two stations broadcast any
useful content using HP VTV,
oh, that's a question of
defending. You know of some
like it, some don't.
I did said the if has all
the recordings of music and to startle,
it's something to go for.
I would say
collecting most of all feeds
back to one.
So you go back to
the question.
I checked that a HTML5
can also use a camera
if it is supported and
in your devices,
the camera is always on.
Could you check if you could
use a camera in
your, for example, Samsung TVs
to to look what's happening in the in the
user's living room?
Of course, this is the first question if
you have a device with the camera, and
I was trying to do that.
Actually, there's two kinds of
application environments.
There's usually the ones for the app
like Skype and stuff, and
there's the one, at least for Samsung.
This is true that only
lives in this TV
world. And there the camera object is
simply not available,
but it's something maybe
to try out. But to the other hand, this
is not part of the HPV TV standard,
and it's hard to do a standardized test
for a camera.
All right. But HDMI
five is not even implemented
in all the television sets.
Some of them do have already some
features. Some of them simply don't.
But I think this is to come.
One, two months before
you saw
him, five is nothing like a standard
set of features and within your devices,
it might be that it could was
out for annotation.
If you're using your version of web kit
or whatever she was
put simply on, it's true.
Maybe this will be a test you want.
And most of all, if I throw it, it's
dangerous. They could kill.
All right.
Microphone to now.
Can I ask a question?
Another multiple Oh
there. Yeah. OK.
The frequency of the requests
did. Do you record this as well?
Because that's kind of privacy issue
there too, because some, I believe, have
a frequency of one second per
page when you have a specific
channel.
So what what what is your question?
Then what do you record
with your suit?
How often are Pages Reloaded?
Because I believe some zip
codes even records every
second,
an impulse
they have a JavaScript method that pings
all the time. It's called Long Pauling or
so, and they do repeated
checks to see if the
watch is still watching.
Yeah, but how do you record that?
You could see that in the proxy locked,
but my proxy script switches
after 10 seconds, so you won't see
it. But maybe this is something you
would also find in static analysis
of the source code.
Thank you.
One of most all, no
one.
So it was just a short
question.
Are there any known
attacks on the HPV
that are yet to come public
or something?
Um, most of the things I was
working with is out of the
IPF standards.
It's the open IPTV forum
and the standard got adopted
by the by the standards,
by the HPV TV standard.
So it lists a lot of technical features
and there's also the HPV TV standard,
and I'm pretty sure you find some useful
information there as well.
OK.
Most of all.
Yes.
Yeah.
One question from the internet.
Could you fake votes by by accessing
those pages by your or your
server?
Could you what was the question from the
internet?
Could you fake votes
for reality shows or whatever
voting is done?
Very good question.
Actually, it's nuts.
I haven't seen the voting feature
implemented via HPV TV
yet, but once it gets
implemented, this is one of the most
interesting things to do.
I would say because at the moment on the
PS used, you could do all kinds
of tricks in order to get votes for your
favorite candidate.
I'm sure this is happening,
but maybe by the time the voting gets
implemented, maybe they have a user
log logging structure, kind of maybe they
find ways to prevent fraud on this
and when they do that.
Keeping.
And there is a question.
Thanks for your talk.
You mentioned the case of the television
manufacturer.
Could you elaborate on that?
Was the same set of data
transferred to the manufacturer
that is also transferred to the
web TV providers and the television
stations.
Actually, you're talking about the LG
incident.
Yes.
I don't believe it's been.
It has to do with HDTV.
I think it's like every
bigger company does market research.
LG did market research, and I
discovered within the proxy like also
that Samsung, of course, calls home
know most of all,
but it's unclear which information is
included in there.
So it's usually encrypted.
It's usually a call to IP address,
which usually brings up a firmware
update or something like that.
What else is included?
I'm not able to tell.
Unfortunately.
So that's only one more question.
There is one on microphone six.
Yeah. OK.
I was wondering if TV's
that also have a recording function.
Do these Arab TV requests
at the time that they record when no
one's watching?
Did you investigate that?
I haven't. And what
is the exact question that the recording
function could be deactivated or
no, no, if the recording function
when it's active? So if the TV record
something or does it, then also
do the HPV TV requests
having researched this, but
would not expect that to happen,
but can say maybe
something to try out.
Multiple.
Who was it, was you?
Yeah.
There was a question up there
on the right.
Oh yeah.
Come here, if you like the Roosevelt.
All right.
Well, question. Go ahead, please.
You mentioned you mentioned in your talk
that the legal situation, at least in
countries like Germany, is actually
such that it seems to be illegal
to do that sort of data collection.
And I'm wondering why
public companies
like Satya, Iodine and so on
they should, you know, adhere to legal
standards.
That's. Anybody looking into the legal
situation at the moment.
Is this an issue for,
you know, starts involved in Germany
to look into that?
Oh, is there any sort of statement
coming from the public broadcasting
companies to say, OK, we looked into
this illegal situation and because of
this and that we think that we are
courting, we are within the limits
of German law. I mean, this is a very
strange situation for me that you cite a
law that evidently
is violated and
everybody seems to be doing it.
And nothing happens
as far as for idiots, ATF,
or especially if I found the
option to disable tracking
you, you could opt out from that.
But private TV companies clearly
have no intention of making
that easy because it helps them selling
ads.
But this is just an assumption, but I
think it's about time when somebody
really is investigating
there. Maybe somebody is having
the idea of suing these companies,
somebody with a lot of energy, though.
Of all.
Yeah.
One is fear.
I mean, do you know of any reason
why no cell is used in this protocol?
It seems strange to implement such
a protocol in 2011 and not
use any transport encryption.
Yeah, to the one hand,
I would say a lot of content
delivery networks are having
or it's getting more complicated when
using HTTPS.
That's just an assumption.
But to the other hand, almost no
television on the market is making a
difference. I checked on the Samsung TV,
for example. It's not
complaining about self-signed
certificates.
So even though they would use it,
it's a question whether anyone
would find out if
the content is authentic.
And I'm not sure
my question was about the return
pass technology.
I mean, obviously a
physical return path must be implemented
in order for the device to
to to send back any information.
So you need an internet connection.
How does it physically work and
what is what is the aim of of of the
people? How do they want to achieve that?
Maybe one day almost every television
is connected and has a return
path, even even for those households
who may not have an intimate
in these cases, they just don't know if
there's no return path, no internet
connection there.
They just don't know.
I mean, to to which extent could HBP
TV work without a return?
Positive trends that seem to
generate some code that people can send
by as a means somewhere.
As far as I know, there's no
alternative to being connected and
accessing the content via HPV TV.
There is some fallback solution for the
red button display if it's
not possible to access the red button
off the internet.
There will be some objects embedded in
the carousel that then get displayed,
but once you press a red button, the
television tells you better get online
in order to see something.
Yeah. I mean, I also have
a privacy related question.
Well, maybe two.
First, did you check the Google
Analytics code, whether there was
the anonymized are
enabled or not?
I haven't checked that.
OK.
The OK second question
to it which channel were using
Google Analytics at TV
in Germany or A.
in France?
Because Google and Google
were artists also in Germany,
sponsored by every household nowadays?
Right? True.
They are kind of public.
Kind of public.
Yes.
Yeah. And they kind of have old servers
that would be kind of interested
to know
if the proxy lives are online.
Yeah. If a public company,
a public funded company using
Google Analytics with or without
the anonymized.
I haven't checked on the anonymize.
The proxy docs are online, but I
will check afterwards.
Maybe we talk about that a little more.
I don't know this feature, to be honest.
OK, thanks.
Let's have all.
Number three, um, I actually
know the answer to a question that was
asked earlier, if you
record something you have to watch to
channel in the same time so
that they record you
so they know which channels you
watch anyway.
So if you record something, they know
that you watched it.
So you mean if I watch a recording,
they would know.
No, no. But if you record something, they
know that you watched it because you have
to watch the channel to record it.
Mm-Hmm.
Yeah, the the HDP
address comes along with the contents
and television requested
once it receives this information.
This is usually when you watch it.
So it's only then, and in the case
of proceedings at ends, they
also check periodically
if you are still watching.
But the question was, if they know if
you recorded it, I think, oh
yeah, oh, because you have to watch it.
I don't think so, but whether
it's recordable or not is encoded
in the DVD stream somewhere.
I'm not expert on that, but they I'm
not sure that the HPV
TV gives the means to him to know that.
Or yeah,
you can yeah,
you can use it for between not
only interviews, you can use it also,
for example, on DreamBox on
home theater ABC.
Are there any difference differences
concerning the security issues?
I think not exactly the security
issues. These are the same, but the
privacy issues are differently because
you deliberately start an application
in the case of like DreamBox
or other where you call a
URL, or you deliberately open the
CTF mÃ©diatique, and
that's a different endpoint of privacy.
But in point of content injection,
you might have the same issues.
Well, so far, you guys,
you should come here.
I have so many like,
you're running out of chocolate.
No, no, not yet.
No, we don't have any more time
for other. All right.