A security researcher investigating unusually targeted adverts on his $3,000 (approximately £2,240) Samsung TV claims he uncovered extensive tracking software and microphone-related functions. Two days after sharing his findings, he said OpenAI had deactivated his account for 'Cyber Abuse'.
The claims, posted on X between 21 and 23 October 2026, have raised questions about smart TV privacy and AI-assisted cybersecurity research.
The researcher, known as log4j on X, began examining his 2025 Samsung television after noticing adverts that appeared unusually specific to his interests.
His investigation reportedly identified software associated with viewing-data collection, voice functions and targeted advertising. However, his findings have not been independently verified, and there is no confirmed link between the investigation and his reported OpenAI ban.
Researcher Claims Samsung TV Has Extensive Tracking Features
Log4j said he initially struggled to examine the television's encrypted firmware. Accessing the underlying software through conventional methods would have required additional hardware investigation.
Instead, he claimed to have exploited previously unknown vulnerabilities to obtain root-level access. This reportedly allowed him to examine system files normally inaccessible to television owners.
In posts published on 21 and 22 October, he described what he believed were extensive tracking capabilities. These allegedly included always-on microphone functionality, automatic content recognition (ACR), location tracking, network mapping and targeted advertising services.
He also claimed Samsung's data ecosystem involved approximately 400 partners. However, he did not establish that all those partners received information from his television.
'Just you, God, a $3000 (approximately £2,240) TV and Samsung + their 400 partners!' he wrote on X.
One screenshot showed an entry labelled csapi-tv-service-alwaysonvoice in a file called security-policy.xml. The entry indicates a voice-related software component but does not prove that the microphone continuously records conversations or transmits private audio.
According to Tom's Hardware, another researcher, ngxson, observed a modified Samsung television activate its microphone for approximately five seconds before stopping.
No further activation was detected during subsequent monitoring. However, the television had already been modified, limiting what the test establishes about unmodified consumer models.
What Samsung Says About Smart TV Tracking
Some technologies highlighted by log4j are already documented by Samsung. According to Samsung's official support documentation, its smart televisions support ACR, an optional feature that identifies viewing activity to provide personalised services.
Samsung says ACR can collect information about programmes watched, viewing duration, television identifiers and IP addresses. The company states that users must opt in and can disable the feature through privacy settings.
Samsung also says ACR does not record or watch the actual content displayed on the screen. Certain Samsung televisions support microphone-based services. For example, SmartThings Pet Care can detect sounds such as dogs barking through a compatible television's microphone.
The service can alert owners or activate content intended to calm their pets. On supported models, it can operate while the television is switched off and requires SmartThings configuration.
These documented capabilities do not establish that Samsung secretly records private conversations. Samsung's viewing-data practices have also faced regulatory scrutiny.
On 26 February 2026, Texas Attorney General Ken Paxton announced an agreement requiring Samsung to obtain consumers' express consent before collecting or processing ACR viewing data in Texas.
The agreement followed a lawsuit and requires clearer privacy disclosures and consent screens. It does not establish that Samsung secretly recorded conversations through television microphones.
OpenAI Ban Adds Unexpected Twist to Samsung Investigation
The controversy took another turn on 23 October when log4j claimed OpenAI had deactivated his account for 'Cyber Abuse'.
He shared what appeared to be an account-deactivation notification and suggested the decision had cost him approximately $500 (approximately £374).
'Banned for reverse engineering work? That's wild,' he wrote.
Log4j maintained that he had not used OpenAI's tools to exploit external systems or discover vulnerabilities. He said his activities involved local reverse engineering and suggested that OpenAI's cybersecurity safeguards had flagged his work.
OpenAI's Daybreak programme provides approved security researchers with access to advanced AI capabilities for authorised cybersecurity work.
Supported activities include vulnerability research, malware analysis and defensive security testing. Access requires approval and remains subject to security safeguards and usage policies.
OpenAI's Daybreak guidance also acknowledges that legitimate cybersecurity requests can encounter unexpected restrictions. However, there is no independent confirmation that log4j had Daybreak access or that its safeguards caused his reported account deactivation.
The available evidence does not establish why his account was reportedly deactivated or whether his Samsung investigation triggered the restriction. No public explanation from OpenAI addressing his individual case was identified.
How Samsung TV Owners Can Protect Their Privacy
The allegations raise a practical question: what information does a Samsung television collect, and how can owners control it?
Samsung says users can review their privacy preferences and disable ACR through the television's settings menu.
Owners of compatible models can also check microphone controls, including physical microphone switches where available, and review enabled SmartThings services. They can also examine settings related to personalised advertising, viewing-data collection and sound detection.
For now, log4j's more serious claims about continuous microphone activity and extensive data sharing remain unverified. Samsung's documented features confirm that some televisions support viewing-data collection and microphone-based services, but not that those capabilities operated improperly on his device.
His reported OpenAI ban raises a separate question about how AI providers distinguish legitimate cybersecurity research from potentially harmful activity without unnecessarily restricting authorised investigations.
