Samsung bans proxy SDKs: your IP is the product

Samsung is banning residential proxy SDKs from its Tizen smart TV app store after researchers found the code inside apps the company itself had promoted. If you're wondering why a TV matters to a business: the same SDK category ships inside free mobile apps, browser extensions, and VPN clients. Someone else's traffic exits through your IP address, and your IP address is what everyone else uses to decide whether to trust you.

What actually happened

Norwegian security firm mnemonic pulled apart a Samsung TV's internals and traced proxy code inside a Pac-Man game that Samsung had featured in its "Editor's Choice" section. The SDK came from Bright Data, an Israel-based proxy provider. Researcher Harrison Sand observed the resulting traffic being used for LinkedIn scraping and AI training-data collection.

The scale number comes from a separate scan by Spur Intelligence: 26.9% of all Samsung Tizen store apps carried residential proxy code, per TechCrunch's reporting on August 3. Samsung says it has restricted new app registrations containing proxy functionality, is writing a platform-wide developer policy banning the SDKs outright, and is removing existing apps that carry them.

Samsung is second here. LG announced the same ban in July after Spur found the SDKs in over 42% of its app store.

Why your IP address matters for your business

This isn't a TV problem. It's a monetization model: an app developer takes a check to embed an SDK, and the SDK rents out the device's internet connection. Nothing is stolen, nothing crashes, and the user never sees it.

The cost lands on your network's reputation. When a stranger's traffic exits through your office or storefront IP, that IP starts appearing in scraping logs, credential-stuffing attempts, and fraud-scoring databases. What that looks like from your desk: your payment processor flags your own admin logins, your email starts landing in spam, a vendor portal blocks you, or Cloudflare CAPTCHAs your team all day. You'll debug it as a networking problem for a week before anyone thinks to check the TV in the lobby.

Concrete moves that take an afternoon:

1. Put untrusted devices on their own VLAN or guest network. TVs, cameras, tablets, the digital menu board. Same reasoning as keeping your office camera off the network that matters.
2. Check your business IPs against a reputation service. If you're on a blocklist you didn't earn, you now know why.
3. Treat free apps on business hardware as a supply-chain decision. "Free" has a revenue model, and sometimes the revenue model is your bandwidth.
4. Watch egress volume, not just inbound. A TV that streams nothing but pushes gigabytes is telling you something.

Sources: mnemonic, TechCrunch, Krebs on Security.