Bright Data SDK turns smart TVs into hidden AI scraping nodes

Additional Context

The investigation by Include Security follows a series of high-profile legal and technical skirmishes involving Bright Data and major tech platforms. In January 2024, a federal judge ruled in favor of Bright Data in a lawsuit brought by Meta (per Courthouse News), determining that scraping publicly available data while logged out does not violate Meta's terms of service. This ruling reinforced the company's position as a dominant provider for AI firms seeking to crawl the open web. However, while the scraping itself may be legal, the methods of sourcing IPs have drawn scrutiny; X Corp (formerly Twitter) filed a similar suit against Bright Data in mid-2023, alleging widespread data exploitation. Simultaneously, platform operators are responding to performance and security risks. In early 2026, reports from Troypoint and other streaming outlets noted that Google and Amazon have increased Play Store and Fire OS enforcement to remove sideloaded or unofficial apps that exhibit proxy-like behavior. These systems now use automated detection to disable apps that misuse user bandwidth, a move that particularly affects the 'gray market' of free streaming utilities. Additionally, Google's January 2026 dismantling of the IPIDEA proxy network, which utilized hijacked consumer devices, indicates that major platforms are increasingly viewing residential proxies as a threat to their ecosystem's integrity. Industry analysts at Krebs on Security noted in late 2025 that as AI demand for high-quality training data surges, the market for 'authorized' residential proxies has become highly lucrative. This creates a challenging environment for smart TV manufacturers like Samsung and LG, whose Tizen and webOS platforms remain targets for SDK integration. With research fleets now documenting that these SDKs can consume hundreds of gigabytes of monthly data without clear user notification, the industry expects a transition toward mandatory, explicit disclosure requirements for any P2P bandwidth-sharing software.