The recent news on LG TVs spying on people made me fall into the rabbit hole of securing network communications. Right now my situation is extremely precarious - I own an aforementioned TV, as well as a desktop PC, both connected directly to the ISP Modem via Ethernet. Then there's a lot of Wi-Fi devices connected, with it being a small apartment reach hasn't been an issue. I'd like to get a cheap-ish router that I can use to secure and monitor network traffic, but I'm reading a ton of terms that I'm unfamiliar with, such as Omada, Unifi, openWRT, controllers, VLANs, etc. I read the FAQ here but am still rather lost. What should I be looking for and how can I get started securing my network?

I’m still learning as well, so my advice is probably not as useful or actionable as an actual professional’s opinion.

With that caveat, my suggestion would be to add a static IP address to the television, implement firewall restrictions specifically for that address, or remove the television from the network entirely. It may be extreme, but another solution is to replace the television as well since it is a known vector for security concerns.

Depending on what networking equipment you already own and use, you may not even need to purchase a standalone router. You may be able to configure your ISP provided gateway/modem to your liking.

It’s funny because I saw the same video and thought to myself I need to lock this TV down right away 🤣🤣

Maybe just leave the tv off the internet and use the streaming box plugged in. Turn it on once in a while for an update then remove it from the network not a perfect solution but better. Also I think it said you should unplug it so it can wipe some of its dialogue logs from its memory. Kind of insane

It might not be as simple as that. I watched this video from Steven and Wendell, And the TV itself was storing the data. Even when there is no network access. Eventually you'll want to connect to the TV to do some streaming or mirroring karma and then the TV might have access to the Internet I hopping through that device. Or if there's any open Wi-fi networks in your apartment that can be reached, the TV will try to connect through that. Including open hot spots published by ISPs like Comcast or AT&T.

Hopefully, now that this topic is getting broader coverage, other researchers will determine exactly the ext of risk, and ways to mitigate those risks.

I have a Deeper Connect network security device which protects all my network devices. It connects between my modem and wifi router.

Recommendations:

A decent WIFI router, check the FCC's ban on certain models from China. If router supports GUEST wifi networking, use it. Connect your IOTA to the guest. It will keep them from seeing your private devices.

Build a DNS blocker such as Adguard Home. Point your router to this machine and all DNS requests have to go through it instead of the outside world. This should take care of 99% of the malicious activity from your TV or any other device on your network.

Unifi is probably the lowest barrier to entry for more advanced network configurations. If you're feeling overwhelmed, I might start there.

if you need something cheap without over complicating things, get a cheap gateway without wifi and connect lan cable from modem to gateway's wan port, and then lan port of gateway to LG TV.

check TP-Link ER605, costs 50$ and should solve the purpose.

You can always connect the TV to a Guest network which will isolate it from your Primary/main network. You'll need to look at your router's settings of course to see if it has guest network settings (most do).

If you don't need devices on your primary network "seeing" each other, you can always enable Network Isolation (Device Isolation or similar verbiage).

Well
Get you a router that can allow for openwrt, once that is done, get you the software and follow the steps to installing the software to the hardware ( mine took less than a minute). Nothing too fancy, especially not gaming routers( branding and hype hence price absurd).

VLAN AND port isolation can usually found in the LAN section as a subsection of the settings which will show you all the LAN ports you have on device including the active WAN (Internet from ISP). Note that you need to put the TV VLAN profile as "access". Do some digging though.

VLAN and port isolation can done at the router. That's the kind of setup you need for isolating your LGU TV from you entire private network. Give the VLAN an ID number like say "10" for port Lan 1, VLAN ID 20 for Lan 2 port and so on. Give your desktop PC the highest Gbps Lan port.

Should actually see a difference in down/up load speed as well especially if it's a wifi 7 supported router with openwrt.

You don't always have to use ISP provided routers, but, if you have to because you ISP won't allow it (they should), attach a openwrt compatible router to it via LAN(ISP) to WAN(your router) then everything else is sauce

Your ISP should not have an issue with you getting your own router. Less to pay rent, more control