S1E67 — Read this before you buy that TV streaming stick

GARY: —fuck— no, wait, the thing is, the thing is you buy the stick, it's nineteen bucks, you plug it in, and before the home screen even loads it is already working for somebody else—

GARY: —and the somebody is never you, that is the entire business model—

MAEVE: We're recording, Gary. That was content. Congratulations, we're a show now.

OBI: You rehearsed this in the car.

GARY: I rehearsed a different one in the car. The car one had a beginning.

GRUNER: Is strong opening. I feel informed and also attacked.

GARY: Fine. Fine. Gary.

MAEVE: Maeve.

OBI: Obi.

GRUNER: Gruner.

GARY: Tonight's thread, straight off the front page: "Read this before you buy that TV streaming stick." Buckle up. Your router is about to have a worse night than you are.

MAEVE: Top comment, first reply, mortenjorck. And I quote: the device "is set up for residential proxy and ad fraud straight from the factory."

OBI: Not malware. Nobody gets infected. It ships that way. It is a feature with a purchase order. Somewhere there is a bill of materials that reads: screen, remote, crimes.

GARY: Nineteen dollars. My sandwich today cost more than the surveillance infrastructure in somebody's living room.

MAEVE: The margin was never in the plastic, Gary. The plastic is the wrapper. You are the product and your router is the fulfillment center.

GRUNER: Field note. Humans bring small glowing box into home. Box immediately reports for second job. Humans applaud picture quality.

OBI: And it is not just sticks. utopiah links a gist — a cheap Android projector, the Magcubic HY300 Pro, quietly working as a residential proxy node. Thousands of suspicious DNS requests. Bandwidth gone. Owner never asked, never told.

GARY: A projector. The problem has learned other shapes. It can be anything with a power cord and a dream.

MAEVE: Thousands of DNS requests. The projector was networking. Relentlessly. Like a first-year analyst with a quota.

GARY: That projector has a better outbound social life than I do.

MAEVE: The TAM of other people's living rooms is essentially unlimited. That is not a scandal. That is a market map.

OBI: And before the thread canonizes the wrong link — Doohickey-d does the homework. The original analysis is BitSight's. The Krebs write-up is the secondary report. Credit where it's due, the comments actually read the citations.

GRUNER: krebsonsecurity posts GitHub. Company, Synthient. Is tracking almost one thousand makes and models known to bundle proxy software. From factory. Is list. List has README.

GARY: A thousand models. There is a public spreadsheet of snitches and it has version history.

MAEVE: That's the episode, honestly. A factory pre-installs the fraud, a tracker publishes the list, retail keeps the shelf stocked. All the thread has to do is decide how to feel about it.

GARY: And how does the thread feel?

MAEVE: Oh, the thread feels fucking great. That is the problem.

MAEVE: Because the moral heartbeat of this thread, the actual majority position, is: adtech deserves it. Scroll for five minutes. "The ad networks are the real fraud." "Honestly, good." I am paraphrasing, but barely.

MAEVE: And look. As fraud goes, it is almost elegant. The mark is an ad exchange. Ad exchanges have no feelings. I have sat across a table from them. Confirmed.

GARY: There's a part of me that— if somebody's getting robbed, and it's the house that spent twenty years robbing everybody else first—

OBI: The house getting robbed is your house, Gary.

GARY: What?

OBI: acdha, quoting: your IP "gets a bad reputation so you CAPTCHAs or outright blocked." His grammar, not mine. The fraud traffic leaves through the buyer's connection. The buyer's address takes the reputation hit. The stick is long gone. It does not care about your CAPTCHAs.

GARY: cryzinger's in there too. Same story. People suddenly having to prove they're human just to buy socks.

OBI: And then ta988 walks in with the actual body. Family member's stick. Whenever it was powered on, the home network was unusable. It tried to scan the other devices on the LAN. It saturated the router's tables holding connections open to services all over the goddamn world.

MAEVE: So the thread's position is "let it burn," and the thing actually burning is ta988's mom's router.

OBI: "Fuck adtech," typed from a network that is not currently on fire. Brave. Devastating. The traffic routes through somebody's grandmother and these commenters call it praxis.

GARY: Can I say one thing? The people posting "let it burn" — a lot of them have spent years inside the ad machine. They know exactly what they're mad at. That's not nothing.

OBI: It is also not a firewall.

OBI: And somewhere an on-call engineer gets paged at 3 a.m. because a nineteen-dollar stick decided to become an international man of mystery. Nobody in that thread buys him a drink.

MAEVE: Adtech is not fallen. Adtech is totally depraved. There was never a good version of the auction. That does not sanctify the stick.

MAEVE: This is the browser wars, by the way. Netscape put the tracking in the browser, the platforms put the tracking in the television, and the sticks put the tracking in the— actually, no. The printing press was the first residential proxy. Every pamphlet looked like it came from a concerned citizen. It came from a machine with a business model.

GARY: ...what?

MAEVE: Moving on.

OBI: For the record, the pamphlet take is going in the logbook under "unverifiable."

GARY: Okay, I'm in the Synthient repo. I'm scrolling. It's model numbers. It is just model numbers forever. It's a phone book where every single number is snitching on you.

GARY: Pxtl, quoting the article: Amazon, Best Buy, Newegg — "hundreds of different models and brands," all bundling unofficial versions of Android. On the shelf. Next to the batteries. With a gift receipt.

OBI: Key word: unofficial. Specific cheap models running forked builds. This is not "every Android TV device is compromised." It is these thousand. That is why the list exists — so you can look the thing up before you plug it into your house.

MAEVE: The retailers are not checking. Checking is friction. Friction is a conversion problem. You see how every part of this sentence is somebody's actual job.

MAEVE: And the reviews are all five stars. "Works great. Fast shipping." Nobody reviews the part where their IP gets blacklisted. There is no star category for that.

OBI: "Would botnet again."

GRUNER: Retail is complicit.

GRUNER: Is growth hack. You pay nineteen dollar. They grow. You are hacked. Everybody scales. Blyat.

GARY: Synthient's whole operation is a GitHub repo. Somebody's weekend project is a thousand-model hit list with a license file. I raised thirty-eight million dollars and never shipped a README that did anything.

OBI: The README is the product, Gary. It always was.

GARY: That could be important—

OBI: It is a newsletter.

GARY: You don't know that.

GARY: Fine. giantg2 says Roku bypasses your DNS blocking with hardcoded tables, so it can keep phoning home no matter what you block.

OBI: giantg2 asserts this. No source. No packet capture. No receipts. It might be true — that is the hell of it — but right now it is one guy saying it, and it is in the log as one guy saying it.

MAEVE: There's also speculation down-thread about police showing up because your IP address committed crimes while you slept. Nobody documents it actually happening. It's vibes with a warrant.

OBI: joshmn does note he went to federal prison — for running a piracy streaming site. Different crime, different hardware, real sentence. The stick version of that story has no receipts yet.

GARY: "Yet" is doing a lot of work in that sentence.

OBI: It usually is.

MAEVE: Here's the part I keep circling. The stick's entire product is pretending to be a household. The fraud only works because the traffic looks like a real person in a real living room watching television. A person the machine swears exists. An inferred existence.

GARY: We're the stick.

GRUNER: I have appendix on this.

OBI: And we're back. Uptime on this show is measured in minutes, people. Spend them on the thread.

OBI: So: what do you actually buy. MattTheRealOne, down-thread, unfashionable and correct — Apple TV. Best current balance of privacy and convenience, and it is not close.

GARY: MattTheRealOne. His entire handle is a claim, and the claim holds up under questioning. I hate how clean that is.

GARY: Four words into his comment he has solved television for everyone on earth. I have written strategy docs longer than his whole posting history that solved nothing.

GARY: And he just posted it and walked away. No edits. No follow-ups. He knew a thing, said it, and left. I have never once left.

MAEVE: To be clear, Apple is building an ads business with both hands. This is a least-worst recommendation. You are picking which trillion-dollar company does not rent out your living room.

OBI: Least-worst is still a ranking. Somebody has to sit at the top of it.

GRUNER: Least-worst is still worst.

MAEVE: That is the nicest thing anyone has ever said about Apple in this booth.

MAEVE: He's right, though. That almost never happens.

GARY: You could just enjoy a commenter being right.

MAEVE: I am enjoying it. Internally. At scale.

OBI: Logbook. Today's entry.

OBI: "Incident: consumer electronics. Root cause: the price was the product. Blast radius: everyone's router. Action item: stop buying computers that cost less than this mug."

GARY: That is genuinely a good heuristic.

OBI: It is now policy.

GARY: So. The stick works for somebody else, the list is public, the retailers don't check, the thread doesn't care, and the answer costs more than nineteen dollars. That's the thread.

MAEVE: If you already bought one of these things: unplug it, look up the model number, and go outside. The fraud is a rounding error on somebody's P&L. The somebody just happens to be your mom's internet connection. Portfolio math is beautiful that way. From a distance.

GARY: The repo is the thing. Check it before you plug anything in. And if you ever ship anything again, ship the README first. Write it like somebody's going to read it in the dark. Because somebody is.

OBI: Postmortem on this recording. Root cause: nineteen dollars. Blast radius: four hosts, one studio, one projector nobody here owns. Action item: look up the model number before you buy it. Severity: documentary.

GRUNER: Field note, final. Humans build tiny jail. Pay for it themselves. Give it remote. There is no synergy. Chyort.

MAEVE: That is a wrap on the thread. Nothing else to sell you. We don't have a sponsor. We could never get one.

GARY: Gary.

MAEVE: Maeve.

OBI: Obi.

GRUNER: Gruner.