A researcher has discovered that an SDK embedded in free mobile and smart TV apps by Bright Data allows the company to use consumer devices as residential proxies. These devices relay web-scraping traffic, which is highly valued by the AI industry because it bypasses anti-bot defenses designed to block datacenter IPs. The research highlights how these connections can persist in the background, sometimes even bypassing VPNs on iOS devices.
Key points:
- Bright Data SDK turns consumer electronics into web-scraping exit nodes.
- Residential IP addresses are preferred by AI companies for data harvesting.
- Technical findings show a lack of authentication and potential bypasses of standard security tools/VPNs.
- Opt-in screens may underrepresent the actual bandwidth usage (up to 200GB per month).
- Mitigation involves blocking specific Bright Data domains at the router level using Pi-hole or NextDNS.
Key points:
- Bright Data SDK turns consumer electronics into web-scraping exit nodes.
- Residential IP addresses are preferred by AI companies for data harvesting.
- Technical findings show a lack of authentication and potential bypasses of standard security tools/VPNs.
- Opt-in screens may underrepresent the actual bandwidth usage (up to 200GB per month).
- Mitigation involves blocking specific Bright Data domains at the router level using Pi-hole or NextDNS.
lightweight userspace bandwidth shaper limit
