own-your-glass

Install

Needs a rooted TV with Homebrew Channel (root status OK).

Homebrew Channel: Settings → Add repository, enter https://raw.githubusercontent.com/fivefold3/webos-homebrew-repo/main/repo.json, then install Own Your Glass from the list. Updates show up there too.

Manually over SSH: turn on the SSH server in Homebrew Channel's settings, download org.ownyourglass.app_1.6.0_all.ipk below, then

scp org.ownyourglass.app_1.6.0_all.ipk root@<tv-ip>:/tmp/oyg.ipk
ssh root@<tv-ip> "luna-send -i -f luna://com.webos.appInstallService/dev/install '{\"id\":\"com.ares.defaultName\",\"ipkUrl\":\"/tmp/oyg.ipk\",\"subscribe\":true}' </dev/null"

Once it prints "state": "installed", press Ctrl-C and remove /tmp/oyg.ipk.

Installing changes nothing. Open the app, pick a protection level and press Own the glass. Everything is undone by Give the glass back or by uninstalling the app.

Upgrading from 1.5.0: install over the top and press Own the glass. The new protections join your preset at once. A Custom selection is kept, rewritten as its changes from its base preset, so the new protections that preset carries reach it too; if your Custom selection had Phone apps on, DIAL stays blocked, and if it had Phone apps off on a Strict or Lockdown base, DIAL stays open.

What's new in 1.6.0

New protections

• Screenshot shield (every preset). The TV keeps a picture of the app on screen for Home's Recents row in a folder every app can list; it is now root-only, and Recents keeps its pictures. A paired phone app could ask the TV for a screenshot three ways; the calls are taken out of the phone API, and everything else phone apps do keeps working (verified on the C5: the phone app still finds, pairs with and controls the TV). A phone that used the TV before the shield went on keeps the calls until a restart; status says so.
• Web-app debugger (every preset). Every LG TV runs the web-app debugger on port 9998 with no password, Developer Mode or not: anyone on your network could attach to the open web app, Homebrew Channel included, and run code in it. The port is closed to the network and stays reachable from the TV itself, so ares-inspect and ssh -L 9998:localhost:9998 still work.
• Network printing port (every preset). The TV listens on port 515 for print jobs from anyone on your network, with no login; nothing on the TV prints through it. Closed on IPv4 and IPv6.
• Phone apps starting TV apps (DIAL) is its own option (Strict and Lockdown). DIAL lets any device on your network start apps on the TV and turn it off, without asking. Its ports are closed by a firewall rule as well as the service being blocked, so the block holds when DIAL loaded before Own Your Glass at start-up. With it on, Spotify and other phone apps can cast only to an app already open on the TV; the Strict description says so.
• The "Who.Where.What?" consent (recognition of people, places and products on screen) is declined with the other tracking consents.

Fixes

• Turning Phone apps off again asks for the restart LG's phone server needs in any boot, not only the one in which it was turned off. Before, undoing the option after a restart left phones unable to find the TV, with no notice.
• On BusyBox 1.29 to 1.31 (webOS 5.6, 6.5 and a 2023 C3 on 8.3) every system setting Own Your Glass writes failed to build, because of an awk construct those versions misread. Fixed.
• The firewall chains (LAN firewall, debugger, DIAL) are built complete under a new name and swapped in, so re-applying, or adding a device with oyg lan allow, never opens a port in between.
• The screen-capture shield keeps its root-only files in /run, which no app sandbox can write, and trusts nothing it finds in /tmp: a link planted at a shielded path is left alone and reported. Status checks that OLED care is still getting its screen samples through the shield.
• A setting the settings service refuses to put back stays recorded, is tried again at the next undo, and status says so instead of reporting the option as restored.
• A Custom selection is saved as its changes from a base preset. Saving every option froze a protection that was not yet verified at the time as off for good.
• The uninstall's last message says what needs a restart.

Docs

• docs/RESEARCH.md: what the screen shields are built on (OLED pixel care's screen samples, Home's Recents pictures, the phone API's screenshot calls), the open ports a C5 answers on the LAN, and how DIAL behaved from boot to boot. docs/COMPATIBILITY.md: the print server per webOS generation.

Known limits

• Verified on webOS 10.3 only; the other releases are surveyed, not run. HbbTV options are untested (no broadcast reception on the reference TV).
• The firewall is IPv4 only (these kernels have no IPv6 netfilter). The LAN firewall option turns IPv6 off; the debugger and DIAL options warn when the TV has an IPv6 address they cannot cover.