# Czech developer exploits weak eMudhra certificates to replace Samsung TV adverts with family photos

- URL: https://talkfuse.com/story/software-samaritan-revamps-borked-indian-certs-to-block-smart-tv-ads/
- Published: 2026-11-12T18:02:55+00:00
- Updated: 2026-11-12T19:41:53+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/11/12/software-samaritan-revamps-borked-indian-certs-to-block-smart-tv-ads/5309467
- Topics: Asia, Entertainment, Software, Technology, TV, World

## Key points

- A developer replaced Samsung TV adverts with family photos.
- The workaround uses compromised eMudhra certificates still trusted by some devices.
- It also blocks some ad tracking, but firmware updates may end it.

## Summary

Czech developer Daniel Vrátil used a weakness in eMudhra certificates still trusted by his Samsung smart TV to inspect its web traffic and replace home-screen adverts with family photos. The project also blocks some advertising-related tracking, showing how a serious certificate security failure can expose device communications as well as enable unwanted changes.

India-based eMudhra said it had issued more than 60 million digital certificates, but eight intermediate certificate authority private keys were found to be weak enough to guess. Vrátil routed traffic from his 2022 Samsung TV through mitmproxy, then redirected requests for advertising domains to a server on his home network. The open-source project requires technical work and only applies to devices that still trust the compromised certificates; a firmware update revoking them could end the workaround.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.