Researchers have discovered that Bright Data’s software development kit turns consumer devices, including iPhones and smart TVs, into residential proxy nodes used to relay web-scraping traffic for AI companies.

Key Points

• Security researchers found that Bright Data’s SDK allows third-party apps to utilize a user's home internet connection as an exit node for web-scraping operations.
• The SDK, which claims to be consent-based, can facilitate up to 200 GB of data usage per month on mobile devices and smart TVs.
• Technical analysis revealed that the SDK’s peer-to-peer traffic lacks robust authentication and can bypass active VPN connections on iOS devices.
• Major platforms including Google, Amazon, and Roku have restricted background proxy SDKs, though Bright Data continues to support other smart-TV operating systems.
• Users can mitigate this activity by blocking specific Bright Data domains, such as proxyjs.bright-sdk.com, at the router level using tools like Pi-hole or NextDNS.

Why it Matters

This practice highlights a growing tension between consumer privacy and the massive data demands of the AI industry, which relies on residential IPs to bypass anti-bot security measures. While Bright Data maintains that its network is built on user consent, the technical findings raise significant questions regarding the transparency of these agreements and the potential for unauthorized bandwidth consumption.