"Legal". The law is truly an ass.

Thankfully security researchers exist to fill the gaps that lawmakers haven't gotten to / won't get to: https://blog.includesecurity.com/2026/06/the-smart-tv-in-you...

These are the specific URLs mentioned:

  proxyjs.brdtnet.com
  proxyjs.luminatinet.com
  proxyjs.bright-sdk.com
  clientsdk.bright-sdk.com
  clientsdk.brdtnet.com

I use these regular expressions to block any connections to the domains or subdomains:

  /(\.|^)brdtnet\.com$/
  /(\.|^)luminatinet\.com$/
  /(\.|^)bright-sdk\.com$/
  /(\.|^)luminati\.io$/

No idea if this actually prevents proxy functionality altogether, but prevents some phoning home if you're infected.

See below for his this "consent" actually works. (The screenshot of the game.)

https://spur.us/blog/smart-tv-apps-residential-proxy-sdks

Brightdata still sucks at disclosing to users that they're opted in to this and that their connection is being used for this. It's "on by default", not opt-in and often buried in an unskippable "Accept the terms" or dig-to-opt-out prompt.