Hundreds of thousands of Android devices—including phones and TV boxes—are vulnerable to hacking because their ports are open to the internet, a hacktivist who has previously hit the headlines warns.