Bluetooth is a technology that allows for wireless communication between hosts.

learn more… | top users | synonyms

42
votes
5answers
47k views

What can an attacker do with Bluetooth and how should it be mitigated?

What are the security risks of Bluetooth and what technologies and best practices should be used to protect my device? What can an attacker do once a malicious device is paired with mine? ...
14
votes
1answer
656 views

Is Bluetooth Low Energy Injection possible?

Mike Ryan claims that it is possible to inject packets (probably with Ubertooth) in an ongoing BLE conversation. His attempt to do so lead to jamming the connection (Sources 1 and 2). The Bluetooth ...
13
votes
7answers
5k views

Strategies against jamming attacks?

We have some devices which are designed to use standard frequencies/protocols, such as GSM, CDMA, GPS, Wifi and Bluetooth, among others. While our focus is not thought to be used for high-profile ...
13
votes
1answer
534 views

Is Bluetooth's “advertising” mode more secure than “discoverable” mode?

I understand that there are many security issues associated with Bluetooth's "discoverable" mode, and have avoided it where I can. However new features of many systems (e.g. Apple's Handoff/Continuity)...
9
votes
1answer
956 views

Is Bluetooth 4.0 traffic encrypted by default/design?

I wonder if the BLE (v4.0) traffic is encrypted by default or by design, or is it just optional? If the former, is the traffic encrypted using a key derived just from the pairing pin or is there some ...
8
votes
1answer
181 views

Bluetooth vulnerabilities for Internet of Things demo

For a school assignment we have to talk about a certain topic within IoT. We chose security, and have to make a sort of live demo for it. So we 'hacked' up an rc-car, and attached an arduino to it ...
7
votes
1answer
2k views

Security of Bluetooth Low Energy (BLE) link-layer encryption

Is Bluetooth Low Energy (BLE)'s link-layer encryption secure against an attacker who eavesdrops on some random BLE connection between two devices, but has not eavesdropped on the first connection ...
6
votes
2answers
1k views

Are smart watches secure?

My Pebble smartwatch, like many (most?) other smart watches, uses Bluetooth Low Energy (Bluetooth Smart, BLE, BTLE, etc) to communicate with my smart phone. There's some security in the link, ...
6
votes
2answers
1k views

What risks are there with a Bluetooth based door lock, and are there any mitigations?

There are a few interesting Bluetooth door locks on the market that use version Bluetooth 4.0 however there seems to be a few issues with this E0 Encryption flaws Risks during pairing Attacks ...
6
votes
1answer
126 views

What tools are needed to view or detect covert messages in a 60 fps video?

The eye can't detect changes in a frame greater than 60 FPS. Similar to this scene in Fight Club, a QR code equivalent is used in pairing the Apple Watch with the iPhone Without knowing that the ...
5
votes
2answers
1k views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
4
votes
2answers
13k views

How to sniff Bluetooth traffic using Android?

I have two Arduinos using Bluetooth to communicate one with another. Is it possible to sniff the Bluetooth conversation between the two devices? An Android solution would be great, I heard of hcidump ...
4
votes
2answers
3k views

Securing Windows 7 using Bluetooth

I'm thinking of using my iPhone as a device combined with a low power bluetooth usb key. So when the phone is gone the workstation locks. (I don't want it to unlock the workstation though, I'd prefer ...
4
votes
1answer
42 views

What kind of information gets shared while pairing a device using Bluetooth? [duplicate]

I am using LGKp500 phone. My software version is KP500AT_V10h. Its a simple touch phone. It's not a smartphone. Now can anyone tell me, when Im pairing my phone with another phone using bluetooth (...
3
votes
3answers
6k views

Intercept data sent via bluetooth

I am trying to re-write a closed-source application, originally deployed on mobile devices, that lets you command and control a certain type of mechanical robots via bluetooth. The new application I ...
3
votes
2answers
630 views

How to prevent sharing my Internet by Bluetooth tethering?

If my neighbor - who I have allowed to connect to my router - is sharing my internet by Bluetooth tethering, is there a way to prevent anyone from sharing my internet this way without cut him off?
3
votes
1answer
151 views

What about AD2P vulnerability?

My goal is to create a simple one-way intercom using B Speech TX2 and B Speech RX2, an Audio2Bluetooth and Bluetooth2Audio converter. My question is, how secure is the audio(in my case voice) being ...
2
votes
3answers
2k views

Can a wireless headphone (bluetooth) contain malware?

Can a wireless (bluetooth) headphone store data? Also, if it can, then can someone put malware in it? I assume that the device must necessarily be able to store some sort of data, since it has buttons ...
2
votes
1answer
307 views

Can malware spread via bluetooth file transfer in Android?

I am aware of some malware that spreads when two devices are paired using Bluetooth; but can malware spread when sending a clean file to someone or receiving it via bluetooth ? If so, does it need ...
2
votes
1answer
292 views

Smart lock protocol

I made an Arduino project to lock and unlock my door via my phone (with Bluetooth). It works well but it’s unsafe since I just send the lock and unlock command in cleartext, without authentication or ...
2
votes
1answer
919 views

Arduino to Android secure bluetooth connection

I'm using an Arduino Uno and a nRF8001 board from Adafruit to connect to an Android phone over bluetooth. I will be using it to lock and unlock a lock and I need to make sure only verified devices are ...
2
votes
2answers
214 views

BTLE pairing: Where does the code come from?

When trying to pair 2 bluetooth LE devices (e.g. 2 iPhones), a popup shows up that requires to input a code displayed on the other device. I am aware of the concept of out-of-band authentication, and ...
2
votes
0answers
59 views

Bluetooth LE / Bluetooth Smart supplementary security

So as we know there are significant issues with Bluetooth LE when it comes to security at least in the 4.0 and 4.1 specs. There are many solutions to this problem that can be undertaken i.e Enabling ...
1
vote
2answers
410 views

Can you pick up any device specific information by monitoring bluetooth signals? [closed]

Could I use some sort of permanent device ID broadcasted by the bluetooth radio in my phone to do something like unlock my door? I don't want to have to ever pair the device, or take it out of my ...
1
vote
1answer
130 views

Bluetooth/WiFi Identity tracking in public spaces - How to discover?

Your unique mobile device WiFi MAC addresses as well as your Bluetooth unique address can give away enough information to identify you and track your location in public spaces even if you don't ...
1
vote
1answer
106 views

Everykey (Bluetooth master key) - is it really secure? [closed]

Obligatory disclosure I have no relation to the Everykey company and do not mean to promote them in any way. I came across the product Everykey that claims to be "your only key" by allowing you to ...
1
vote
1answer
690 views

Are there Bluetooth attacks on Smartphones that will not notify the user of the attack?

Are there Bluetooth attacks on Smartphones that will not notify the user of the attack? Specifically forcing a reset or opening an application.
1
vote
0answers
18 views

Relay Attacks on Bluetooth LE

Is it possible to perform a relay station attack on Bluetooth LE? For example if I installed an August smart lock or similar on my front door (which uses BLE to communicate with my phone to decide ...
1
vote
0answers
37 views

Are there security concerns with Bluetooth low energy?

In the first versions of BLE specifications, there was a huge security flaw during the pairing allowing an attacker to perform a MITM attack. Since Bluetooth 4.2, the pairing use ECDH, so there isn't ...
1
vote
1answer
403 views

Bluetooth Peripheral Vulnerabilities [duplicate]

I've read some interesting Bluetooth vulnerability questions, but I didn't notice one recently. Bluetooth has long been disabled in our organization, and I'm looking to enabling it because of repeated ...
1
vote
0answers
3k views

Is it safe to connect mobile devices to rental cars? [duplicate]

Many modern cars feature Bluetooth connections and USB ports that allow passengers to connect them with mobile phones and digital music players (and smartphones, which serve as both). Is it safe to ...
0
votes
3answers
501 views

Is it possible to War Drive for specific Bluetooth devices? What is the range?

Is it possible for someone to remotely/covertly scan for Bluetooth devices? If so, what is the operational range of this scanner? My concern is that a Bluetooth based door lock will emit a signal ...
0
votes
2answers
535 views

How can I find out who is behind a Mac address? [closed]

I was connecting a bluetooth device to my tablet and noticed that when scanning for the devices one "device" was actually a Mac address. We (me and my husband) have been under a hacker attack already ...
0
votes
1answer
267 views

Hacked bluetooth speaker

I recently purchased a new OontZ Angle Plus bluetooth speaker and I believe that it has been hacked. I can't connect any of my devices to it, the bluetooth light indicates that it has been paired ...
0
votes
1answer
81 views

Enabling wifi or bluetooth before user login in Linux

What would the security implications be of enabling and using wifi and / or bluetooth before a user logs into the system in a Linux box? Thanks for your help!
0
votes
1answer
132 views

Repairing Bluetooth devices in public places

The wonderful answer to the question "What can an attacker do with Bluetooth and how should it be mitigated?" suggests that frequently repairing Bluetooth devices is a "good idea™." Are there any ...
0
votes
1answer
33 views

What things can the other person see about my phone when I pair it using bluetooth?

I need to know some correct information about bluetooth pairing technology. What are the things which becomes visible to the person about my phone when I'm using bluetooth from my phone and pairing it ...
0
votes
0answers
58 views

Is it possible for an attacker to log keystrokes of a bluetooth or wireless keyboard [duplicate]

Bluetooth and wireless keyboards are sending keystrokes wirelessly. Could this mean that an attacker (or spy) can log the keystrokes by monitoring the wireless or Bluetooth radio waves (or whatever)? ...
0
votes
0answers
27 views

Crackle does not work?

I've used to intructions for Crackle but, cannot get this kind of results like in the example. All it does is open up the wireshark like plugin and does not show any results like the picture below. ...
0
votes
0answers
61 views

Difference between Secure Simple Pairing and Secure Connections in Bluetooth?

I would like to know what are the differences between Secure Simple Pairing and Secure Connections in Bluetooth v4.2. Between BR/EDR legacy, BR/EDR, LE, LE legacy, I don't get it.
0
votes
2answers
93 views

Bluetooth attack against Android phone - could be successful?

Couple of days ago I attended a political demonstration. Amateur mistake, I know but I left my Bluetooth set to discoverable. I have a LG G2 running Android 5.0. Once during the demonstration I saw ...
0
votes
0answers
39 views

Is the Bluetooth Passkey Entry mode vulnerability still exploitable in v4.2?

As some of you may know, Bluetooth v2.1 introduced Secure Simple Pairing, along with a vulnerability in the Passkey Entry mode. Today, the current version of Bluetooth is 4.2. A lot of thing as ...
0
votes
0answers
85 views

Is it possible to do Bluetooth pairing without a shared secret?

I was wondering if it is possible to pair a device if it does not have a shared secret key with the device it wants to connect to? I believe authentication is done using challenge response between ...
0
votes
0answers
58 views

Bluetooth LE 4.0 security issues [duplicate]

How does BLE secure communications between devices? BLE 4.0 supports AES128, and the key exchange is done using DH. However, it is often reported that BLE 4.0 has security issues. What specifically ...
0
votes
0answers
71 views

How does STK (Short Term Key) generation work in a Bluetooth Low Energy?

I want to understand how STK (Short Term Key) generation works in a Bluetooth Low Energy. I don't want to go deep at a packets exchange level of a Security Manager Protocol, but I want to understand ...
-1
votes
1answer
1k views

Bluetooth penetration testing

I need to do some testing on boxed devices, incidentally having Bluetooth interface. I am quite sure that there are problems in the implementation, at least there must be given how the architecture ...
-2
votes
1answer
61 views

Is my iPhone 6S Plus compromised? [closed]

Is it usual practice on an iPhone 6S Plus for the wifi and Bluetooth addresses to be identical except for the very last number? One ends in .44 and the other .45. I've also had a lot of weird things ...
-4
votes
1answer
105 views

What do I risk, today, if I let Bluetooth activated on my phone? [duplicate]

Story: I got a cellphone that a bought from a famous fruit company. I, sometimes, need to use it as a personal hotspot; this automatically activate WiFi and Bluetooth. I unreasonably hate that. I ...