I'm thinking about man-in-the-middle attacks on a BLE connection ... normally when people talk about MITM attacks it's a separate device that sits between the mobile phone/tablet and the BLE device, which immediately limits its effectiveness (the attacker must be physically near the two devices). Can an attacker write an app that gets installed on the same mobile phone/tablet as the real app, and somehow intercepts the BLE SDK calls and thus becomes a man-in-the-middle that is always there?

1 Answer 1


I'm writing an ionic cordova app and stumbled upon this. I'm trying to simply connect my bluetooth headset to my android and set up a SCO channel (for HFP bluetooth), but every time I do, a Spotify Service interjects and sets the connection to A2DP. It seems like Spotify wrote a service to hack the bluetooth SDK to ensure that its bluetooth connections are always compatible with its music listening service. When I delete Spotify this does not happen. So in short, yes, I believe it is possible.

  • I don't think Spotify hacked the SDK, but set a service listener and asked Android to route A2DP connections to it.
    – ThoriumBR
    Aug 21, 2018 at 19:08
  • It's messing up my app's SCO channel even when it's not running in the background.... (Spotify's service probably is still running, but the app itself isn't). That seems like a bug right? Aug 22, 2018 at 19:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .