2

Most wireless mice are not bluetooth. There are known exploits that take over wireless mice and use them as a keyboard.

Are there known exploits that can remotely inject malware directly over bluetooth RF, read what is being typed or type on the keyboard to download a malicious script?

How would one possibly audit for this since it would require constant intrusion prevention scanning of Radio Frequencies?

Is there proof that BlueTooth is safe?

Improve this question
6
  • 1
    BT is encrypted, right?
    – schroeder ♦
    Feb 4, 2019 at 20:35
  • 1
    BlueTooth is not usually encrypted as there four security modes for BT. Like WiFi, there is an open pairing mode. Only the highest mode seems all that secure, but no one seems to use that.
    – rjt
    Feb 4, 2019 at 20:43
  • 1
    Since all bluetoorh devices use USB for charging, it has aggravated me that there is not an automatic exchange of keys over the usb cable to the PC or SmartPhone.
    – rjt
    Feb 4, 2019 at 20:45
  • Wouldn't that require ALL bluetooth devices to properly implement the USB protocol and connect GPIO pins to the microcontroller in order to negotiate a key? Or are you suggesting a 5th encryption method? I can imagine this working though... sounds like a really cool idea. Maybe you should design it!
    – dGRAMOP
    Feb 4, 2019 at 21:11
  • USB even when implemented correctly cannot prevent root kit install, but I would still rather risk that to have out-of-band automated exchange of big keys.
    – rjt
    Feb 4, 2019 at 21:34

1 Answer 1

Reset to default
2

It's going to heavily depend on your version of Bluetooth supported.

Here's the latest NIST paper with the state of Bluetooth security and recommendations organizations can take to remediate their risk.

That's a good place to start.

Page #37 of the report lists all the Bluetooth vulnerabilities known at time of publication, sorted by the version the vulnerability was discovered in.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .