Questions tagged [bluetooth]
Bluetooth is a technology that allows for wireless communication between hosts.
162
questions
1
vote
0
answers
66
views
Why was CVE-2022-20411 (Bluetooth Remote Code Execution) not detected by Android's BoundSanitizer?
CVE-2022-20411 enabled remote code execution over Bluetooth on Android. It was fixed in December 2022. But why was it not detected by Android's BoundsSanitizer?
Its purpose is to detect and prevent ...
- 111
2
votes
1
answer
234
views
Do wireless (2.4 ghz) headphones use encryption?
I've noticed that there are two types of wireless headphones / headsets / earbuds on the market – bluetooth and 2.4 GHz wireless (via proprietary dongles). Good example of headset that has both – ...
- 131
0
votes
0
answers
89
views
What bluetooth dongle works with spooftooph?
I have been looking to do bluetooth hacking but my internal bluetooth adapters are not working on either of my laptops with spooftooph. I was seeing if I could get a used MultiBlue dongle but no one ...
- 1
2
votes
2
answers
110
views
Do bluetooth accessories assure personal privacy?
I want to buy a pair of Bluetooth earbuds like these for use with my phone:
https://www.amazon.com/Wireless-Bluetooth-Canceling-Headphones-Earphones/dp/B09P38XS9M?th=1
I want to know if devices like ...
- 23
0
votes
1
answer
101
views
Is there something I'm missing about Bluetooth security?
I recently bought a Volcano Hybrid from Storz & Bickel. It has Bluetooth functionality, and indeed requires it to change certain important settings, such as the brightness of the display (which is ...
- 1
0
votes
0
answers
107
views
Can a Bluetooth device hack a phone it used to be paired to if the device was removed from the phone, but the device was not reset/cleared?
If a Bluetooth device, like a toy, smart toothbrush, or headphones etc. is paired to a phone or computer, and the Bluetooth device is sold/lost without resetting the device or any Bluetooth data on it,...
1
vote
1
answer
69
views
How is it possible to simply a decode Bluetooth communications from a medical device?
Excuse the naive question but I'm trying to understand a bit about security in home health and medial devices and a recent report about how home Covid test results can be altered has left me a bit ...
- 333
2
votes
1
answer
111
views
Are there ways to mitigate the risks of using a Bluetooth/wireless keyboard when the device connected is next to it?
Normally, I avoid using any Bluetooth or wireless devices, especially HIDs, but for a project I am working on the only keyboards that will fit the size are Bluetooth and wireless keyboards, so I am ...
- 983
0
votes
1
answer
98
views
How does HMAC fit in BLE?
In BLE there is events like authentication, pairing, bonding, exchange of LTK to secure a link, etc...
How does HMAC fit in BLE? I know that HMAC is used to ensure the integrity of a message so does ...
- 101
0
votes
1
answer
124
views
Security of Bluetooth to stream audio in a highrise apartment building, relative to using Wi-Fi for laptop access to router/modem
My question is about the general security of using Bluetooth in a
highrise apartment building. I am not a software developer, a network
administrator, nor do I work in IT. When needed, I "code&...
- 105
3
votes
1
answer
404
views
How secure is the wireless Bluetooth data stream going from my computer to my headphones?
Let's say I have bought a USB-to-Bluetooth dongle and "paired" it with my wireless Bluetooth headphones which I purchased by accident, thinking that they were wired.
One of the biggest ...
2
votes
1
answer
173
views
Does Windows use Bluetooth Authenticated pairing with encryption automatically?
Does Windows use Bluetooth Authenticated pairing with encryption automatically when you connect Bluetooth devices like earbuds to it? Is that Level 4? If it's not automatic, how do I get Windows to do ...
- 21
0
votes
1
answer
108
views
Can a wifi Access Point be reconfigured to receive other radio signals?
Say we have a remote transmitter that is not connected to a wifi router (neither wirelessly nor by cable), but which transmits information using electromagnetic waves. Examples include walkie-talkies, ...
- 1
1
vote
0
answers
88
views
Why does Bluetooth pairing require initiation from both devices? [closed]
I recently wanted to transfer some data from my smartphone to my laptop via bluetooth. This requires pairing the devices first. In the bluetooth options I could see all the other bluetooth devices in ...
- 123
0
votes
0
answers
104
views
I Received a strange Bluetooth Connection request from one of my own computers on my network
I wish I'd taken a screenshot of the connection request, but it basically was asking to connect to my work laptop and I could either accept or reject the request.
The requesting computer is using an ...
- 111
0
votes
0
answers
23
views
What do unkown MAC addresses mean in this context? [duplicate]
I've recently begun learning about Cyber Security related to Bluetooth. I toggled the "Show Bluetooth devices without names" (or something similar) in my phone in developer mode and went to ...
- 1
0
votes
0
answers
90
views
Options for Integrating or developing a physical security solution (physical access control via in-house mobile apps [NFC/Bluetooh])
Our team is looking to either integrate or develop a physical security solution for a rather large campus.
Requirements:
Ability to either integrate (with reader/electronic lock hardware) from our ...
- 113
1
vote
1
answer
530
views
Is Bluetooth low energy (BLE) still secure?
Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
- 21
3
votes
1
answer
156
views
How does the Apple/Google Exposure Notification system prevent infected users from being identified?
Under Apple and Google's contact tracing scheme, Alice's device generates a daily random value (termed a Temporary Exposure Key or TEK in the Cryptography Specification). Every 10 minutes, a Rolling ...
- 131
1
vote
0
answers
84
views
Bluetooth module and an Android app [closed]
I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data.
how can I make sure my system only connects to phones that activated bluetooth through the app?
...
- 111
1
vote
0
answers
289
views
SSL Handshake in Android via Bluetooth Classic [closed]
I am working on implementing an Android App (client) which will be connected to Raspberry Pi (server) via Bluetooth Classic.
To make data transfer securely, I want to implement SSL encryption between ...
- 11
1
vote
1
answer
284
views
Can Bluetooth earphone leak data between phones?
I have a Bluetooth earphone connects to both iPhone and android. I forgot to switch off the connection of android when using iPhone. So I am wondering if the sound of iPhone or even the iPhone data ...
4
votes
1
answer
1k
views
Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?
There are some threads talking about Bluetooth keyboard security. But I have a different concern.
I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a ...
- 143
3
votes
1
answer
127
views
Freshness Protection in BL and BLE
I recently found this document: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf , Guide to Bluetooth Security from NIST.
Unfortunately, there is nothing described w.r.t....
- 31
1
vote
1
answer
1k
views
How do I add application level encryption to an Android BLE connection?
The Android Bluetooth Low Energy documentation recommends adding application layer encryption on-top of the BLE connection if the exchanged data is sensitive:
Caution: When a user pairs their device ...
- 43
-1
votes
1
answer
93
views
Cyber Security in Hardware Products? [closed]
I am currently working on a product similar to smart locks that work with BLE identification. I can handle the hardware of the product very well (mechanics / electronics / embedded software), however, ...
- 9
3
votes
0
answers
109
views
Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?
Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
- 31
0
votes
1
answer
765
views
Can people hack your iPhone Via Bluetooth if you leave it on?
I live in an apartment complex with lots of people, and oftentimes I would be able to see Bluetooth devices that do not belong to me on my iPhone or MacBook when I search for my Bluetooth device.
...
- 157
1
vote
1
answer
602
views
Can Bluetooth "headphones" be malicious?
I received a parcel from Amazon which I did not order, addressed to me. It contained Bluetooth earphones. It may just be part of a brushing scam, but it's got me curious.
So my question is.. Could a ...
- 11
1
vote
1
answer
1k
views
Apple bluetooth keyboard insecure connection?
From time to time, I see this dialog box pop up on my MacBook Pro screen. It typically happens as the computer wakes up from sleep.
Magic keyboard is trying to connect using an unsecured Bluetooth ...
- 423
0
votes
0
answers
40
views
Anonimity of Bluetooth tokens [duplicate]
In the context of contact tracing, I have a privacy question.
I have read a few (and "few" is already a bad thing) articles about Bluetooth contact tracing, especially in the context of the Sars-Cov2 ...
- 5,361
-1
votes
1
answer
123
views
Bluetooth vulnerability on a Raspberry PI running Raspian
Is it possible for someone to exploit a Raspberry PI running Raspian through bluetooth just by having the bluetooth enabled?
1
vote
1
answer
131
views
What did the Author mean by saying "Bluetooth does not provide native user authentication."
I was reading an article on Bluetooth security (see citation below), and in the introduction the authors writes:
"Bluetooth specifications provide for three basic security
services: -
Authentication:...
0
votes
0
answers
86
views
BLE IoT device as platform backdoor for hackers
I have a IoT device that works with BLE and uses a smartphone as a bridge to connect to a digital platform (cloud).
The communication between the IoT device and the platform is based in PKI.
The IoT ...
- 103
3
votes
1
answer
537
views
Why are some Bluetooth devices susceptible to ping floods and some are not?
Just for fun, I've ping flooded my bluetooth speaker at home using l2ping on Linux and I was unable to connect to it as the pinging continued. I've tried flooding my phone and it seems to have ...
user168683
1
vote
0
answers
150
views
How does BLE secure connection ensure man in the middle protection?
I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker.
In contrast, in secure ...
0
votes
1
answer
129
views
Can sending a hidden Text/SMS messages be considered a security issue?
tl;dr: My Toyota Aygo sends Text/SMS messages through Bluetooth and my mobile phone. These messages are delivered to the recipient, but there is no sign of them in my Messages app.
Should I be ...
- 3,619
1
vote
1
answer
208
views
Bluetooth 5 - is a pass key enough?
So far I understood that from Bluetooth 4.2 onwards the Pass Key method is safer due to pre-shared public keys and a 128-bit encryption key. After this pairing process occurs, is the link between the ...
- 13
2
votes
1
answer
345
views
Bluetooth LE with Secure Connection and static passkey: This is a bad idea, right?
I am currently looking into how to protect a BLE connection from active attacks (man-in-the-middle) if one of the devices neither has a display nor a keyboard.
Lemberg Solutions suggests this:
...
- 135
1
vote
2
answers
391
views
Is Bluetooth on cellphone a reliable protocol for encrypted text transmission?
I'm developing a solution for secure chat over instant messaging, here is the scenario:
I need to encrypt my message then send it on {Whatsapp, telegram, Wechat,...}, I don't trust any software above,...
1
vote
0
answers
78
views
Standards restricting bluetooth/usb access?
AFAIK in most OSes an app is given access to USB and Bluetooth and it's fairly blanket access. I believe maybe iOS now has per app Bluetooth access controls but if you give an app bluetooth access it ...
- 458
2
votes
1
answer
384
views
Is it possible to track by Bluetooth headphones
Is it possible to find bluetooth device if I have MAC of the device.
- 21
3
votes
1
answer
709
views
Security risk of leaving bluetooth on all the time on an Android 10 phone
What are the security risks associated with leaving bluetooth on all the time on a Pixel phone updated to Android 10?
In this question, I am NOT focusing on the risks associated with someone ...
- 109
1
vote
0
answers
446
views
How do I know a USB Bluetooth Adapter is safe to use? [duplicate]
I've found several extremely cheap USB Bluetooth options and, while the reviews say they work, I am skeptical of them because they are so cheap/have no name brand recognition.
Here is the main one I ...
- 11
6
votes
0
answers
70
views
Can a wireless headphone contain malware which can infect an Android device? [duplicate]
I go to conferences and there are often free bluetooth earbuds and headsets given away.
If I pair them with an Android device, is it possible for them to infect the phone with a virus?
I have read ...
- 109
1
vote
0
answers
335
views
How can I check if my Bluetooth devices are vulnerable to a KNOB attack?
On Linux and/or macOS, how can I check if a device is vulnerable to a Key Negotiation of Bluetooth (KNOB) Attack?
And if a device is vulnerable, is there something I can do to mitigate the danger?
- 1,841
1
vote
0
answers
178
views
Bluetooth security [closed]
How secure is it to use Bluetooth handsfree?
Can't someone eavesdrop the signals and listen to the conversation?
Does encryption in Bluetooth secure the information?
Can I use anyother tool ...
- 243
-1
votes
1
answer
109
views
Syncing Bluetooth in a vehicle and access text messages from the phone?
If you connect your Bluetooth to a vehicle for music, can the owner of that vehicle download your text messages without your knowledge or can it download the messages that have been erased?
1
vote
2
answers
336
views
Mobile phone is picking up 13 bluetooth devices and not sure what they are?
I have a particular problem with a potential security breach. I bought a new device today that connects to my phone via Bluetooth. Nothing strange about that.
Surprisingly when I turned Bluetooth on ...
- 1,103
4
votes
2
answers
4k
views
Can neighbour hear my bluetooth headset?
I'd like to buy a wireless bluetooth headset to not disturbing others by my TV sound but I'm wondering how private the transmission will be?
Can a neighbour with a bluetooth headset hear my TV's ...
- 165