Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [bluetooth]

Bluetooth is a technology that allows for wireless communication between hosts.

-1
votes
1answer
59 views

Syncing Bluetooth in a vehicle and access text messages from the phone?

If you connect your Bluetooth to a vehicle for music, can the owner of that vehicle download your text messages without your knowledge or can it download the messages that have been erased?
1
vote
2answers
55 views

Mobile phone is picking up 13 bluetooth devices and not sure what they are?

I have a particular problem with a potential security breach. I bought a new device today that connects to my phone via Bluetooth. Nothing strange about that. Surprisingly when I turned Bluetooth on ...
2
votes
1answer
158 views

Can neighbour hear my bluetooth headset?

I'd like to buy a wireless bluetooth headset to not disturbing others by my TV sound but I'm wondering how private the transmission will be? Can a neighbour with a bluetooth headset hear my TV's ...
0
votes
0answers
42 views

Bluetooth keyboard encryption with Android

I was looking to purchase a Bluetooth keyboard to use with an Android phone. I am looking at these 2 models https://www.amazon.com/dp/B01LS32D52/ref=cm_sw_r_tw_dp_U_x_pZZVCb0QN7CQE https://www....
1
vote
1answer
173 views

How to sniff bluetooth traffic to Android app?

Please bare with me with this introduction to the problem. Unfortunately title might be confusing, but it's hard to came up with proper one - let me show you why. I'm trying to decode WM-Bus (Smart ...
2
votes
1answer
67 views

Can a bluetooth mouse be controlled by another bluetooth mouse?

Is it possible to have bluetooth in my machine being controller or (if not interfered) by another bluetooth mouse in nearby computer? What prevents it? What if they have same pairing code? I'm not ...
0
votes
0answers
40 views

How to test actually implemented bluetooth security level (BR/EDR)

I know that bluetooth supports different security modes and levels (Core Spec Vol. 3 Part C, 5.2). Dependent on these modes and levels, certain encryption and authentication is required. How do I ...
0
votes
2answers
124 views

Bluetooth vs USB Mouse Security

I had a question regarding the use of Wireless mice and security. In general which method of using a wireless mouse is considered more secure, using a mouse with a USB dongle, or using a mouse that ...
1
vote
1answer
106 views

Just Works Bluetooth Low Energy Security

I have been puzzled the past couple days about bluetooth low energy security. My situation: I am looking at what it might take to secure unpaired BLE connections. In some cases, and essentially ...
0
votes
1answer
145 views

Is it possible to intercept Airdrop data transfer be intercepted?

If I am logged into a school WiFi and I airdrop a photo to someone can the school see what I airdrop? Or what I am searching using their WiFi?
2
votes
1answer
111 views

Are there any known exploits against bluetooth mice or keyboards?

Most wireless mice are not bluetooth. There are known exploits that take over wireless mice and use them as a keyboard. Are there known exploits that can remotely inject malware directly over ...
3
votes
2answers
105 views

Proprietary RF Protocol Security

I've just been reading this article on proprietary RF protocols vs Bluetooth and it seems to be suggesting that the security through obscurity gained through a proprietary protocol is advantageous ...
3
votes
2answers
1k views

MAC randomization for Bluetooth?

Companies, governments, etc. can track Bluetooth and WiFi network scans passively by looking at a same MAC address over space and time (Bluetooth/WiFi Identity tracking in public spaces - How to ...
6
votes
1answer
239 views

Can I find out what encryption is used by my Android Bluetooth keyboard?

I've got an Android tablet (Samsung Tab S2) and a Bluetooth keyboard (Celicious Tri BK01). I occasionally use the keyboard to enter my password. Is there any way, in Android, to find out whether the ...
3
votes
1answer
103 views

Should I encrypt Blutooth communication?

I'm making an Android app which needs to safely communicate with PC app over Bluetooth. I'm going to use RFCOMM for that purpose. Since apps will exchange user authentication details, there should be ...
-4
votes
1answer
107 views

Can code be transmitted through computers’ antennas? [closed]

I have an Acer Aspire E15 5-575. I removed its WiFi card, while kept its black and white antennas intact. I did this to avoid being discovered by long or short range wireless transmissions, wanting to ...
3
votes
1answer
189 views

What could MitM'ed U2F do?

Google has now released their "Titan" keys to the general store (albeit via a waitlist). When they first announced their product, Yubico, their chief competitor, decried the use of Bluetooth: ...
2
votes
1answer
453 views

BLE 4.2 LE Secure Connection

I am looking at getting the most secure connection between two BLE devices without an I/O capabilities but I am slightly confused by what is going on. So without I/O capabilities the highest security ...
0
votes
1answer
397 views

Smartphone app as a U2F hardware token via Bluetooth?

Quoting from agl's article from Mar 2018: At the time of writing, all Security Keys are based version one of FIDO’s “Client To Authenticator Protocol” (CTAP1). [...T]he core protocol [can be] ...
2
votes
1answer
146 views

Bluetooth low energy encryption using chacha20-poly1305

The BLE data is encrypted using AES-CCM. the TLS1.3 removed AES-CCM from the cipher-suits due to security issue. My question : why don't they encrypt the BLE using chacha20-poly1205 ? is it because ...
5
votes
1answer
531 views

Can a bluetooth speaker contain malware?

Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
0
votes
1answer
276 views

How can I check if my second hand Apple wireless keyboard contains a keylogger?

I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
3
votes
1answer
2k views

Can I know that my bluetooth speaker has been hacked?

I have a JBL Go bluetooth speaker paired with a Dell laptop running Ubuntu 17.10. I suspect malicious intermittent activity on that speaker, but I am not sure and I am looking for proof or evidence ...
1
vote
1answer
214 views

Does TLS protocol make encryption at L2/L3 layers redundant?

If a pair of endpoints are using TLS protocol for secure data exchanges, does it make the encryption at the network or MAC layers redundant? E.g. if I create a TLS session between two endpoints ...
4
votes
1answer
164 views

Is it risky to use an untrusted keyboard?

Suppose you're buying a new keyboard (say USB-wired, but consider Bluetooth connected as well) from Ebay. Is it risky to use that keyboard in a sense that it could be more than just a keyboard? ...
1
vote
3answers
1k views

Wired VS Wireless Mouse & Keyboard Security

Wired VS Wireless Mouse & Keyboard Security For someone who is trying to maintain the highest level of security, which option proposes the LEAST amount of security flaws? Wired Keyboard & ...
3
votes
1answer
2k views

BLE 5.0 security vs. 4.2

Is there any material improvement/difference in BLE security controls/requirements in BLE 5.0 spec as compared to BLE 4.2 spec? I skimmed through the BLE bits in the huge Bluetooth 5.0 core spec but ...
4
votes
1answer
101 views

Is Apple compromising network security with its default settings, which allow users to provide network credentials to other users with one tap?

This article summarizes the functionality that has been recently added to Apple devices. My colleagues have expressed concerns about this feature eroding network security at the office. My ...
1
vote
1answer
1k views

Random bluetooth pairing requests in public

Lately, whenever I take public transportation my phone is bombarded with bluetooth pairing requests. I have my bluetooth on because I am listening to music with bluetooth headphones, and in Android 8....
1
vote
0answers
74 views

Is there any way I can 'securely' use Bluetooth on non BlueBorne fixed Android and/or notice potential attacker?

I have Sony Xperia XA1 Android 7, and the security patch is from August, so obviously Sony doesn't consider BlueBorne any serious danger. However, I'm worried my device can be hacked. I'm using ...
5
votes
0answers
156 views

How do I protect my old devices against BlueBorne? [duplicate]

I have a bunch of Android devices for which there either is no patch to protect them against the BlueBorne exploit or I cannot install a patch without losing all the data. The most obvious thing ...
1
vote
1answer
152 views

Is there a security risk using bluetooth computer speakers?

I need to get new computer speakers/subwoofer and bluetooth speakers sound great since they would decrease the amount of wires around my desk. Is there a security risk having bluetooth enabled all the ...
1
vote
1answer
189 views

So is the phone without BLE vulnerable before BlueBorne or not?

It is already known that BlueBorne poses no danger to Android-devices using Bluetooth Low Energy. For other cases, there were updates that were included in the September Android Security Bulletin. ...
1
vote
0answers
65 views

Why is Bluetooth Using Cellular Data when it is turned off?

I reset the Cellular data statistics on my iPhone 6 yesterday and went to Settings > Cellular > System Services. I noticed that Bluetooth had used 3.3 KB of Cellular data. A few hours later, I noticed ...
5
votes
2answers
3k views

What is BlueBorne and how to protect myself?

Since this is a hot-topic this week, I'm looking for a canonical answer: What is the BlueBorne Bluetooth vulnerability? How to protect myself?
2
votes
1answer
416 views

Can a compromised car stereo spread vulnerability to a connected phone via bluetooth

I have an older cheapo JVC car stereo with bluetooth. I used an app to check for Blueborne vulnerability ("Blueborne Vulnerability Scanner," no longer available) which said the stereo was high risk. ...
18
votes
2answers
1k views

How will we stop BlueBorne on older devices?

The BlueBorne vulnerability was announced on September 12, 2017. It's a family of attacks against several implementations of the Bluetooth protocol that enable full compromises of various Bluetooth ...
4
votes
1answer
1k views

Is a no-pairing, no-password Bluetooth RFCOMM connection secure?

I have programmatically established a Bluetooth RFCOMM connection between a Desktop PC (client) and a Raspberry Pi (server, Bluetooth 4.1). There is no request for password and no request for pairing ...
1
vote
1answer
130 views

Bluetooth tethering and WiFi hot spot

I am using bluetooth tethering through my one android phone to another android phone and i am using free VPN app on my second android phone which is connected by bluetooth tethering to open Facebook ...
5
votes
1answer
187 views

Does a “Barge-in Attack” exist for unencrypted Bluetooth Low Energy connections?

Does what I'm calling a "barge-in attack" exist for Bluetooth Low Energy? This is a type of Man-in-the-Middle attack, I guess, but unlike in most discourse on BLE security, the attacker does not ...
2
votes
0answers
76 views

How feasible would forced unpairing of paired bluetooth devices be?

What are the possible ways an attacker could force two paired devices to unpair? What it be any different for classic bluetooth and bluetooth smart?
1
vote
0answers
87 views

How possible would it be for an attacker to sniff the pairing process in Classic Bluetooth?

Classic Bluetooth protects its connection by keeping the pairing process secret. How does Classic Bluetooth prevent the keys from being sniffed during the pairing process? On what channel does the ...
1
vote
1answer
64 views

What can an attacker know with knowledge of a device's BD_ADDR?

Lots of articles mention the importance of keeping the BD_ADDR secret as knowing it can allow an attacker to do stuff. What can an attacker really do?(Assuming that he has knowledge of the UAP + LAP ...
2
votes
1answer
66 views

Is it safe to buy smart home products from second hand?

I wonder if it is safe to buy a smart home product (e.g. Eve Thermo). Because the code on the device, which is needed for pairing, is not changeable. Is it possible that the first owner is still able ...
0
votes
1answer
64 views

Securely determine my smart phone's position (in front of the door)

I am theoretically thinking about automatically unlocking the house door via smart phone. Without the need to fiddle with the smart phone (opening an app, pressing a button). There is a commercially ...
2
votes
2answers
147 views

Protecting QR Code, Eddystone and NFC against spoofing

Let's say I have the following scenario. I have QR Code, Eddystone and/or NFC which contains IP address, with which, my client side application communicates. Let's say this IP address can vary from ...
-1
votes
1answer
2k views

Where can I use BLE/NFC U2F device?

Can BLE U2F security keys be used on Chrome for macOS/Windows for any site supporting U2F USB keys as a second factor? What sites/apps can I use NFC/BLE U2F keys for on NFC-(and BLE-)supporting ...
2
votes
1answer
413 views

Is Bluetooth a secure protocol?

I constantly get bluetooth patches in Windows 10. However I see no new features, bluetooth is just bluetooth, how many possible patches do they need to push to reach a mature protocol. There's no UI, ...
1
vote
0answers
37 views

Implementing user access restriction Bluetooth LE

I have been working on a system that needs simple access restriction to a bluetooth module. I was going to use a set pin code, but it turns out that Bt LE no longer uses pairing pins. What would be ...
2
votes
1answer
358 views

How secure is BLE for a door lock

I am interested in setting up a trigger that can unlock door locks using an iPhone. The lock and unlock mechanism is not an issue as I have an API end point for this once authorized it is more an ...