Questions tagged [bluetooth]

Bluetooth is a technology that allows for wireless communication between hosts.

Filter by
Sorted by
Tagged with
1 vote
0 answers
66 views

Why was CVE-2022-20411 (Bluetooth Remote Code Execution) not detected by Android's BoundSanitizer?

CVE-2022-20411 enabled remote code execution over Bluetooth on Android. It was fixed in December 2022. But why was it not detected by Android's BoundsSanitizer? Its purpose is to detect and prevent ...
  • 111
2 votes
1 answer
234 views

Do wireless (2.4 ghz) headphones use encryption?

I've noticed that there are two types of wireless headphones / headsets / earbuds on the market – bluetooth and 2.4 GHz wireless (via proprietary dongles). Good example of headset that has both – ...
  • 131
0 votes
0 answers
89 views

What bluetooth dongle works with spooftooph?

I have been looking to do bluetooth hacking but my internal bluetooth adapters are not working on either of my laptops with spooftooph. I was seeing if I could get a used MultiBlue dongle but no one ...
  • 1
2 votes
2 answers
110 views

Do bluetooth accessories assure personal privacy?

I want to buy a pair of Bluetooth earbuds like these for use with my phone: https://www.amazon.com/Wireless-Bluetooth-Canceling-Headphones-Earphones/dp/B09P38XS9M?th=1 I want to know if devices like ...
  • 23
0 votes
1 answer
101 views

Is there something I'm missing about Bluetooth security?

I recently bought a Volcano Hybrid from Storz & Bickel. It has Bluetooth functionality, and indeed requires it to change certain important settings, such as the brightness of the display (which is ...
  • 1
0 votes
0 answers
107 views

Can a Bluetooth device hack a phone it used to be paired to if the device was removed from the phone, but the device was not reset/cleared?

If a Bluetooth device, like a toy, smart toothbrush, or headphones etc. is paired to a phone or computer, and the Bluetooth device is sold/lost without resetting the device or any Bluetooth data on it,...
1 vote
1 answer
69 views

How is it possible to simply a decode Bluetooth communications from a medical device?

Excuse the naive question but I'm trying to understand a bit about security in home health and medial devices and a recent report about how home Covid test results can be altered has left me a bit ...
  • 333
2 votes
1 answer
111 views

Are there ways to mitigate the risks of using a Bluetooth/wireless keyboard when the device connected is next to it?

Normally, I avoid using any Bluetooth or wireless devices, especially HIDs, but for a project I am working on the only keyboards that will fit the size are Bluetooth and wireless keyboards, so I am ...
0 votes
1 answer
98 views

How does HMAC fit in BLE?

In BLE there is events like authentication, pairing, bonding, exchange of LTK to secure a link, etc... How does HMAC fit in BLE? I know that HMAC is used to ensure the integrity of a message so does ...
  • 101
0 votes
1 answer
124 views

Security of Bluetooth to stream audio in a highrise apartment building, relative to using Wi-Fi for laptop access to router/modem

My question is about the general security of using Bluetooth in a highrise apartment building. I am not a software developer, a network administrator, nor do I work in IT. When needed, I "code&...
3 votes
1 answer
404 views

How secure is the wireless Bluetooth data stream going from my computer to my headphones?

Let's say I have bought a USB-to-Bluetooth dongle and "paired" it with my wireless Bluetooth headphones which I purchased by accident, thinking that they were wired. One of the biggest ...
2 votes
1 answer
173 views

Does Windows use Bluetooth Authenticated pairing with encryption automatically?

Does Windows use Bluetooth Authenticated pairing with encryption automatically when you connect Bluetooth devices like earbuds to it? Is that Level 4? If it's not automatic, how do I get Windows to do ...
0 votes
1 answer
108 views

Can a wifi Access Point be reconfigured to receive other radio signals?

Say we have a remote transmitter that is not connected to a wifi router (neither wirelessly nor by cable), but which transmits information using electromagnetic waves. Examples include walkie-talkies, ...
  • 1
1 vote
0 answers
88 views

Why does Bluetooth pairing require initiation from both devices? [closed]

I recently wanted to transfer some data from my smartphone to my laptop via bluetooth. This requires pairing the devices first. In the bluetooth options I could see all the other bluetooth devices in ...
  • 123
0 votes
0 answers
104 views

I Received a strange Bluetooth Connection request from one of my own computers on my network

I wish I'd taken a screenshot of the connection request, but it basically was asking to connect to my work laptop and I could either accept or reject the request. The requesting computer is using an ...
  • 111
0 votes
0 answers
23 views

What do unkown MAC addresses mean in this context? [duplicate]

I've recently begun learning about Cyber Security related to Bluetooth. I toggled the "Show Bluetooth devices without names" (or something similar) in my phone in developer mode and went to ...
  • 1
0 votes
0 answers
90 views

Options for Integrating or developing a physical security solution (physical access control via in-house mobile apps [NFC/Bluetooh])

Our team is looking to either integrate or develop a physical security solution for a rather large campus. Requirements: Ability to either integrate (with reader/electronic lock hardware) from our ...
1 vote
1 answer
530 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
  • 21
3 votes
1 answer
156 views

How does the Apple/Google Exposure Notification system prevent infected users from being identified?

Under Apple and Google's contact tracing scheme, Alice's device generates a daily random value (termed a Temporary Exposure Key or TEK in the Cryptography Specification). Every 10 minutes, a Rolling ...
  • 131
1 vote
0 answers
84 views

Bluetooth module and an Android app [closed]

I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data. how can I make sure my system only connects to phones that activated bluetooth through the app? ...
1 vote
0 answers
289 views

SSL Handshake in Android via Bluetooth Classic [closed]

I am working on implementing an Android App (client) which will be connected to Raspberry Pi (server) via Bluetooth Classic. To make data transfer securely, I want to implement SSL encryption between ...
1 vote
1 answer
284 views

Can Bluetooth earphone leak data between phones?

I have a Bluetooth earphone connects to both iPhone and android. I forgot to switch off the connection of android when using iPhone. So I am wondering if the sound of iPhone or even the iPhone data ...
4 votes
1 answer
1k views

Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?

There are some threads talking about Bluetooth keyboard security. But I have a different concern. I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a ...
  • 143
3 votes
1 answer
127 views

Freshness Protection in BL and BLE

I recently found this document: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf , Guide to Bluetooth Security from NIST. Unfortunately, there is nothing described w.r.t....
  • 31
1 vote
1 answer
1k views

How do I add application level encryption to an Android BLE connection?

The Android Bluetooth Low Energy documentation recommends adding application layer encryption on-top of the BLE connection if the exchanged data is sensitive: Caution: When a user pairs their device ...
-1 votes
1 answer
93 views

Cyber Security in Hardware Products? [closed]

I am currently working on a product similar to smart locks that work with BLE identification. I can handle the hardware of the product very well (mechanics / electronics / embedded software), however, ...
  • 9
3 votes
0 answers
109 views

Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?

Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
  • 31
0 votes
1 answer
765 views

Can people hack your iPhone Via Bluetooth if you leave it on?

I live in an apartment complex with lots of people, and oftentimes I would be able to see Bluetooth devices that do not belong to me on my iPhone or MacBook when I search for my Bluetooth device. ...
1 vote
1 answer
602 views

Can Bluetooth "headphones" be malicious?

I received a parcel from Amazon which I did not order, addressed to me. It contained Bluetooth earphones. It may just be part of a brushing scam, but it's got me curious. So my question is.. Could a ...
  • 11
1 vote
1 answer
1k views

Apple bluetooth keyboard insecure connection?

From time to time, I see this dialog box pop up on my MacBook Pro screen. It typically happens as the computer wakes up from sleep. Magic keyboard is trying to connect using an unsecured Bluetooth ...
  • 423
0 votes
0 answers
40 views

Anonimity of Bluetooth tokens [duplicate]

In the context of contact tracing, I have a privacy question. I have read a few (and "few" is already a bad thing) articles about Bluetooth contact tracing, especially in the context of the Sars-Cov2 ...
-1 votes
1 answer
123 views

Bluetooth vulnerability on a Raspberry PI running Raspian

Is it possible for someone to exploit a Raspberry PI running Raspian through bluetooth just by having the bluetooth enabled?
1 vote
1 answer
131 views

What did the Author mean by saying "Bluetooth does not provide native user authentication."

I was reading an article on Bluetooth security (see citation below), and in the introduction the authors writes: "Bluetooth specifications provide for three basic security services: - Authentication:...
0 votes
0 answers
86 views

BLE IoT device as platform backdoor for hackers

I have a IoT device that works with BLE and uses a smartphone as a bridge to connect to a digital platform (cloud). The communication between the IoT device and the platform is based in PKI. The IoT ...
3 votes
1 answer
537 views

Why are some Bluetooth devices susceptible to ping floods and some are not?

Just for fun, I've ping flooded my bluetooth speaker at home using l2ping on Linux and I was unable to connect to it as the pinging continued. I've tried flooding my phone and it seems to have ...
user avatar
1 vote
0 answers
150 views

How does BLE secure connection ensure man in the middle protection?

I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker. In contrast, in secure ...
0 votes
1 answer
129 views

Can sending a hidden Text/SMS messages be considered a security issue?

tl;dr: My Toyota Aygo sends Text/SMS messages through Bluetooth and my mobile phone. These messages are delivered to the recipient, but there is no sign of them in my Messages app. Should I be ...
  • 3,619
1 vote
1 answer
208 views

Bluetooth 5 - is a pass key enough?

So far I understood that from Bluetooth 4.2 onwards the Pass Key method is safer due to pre-shared public keys and a 128-bit encryption key. After this pairing process occurs, is the link between the ...
2 votes
1 answer
345 views

Bluetooth LE with Secure Connection and static passkey: This is a bad idea, right?

I am currently looking into how to protect a BLE connection from active attacks (man-in-the-middle) if one of the devices neither has a display nor a keyboard. Lemberg Solutions suggests this: ...
  • 135
1 vote
2 answers
391 views

Is Bluetooth on cellphone a reliable protocol for encrypted text transmission?

I'm developing a solution for secure chat over instant messaging, here is the scenario: I need to encrypt my message then send it on {Whatsapp, telegram, Wechat,...}, I don't trust any software above,...
1 vote
0 answers
78 views

Standards restricting bluetooth/usb access?

AFAIK in most OSes an app is given access to USB and Bluetooth and it's fairly blanket access. I believe maybe iOS now has per app Bluetooth access controls but if you give an app bluetooth access it ...
  • 458
2 votes
1 answer
384 views

Is it possible to track by Bluetooth headphones

Is it possible to find bluetooth device if I have MAC of the device.
  • 21
3 votes
1 answer
709 views

Security risk of leaving bluetooth on all the time on an Android 10 phone

What are the security risks associated with leaving bluetooth on all the time on a Pixel phone updated to Android 10? In this question, I am NOT focusing on the risks associated with someone ...
  • 109
1 vote
0 answers
446 views

How do I know a USB Bluetooth Adapter is safe to use? [duplicate]

I've found several extremely cheap USB Bluetooth options and, while the reviews say they work, I am skeptical of them because they are so cheap/have no name brand recognition. Here is the main one I ...
6 votes
0 answers
70 views

Can a wireless headphone contain malware which can infect an Android device? [duplicate]

I go to conferences and there are often free bluetooth earbuds and headsets given away. If I pair them with an Android device, is it possible for them to infect the phone with a virus? I have read ...
  • 109
1 vote
0 answers
335 views

How can I check if my Bluetooth devices are vulnerable to a KNOB attack?

On Linux and/or macOS, how can I check if a device is vulnerable to a Key Negotiation of Bluetooth (KNOB) Attack? And if a device is vulnerable, is there something I can do to mitigate the danger?
  • 1,841
1 vote
0 answers
178 views

Bluetooth security [closed]

How secure is it to use Bluetooth handsfree? Can't someone eavesdrop the signals and listen to the conversation? Does encryption in Bluetooth secure the information? Can I use anyother tool ...
-1 votes
1 answer
109 views

Syncing Bluetooth in a vehicle and access text messages from the phone?

If you connect your Bluetooth to a vehicle for music, can the owner of that vehicle download your text messages without your knowledge or can it download the messages that have been erased?
1 vote
2 answers
336 views

Mobile phone is picking up 13 bluetooth devices and not sure what they are?

I have a particular problem with a potential security breach. I bought a new device today that connects to my phone via Bluetooth. Nothing strange about that. Surprisingly when I turned Bluetooth on ...
  • 1,103
4 votes
2 answers
4k views

Can neighbour hear my bluetooth headset?

I'd like to buy a wireless bluetooth headset to not disturbing others by my TV sound but I'm wondering how private the transmission will be? Can a neighbour with a bluetooth headset hear my TV's ...
  • 165