Questions tagged [bluetooth]
Bluetooth is a technology that allows for wireless communication between hosts.
0
votes
0answers
25 views
Ipod classic + kokkia Bluetooth transmitter paired to earbuds
If I use an ipod classic 6th or 7th generation and the following transmitter:
http://store.kokkia.com/...
0
votes
0answers
37 views
Disable Bluetooth but let user re-enable it? [migrated]
Is is possible to disable Bluetooth by default (with a GPO), but give local users the rights to re-enable it? I'm talking about a scenario with domain joined Windows 10 laptops and users without admin ...
1
vote
1answer
71 views
How to sniff bluetooth traffic to Android app?
Please bare with me with this introduction to the problem. Unfortunately title might be confusing, but it's hard to came up with proper one - let me show you why.
I'm trying to decode WM-Bus (Smart ...
2
votes
1answer
52 views
Can a bluetooth mouse be controlled by another bluetooth mouse?
Is it possible to have bluetooth in my machine being controller or (if not interfered) by another bluetooth mouse in nearby computer?
What prevents it? What if they have same pairing code?
I'm not ...
0
votes
0answers
27 views
How to test actually implemented bluetooth security level (BR/EDR)
I know that bluetooth supports different security modes and levels (Core Spec Vol. 3 Part C, 5.2). Dependent on these modes and levels, certain encryption and authentication is required.
How do I ...
0
votes
0answers
15 views
Connect forcely to bluetooth speakers [migrated]
How can i connect my Bluetooth device to Bluetooth speakers that are already connected to any other Bluetooth device?
Is there anyway to do it? Is it even possible?
0
votes
2answers
99 views
Bluetooth vs USB Mouse Security
I had a question regarding the use of Wireless mice and security. In general which method of using a wireless mouse is considered more secure, using a mouse with a USB dongle, or using a mouse that ...
1
vote
1answer
77 views
Just Works Bluetooth Low Energy Security
I have been puzzled the past couple days about bluetooth low energy security.
My situation:
I am looking at what it might take to secure unpaired BLE connections.
In some cases, and essentially ...
0
votes
1answer
102 views
Is it possible to intercept Airdrop data transfer be intercepted?
If I am logged into a school WiFi and I airdrop a photo to someone can the school see what I airdrop? Or what I am searching using their WiFi?
2
votes
1answer
107 views
Are there any known exploits against bluetooth mice or keyboards?
Most wireless mice are not bluetooth. There are known exploits that take over wireless mice and use them as a keyboard.
Are there known exploits that can remotely inject malware directly over ...
3
votes
2answers
96 views
Proprietary RF Protocol Security
I've just been reading this article on proprietary RF protocols vs Bluetooth and it seems to be suggesting that the security through obscurity gained through a proprietary protocol is advantageous ...
3
votes
2answers
467 views
MAC randomization for Bluetooth?
Companies, governments, etc. can track Bluetooth and WiFi network scans passively by looking at a same MAC address over space and time (Bluetooth/WiFi Identity tracking in public spaces - How to ...
6
votes
1answer
170 views
Can I find out what encryption is used by my Android Bluetooth keyboard?
I've got an Android tablet (Samsung Tab S2) and a Bluetooth keyboard (Celicious Tri BK01). I occasionally use the keyboard to enter my password.
Is there any way, in Android, to find out whether the ...
3
votes
1answer
95 views
Should I encrypt Blutooth communication?
I'm making an Android app which needs to safely communicate with PC app over Bluetooth. I'm going to use RFCOMM for that purpose. Since apps will exchange user authentication details, there should be ...
-4
votes
1answer
107 views
Can code be transmitted through computers’ antennas? [closed]
I have an Acer Aspire E15 5-575. I removed its WiFi card, while kept its black and white antennas intact. I did this to avoid being discovered by long or short range wireless transmissions, wanting to ...
3
votes
1answer
171 views
What could MitM'ed U2F do?
Google has now released their "Titan" keys to the general store (albeit via a waitlist). When they first announced their product, Yubico, their chief competitor, decried the use of Bluetooth:
...
2
votes
1answer
374 views
BLE 4.2 LE Secure Connection
I am looking at getting the most secure connection between two BLE devices without an I/O capabilities but I am slightly confused by what is going on.
So without I/O capabilities the highest security ...
0
votes
1answer
318 views
Smartphone app as a U2F hardware token via Bluetooth?
Quoting from agl's article from Mar 2018:
At the time of writing, all Security Keys are based version one of FIDO’s “Client To Authenticator Protocol” (CTAP1). [...T]he core protocol [can be] ...
2
votes
1answer
130 views
Bluetooth low energy encryption using chacha20-poly1305
The BLE data is encrypted using AES-CCM. the TLS1.3 removed AES-CCM from the cipher-suits due to security issue.
My question :
why don't they encrypt the BLE using chacha20-poly1205 ? is it because ...
5
votes
1answer
418 views
Can a bluetooth speaker contain malware?
Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
0
votes
0answers
102 views
Non-invasively forcing reauthentication in Bluetooth 2.1
Is it possible for an unauthenticated bystander to force reassociation/reauthentication of a pair of Bluetooth 2.1 devices in a manner similar to IEEE 802.11i deauths? Bluetooth 2.1 (BR/EDR) uses ...
0
votes
1answer
262 views
How can I check if my second hand Apple wireless keyboard contains a keylogger?
I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
0
votes
0answers
161 views
Bluetooth Link key and clear textdata
I am auditing a embedded device which is connected to my mobile using an application and the communication is done using bluetooth alone, using the android phone's btsnoop_hci trick i am able to sniff ...
3
votes
1answer
2k views
Can I know that my bluetooth speaker has been hacked?
I have a JBL Go bluetooth speaker paired with a Dell laptop running Ubuntu 17.10.
I suspect malicious intermittent activity on that speaker, but I am not sure and I am looking for proof or evidence ...
1
vote
1answer
190 views
Does TLS protocol make encryption at L2/L3 layers redundant?
If a pair of endpoints are using TLS protocol for secure data exchanges, does it make the encryption at the network or MAC layers redundant?
E.g. if I create a TLS session between two endpoints ...
4
votes
1answer
157 views
Is it risky to use an untrusted keyboard?
Suppose you're buying a new keyboard (say USB-wired, but consider Bluetooth connected as well) from Ebay. Is it risky to use that keyboard in a sense that it could be more than just a keyboard?
...
1
vote
3answers
1k views
Wired VS Wireless Mouse & Keyboard Security
Wired VS Wireless Mouse & Keyboard Security
For someone who is trying to maintain the highest level of security, which option proposes the LEAST amount of security flaws?
Wired Keyboard & ...
2
votes
1answer
1k views
BLE 5.0 security vs. 4.2
Is there any material improvement/difference in BLE security controls/requirements in BLE 5.0 spec as compared to BLE 4.2 spec?
I skimmed through the BLE bits in the huge Bluetooth 5.0 core spec but ...
4
votes
1answer
100 views
Is Apple compromising network security with its default settings, which allow users to provide network credentials to other users with one tap?
This article summarizes the functionality that has been recently added to Apple devices.
My colleagues have expressed concerns about this feature eroding network security at the office.
My ...
1
vote
1answer
1k views
Random bluetooth pairing requests in public
Lately, whenever I take public transportation my phone is bombarded with bluetooth pairing requests. I have my bluetooth on because I am listening to music with bluetooth headphones, and in Android 8....
1
vote
0answers
71 views
Is there any way I can 'securely' use Bluetooth on non BlueBorne fixed Android and/or notice potential attacker?
I have Sony Xperia XA1 Android 7, and the security patch is from August, so obviously Sony doesn't consider BlueBorne any serious danger.
However, I'm worried my device can be hacked. I'm using ...
5
votes
0answers
155 views
How do I protect my old devices against BlueBorne? [duplicate]
I have a bunch of Android devices for which there either is no patch to protect them against the BlueBorne exploit or I cannot install a patch without losing all the data.
The most obvious thing ...
1
vote
1answer
150 views
Is there a security risk using bluetooth computer speakers?
I need to get new computer speakers/subwoofer and bluetooth speakers sound great since they would decrease the amount of wires around my desk. Is there a security risk having bluetooth enabled all the ...
1
vote
1answer
181 views
So is the phone without BLE vulnerable before BlueBorne or not?
It is already known that BlueBorne poses no danger to Android-devices
using Bluetooth Low Energy. For other cases, there were updates that
were included in the September Android Security Bulletin.
...
1
vote
0answers
59 views
Why is Bluetooth Using Cellular Data when it is turned off?
I reset the Cellular data statistics on my iPhone 6 yesterday and went to Settings > Cellular > System Services. I noticed that Bluetooth had used 3.3 KB of Cellular data. A few hours later, I noticed ...
6
votes
2answers
3k views
What is BlueBorne and how to protect myself?
Since this is a hot-topic this week, I'm looking for a canonical answer:
What is the BlueBorne Bluetooth vulnerability?
How to protect myself?
2
votes
1answer
337 views
Can a compromised car stereo spread vulnerability to a connected phone via bluetooth
I have an older cheapo JVC car stereo with bluetooth. The Blueborne Vulnerability Scanner says it is high risk. It is very unlikely to get any kind of software update to protect against Blueborne, ...
19
votes
2answers
1k views
How will we stop BlueBorne on older devices?
The BlueBorne vulnerability was announced on September 12, 2017. It's a family of attacks against several implementations of the Bluetooth protocol that enable full compromises of various Bluetooth ...
4
votes
1answer
1k views
Is a no-pairing, no-password Bluetooth RFCOMM connection secure?
I have programmatically established a Bluetooth RFCOMM connection between a Desktop PC (client) and a Raspberry Pi (server, Bluetooth 4.1). There is no request for password and no request for pairing ...
1
vote
1answer
118 views
Bluetooth tethering and WiFi hot spot
I am using bluetooth tethering through my one android phone to another android phone and i am using free VPN app on my second android phone which is connected by bluetooth tethering to open Facebook ...
5
votes
1answer
168 views
Does a “Barge-in Attack” exist for unencrypted Bluetooth Low Energy connections?
Does what I'm calling a "barge-in attack" exist for Bluetooth Low Energy? This is a type of Man-in-the-Middle attack, I guess, but unlike in most discourse on BLE security, the attacker does not ...
2
votes
0answers
76 views
How feasible would forced unpairing of paired bluetooth devices be?
What are the possible ways an attacker could force two paired devices to unpair? What it be any different for classic bluetooth and bluetooth smart?
1
vote
0answers
83 views
How possible would it be for an attacker to sniff the pairing process in Classic Bluetooth?
Classic Bluetooth protects its connection by keeping the pairing process secret. How does Classic Bluetooth prevent the keys from being sniffed during the pairing process? On what channel does the ...
1
vote
1answer
59 views
What can an attacker know with knowledge of a device's BD_ADDR?
Lots of articles mention the importance of keeping the BD_ADDR secret as knowing it can allow an attacker to do stuff. What can an attacker really do?(Assuming that he has knowledge of the UAP + LAP ...
2
votes
1answer
65 views
Is it safe to buy smart home products from second hand?
I wonder if it is safe to buy a smart home product (e.g. Eve Thermo). Because the code on the device, which is needed for pairing, is not changeable. Is it possible that the first owner is still able ...
0
votes
1answer
64 views
Securely determine my smart phone's position (in front of the door)
I am theoretically thinking about automatically unlocking the house door via smart phone. Without the need to fiddle with the smart phone (opening an app, pressing a button).
There is a commercially ...
-1
votes
0answers
35 views
Is Bluetooth secure for communication between two pre-paired devices? [duplicate]
I'm planning on using Bluetooth as part of an embedded system for an experimental medical device. As part of this system, I need to have wireless communication between the two separate parts of the ...
2
votes
2answers
142 views
Protecting QR Code, Eddystone and NFC against spoofing
Let's say I have the following scenario. I have QR Code, Eddystone and/or NFC which contains IP address, with which, my client side application communicates. Let's say this IP address can vary from ...
-1
votes
1answer
2k views
Where can I use BLE/NFC U2F device?
Can BLE U2F security keys be used on Chrome for macOS/Windows for any site supporting U2F USB keys as a second factor?
What sites/apps can I use NFC/BLE U2F keys for on NFC-(and BLE-)supporting ...
2
votes
1answer
395 views
Is Bluetooth a secure protocol?
I constantly get bluetooth patches in Windows 10.
However I see no new features, bluetooth is just bluetooth, how many possible patches do they need to push to reach a mature protocol. There's no UI, ...
