Questions tagged [bluetooth]
Bluetooth is a technology that allows for wireless communication between hosts.
150
questions
0
votes
1answer
115 views
Is Bluetooth low energy (BLE) still secure?
Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
1
vote
0answers
62 views
How does the Apple/Google Exposure Notification system prevent infected users from being identified?
Under Apple and Google's contact tracing scheme, Alice's device generates a daily random value (termed a Temporary Exposure Key or TEK in the Cryptography Specification). Every 10 minutes, a Rolling ...
1
vote
0answers
32 views
Bluetooth module and an Android app [closed]
I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data.
how can I make sure my system only connects to phones that activated bluetooth through the app?
...
1
vote
0answers
62 views
SSL Handshake in Android via Bluetooth Classic [closed]
I am working on implementing an Android App (client) which will be connected to Raspberry Pi (server) via Bluetooth Classic.
To make data transfer securely, I want to implement SSL encryption between ...
1
vote
1answer
80 views
Can Bluetooth earphone leak data between phones?
I have a Bluetooth earphone connects to both iPhone and android. I forgot to switch off the connection of android when using iPhone. So I am wondering if the sound of iPhone or even the iPhone data ...
3
votes
1answer
149 views
Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?
There are some threads talking about Bluetooth keyboard security. But I have a different concern.
I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a ...
2
votes
1answer
67 views
Freshness Protection in BL and BLE
I recently found this document: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf , Guide to Bluetooth Security from NIST.
Unfortunately, there is nothing described w.r.t....
0
votes
0answers
39 views
Fixing BLE Passkey Entry with SRP
First post, not a crypto expert. :)
TLDR
Is it wise to use SRP to implement app-level "passkey entry" pairing in Bluetooth LE? There are known issues with using fixed passkeys in BLE, even ...
1
vote
1answer
293 views
How do I add application level encryption to an Android BLE connection?
The Android Bluetooth Low Energy documentation recommends adding application layer encryption on-top of the BLE connection if the exchanged data is sensitive:
Caution: When a user pairs their device ...
0
votes
0answers
51 views
Listen to Bluetooth RFCOMM communication between two devices
This is about a old Bluetooth device, so no Bluetooth Low Energy.
I have the link key and MAC address of the slave.
How can I listen to the RFCOMM between slave and master so I can reverse engineer or ...
0
votes
0answers
29 views
What advantage does Pairing using Legacy Pairing (BLE 4.0,4.1 devices) give me over a simple connection between 2 devices?
BLE 4.2 uses something called LESC (LE Secure Connection) for significantly enhancing the link encryption between 2 devices (using public private key pair model). But prior to that the way devices ...
-1
votes
1answer
55 views
Cyber Security in Hardware Products? [closed]
I am currently working on a product similar to smart locks that work with BLE identification. I can handle the hardware of the product very well (mechanics / electronics / embedded software), however, ...
3
votes
0answers
65 views
Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?
Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
0
votes
1answer
222 views
Can people hack your iPhone Via Bluetooth if you leave it on?
I live in an apartment complex with lots of people, and oftentimes I would be able to see Bluetooth devices that do not belong to me on my iPhone or MacBook when I search for my Bluetooth device.
...
1
vote
1answer
155 views
Can Bluetooth “headphones” be malicious?
I received a parcel from Amazon which I did not order, addressed to me. It contained Bluetooth earphones. It may just be part of a brushing scam, but it's got me curious.
So my question is.. Could a ...
1
vote
1answer
373 views
Apple bluetooth keyboard insecure connection?
From time to time, I see this dialog box pop up on my MacBook Pro screen. It typically happens as the computer wakes up from sleep.
Magic keyboard is trying to connect using an unsecured Bluetooth ...
0
votes
0answers
38 views
Anonimity of Bluetooth tokens [duplicate]
In the context of contact tracing, I have a privacy question.
I have read a few (and "few" is already a bad thing) articles about Bluetooth contact tracing, especially in the context of the Sars-Cov2 ...
0
votes
0answers
178 views
BLE pairing method with Passkey entry - is it possible to sniff passkey value?
I have my custom made Android app which is connecting to my BLE controller. I want to prove that BLE is secured from passive eavesdropping. I have Adafruit Bluefruit BLE Sniffer and Wireshark. I can ...
-1
votes
1answer
67 views
Bluetooth vulnerability on a Raspberry PI running Raspian
Is it possible for someone to exploit a Raspberry PI running Raspian through bluetooth just by having the bluetooth enabled?
1
vote
1answer
72 views
What did the Author mean by saying “Bluetooth does not provide native user authentication.”
I was reading an article on Bluetooth security (see citation below), and in the introduction the authors writes:
"Bluetooth specifications provide for three basic security
services: -
Authentication:...
0
votes
0answers
40 views
BLE IoT device as platform backdoor for hackers
I have a IoT device that works with BLE and uses a smartphone as a bridge to connect to a digital platform (cloud).
The communication between the IoT device and the platform is based in PKI.
The IoT ...
3
votes
1answer
152 views
Why are some Bluetooth devices susceptible to ping floods and some are not?
Just for fun, I've ping flooded my bluetooth speaker at home using l2ping on Linux and I was unable to connect to it as the pinging continued. I've tried flooding my phone and it seems to have ...
1
vote
0answers
47 views
How does BLE secure connection ensure man in the middle protection?
I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker.
In contrast, in secure ...
0
votes
1answer
69 views
Can sending a hidden Text/SMS messages be considered a security issue?
tl;dr: My Toyota Aygo sends Text/SMS messages through Bluetooth and my mobile phone. These messages are delivered to the recipient, but there is no sign of them in my Messages app.
Should I be ...
1
vote
1answer
68 views
Bluetooth 5 - is a pass key enough?
So far I understood that from Bluetooth 4.2 onwards the Pass Key method is safer due to pre-shared public keys and a 128-bit encryption key. After this pairing process occurs, is the link between the ...
2
votes
0answers
117 views
Bluetooth LE with Secure Connection and static passkey: This is a bad idea, right?
I am currently looking into how to protect a BLE connection from active attacks (man-in-the-middle) if one of the devices neither has a display nor a keyboard.
Lemberg Solutions suggests this:
...
1
vote
2answers
179 views
Is Bluetooth on cellphone a reliable protocol for encrypted text transmission?
I'm developing a solution for secure chat over instant messaging, here is the scenario:
I need to encrypt my message then send it on {Whatsapp, telegram, Wechat,...}, I don't trust any software above,...
1
vote
0answers
110 views
Where are the drivers stored on usb receivers? [closed]
I am wondering where the firmware / driver is stored on these devices? If it cannot be used as a storage device, how could it possibly store any firmware for itself?
How could I access these "files"? ...
1
vote
0answers
35 views
Standards restricting bluetooth/usb access?
AFAIK in most OSes an app is given access to USB and Bluetooth and it's fairly blanket access. I believe maybe iOS now has per app Bluetooth access controls but if you give an app bluetooth access it ...
2
votes
1answer
130 views
Is it possible to track by Bluetooth headphones
Is it possible to find bluetooth device if I have MAC of the device.
3
votes
1answer
486 views
Security risk of leaving bluetooth on all the time on an Android 10 phone
What are the security risks associated with leaving bluetooth on all the time on a Pixel phone updated to Android 10?
In this question, I am NOT focusing on the risks associated with someone ...
1
vote
0answers
138 views
How do I know a USB Bluetooth Adapter is safe to use? [duplicate]
I've found several extremely cheap USB Bluetooth options and, while the reviews say they work, I am skeptical of them because they are so cheap/have no name brand recognition.
Here is the main one I ...
6
votes
0answers
68 views
Can a wireless headphone contain malware which can infect an Android device? [duplicate]
I go to conferences and there are often free bluetooth earbuds and headsets given away.
If I pair them with an Android device, is it possible for them to infect the phone with a virus?
I have read ...
1
vote
0answers
243 views
How can I check if my Bluetooth devices are vulnerable to a KNOB attack?
On Linux and/or macOS, how can I check if a device is vulnerable to a Key Negotiation of Bluetooth (KNOB) Attack?
And if a device is vulnerable, is there something I can do to mitigate the danger?
1
vote
0answers
111 views
Bluetooth security [closed]
How secure is it to use Bluetooth handsfree?
Can't someone eavesdrop the signals and listen to the conversation?
Does encryption in Bluetooth secure the information?
Can I use anyother tool ...
-1
votes
1answer
70 views
Syncing Bluetooth in a vehicle and access text messages from the phone?
If you connect your Bluetooth to a vehicle for music, can the owner of that vehicle download your text messages without your knowledge or can it download the messages that have been erased?
1
vote
2answers
97 views
Mobile phone is picking up 13 bluetooth devices and not sure what they are?
I have a particular problem with a potential security breach. I bought a new device today that connects to my phone via Bluetooth. Nothing strange about that.
Surprisingly when I turned Bluetooth on ...
4
votes
2answers
2k views
Can neighbour hear my bluetooth headset?
I'd like to buy a wireless bluetooth headset to not disturbing others by my TV sound but I'm wondering how private the transmission will be?
Can a neighbour with a bluetooth headset hear my TV's ...
1
vote
1answer
2k views
How to sniff bluetooth traffic to Android app?
Please bare with me with this introduction to the problem. Unfortunately title might be confusing, but it's hard to came up with proper one - let me show you why.
I'm trying to decode WM-Bus (Smart ...
2
votes
1answer
200 views
Can a bluetooth mouse be controlled by another bluetooth mouse?
Is it possible to have bluetooth in my machine being controller or (if not interfered) by another bluetooth mouse in nearby computer?
What prevents it? What if they have same pairing code?
I'm not ...
1
vote
2answers
2k views
Bluetooth vs USB Mouse Security
I had a question regarding the use of Wireless mice and security. In general which method of using a wireless mouse is considered more secure, using a mouse with a USB dongle, or using a mouse that ...
1
vote
1answer
2k views
Just Works Bluetooth Low Energy Security
I have been puzzled the past couple days about bluetooth low energy security.
My situation:
I am looking at what it might take to secure unpaired BLE connections.
In some cases, and essentially ...
0
votes
1answer
573 views
Is it possible to intercept Airdrop data transfer be intercepted?
If I am logged into a school WiFi and I airdrop a photo to someone can the school see what I airdrop? Or what I am searching using their WiFi?
2
votes
1answer
319 views
Are there any known exploits against bluetooth mice or keyboards?
Most wireless mice are not bluetooth. There are known exploits that take over wireless mice and use them as a keyboard.
Are there known exploits that can remotely inject malware directly over ...
4
votes
2answers
184 views
Proprietary RF Protocol Security
I've just been reading this article on proprietary RF protocols vs Bluetooth and it seems to be suggesting that the security through obscurity gained through a proprietary protocol is advantageous ...
7
votes
2answers
9k views
MAC randomization for Bluetooth?
Companies, governments, etc. can track Bluetooth and WiFi network scans passively by looking at a same MAC address over space and time (Bluetooth/WiFi Identity tracking in public spaces - How to ...
7
votes
1answer
978 views
Can I find out what encryption is used by my Android Bluetooth keyboard?
I've got an Android tablet (Samsung Tab S2) and a Bluetooth keyboard (Celicious Tri BK01). I occasionally use the keyboard to enter my password.
Is there any way, in Android, to find out whether the ...
3
votes
1answer
212 views
Should I encrypt Blutooth communication?
I'm making an Android app which needs to safely communicate with PC app over Bluetooth. I'm going to use RFCOMM for that purpose. Since apps will exchange user authentication details, there should be ...
-4
votes
1answer
114 views
Can code be transmitted through computers’ antennas? [closed]
I have an Acer Aspire E15 5-575. I removed its WiFi card, while kept its black and white antennas intact. I did this to avoid being discovered by long or short range wireless transmissions, wanting to ...
3
votes
1answer
255 views
What could MitM'ed U2F do?
Google has now released their "Titan" keys to the general store (albeit via a waitlist). When they first announced their product, Yubico, their chief competitor, decried the use of Bluetooth:
...
