Questions tagged [bluetooth]

Bluetooth is a technology that allows for wireless communication between hosts.

Filter by
Sorted by
Tagged with
1 vote
1 answer
42 views

How is it possible to simply a decode Bluetooth communications from a medical device?

Excuse the naive question but I'm trying to understand a bit about security in home health and medial devices and a recent report about how home Covid test results can be altered has left me a bit ...
user avatar
  • 323
2 votes
1 answer
55 views

Are there ways to mitigate the risks of using a Bluetooth/wireless keyboard when the device connected is next to it?

Normally, I avoid using any Bluetooth or wireless devices, especially HIDs, but for a project I am working on the only keyboards that will fit the size are Bluetooth and wireless keyboards, so I am ...
user avatar
0 votes
1 answer
19 views

How does HMAC fit in BLE?

In BLE there is events like authentication, pairing, bonding, exchange of LTK to secure a link, etc... How does HMAC fit in BLE? I know that HMAC is used to ensure the integrity of a message so does ...
user avatar
  • 101
0 votes
1 answer
50 views

Security of Bluetooth to stream audio in a highrise apartment building, relative to using Wi-Fi for laptop access to router/modem

My question is about the general security of using Bluetooth in a highrise apartment building. I am not a software developer, a network administrator, nor do I work in IT. When needed, I "code&...
user avatar
0 votes
0 answers
116 views

Is there any way to find out if a Logitech Unifying Receiver vulnerability was exploited?

Is there any way to find out if any of the vulnerabilities of older Logitech Unifying Receiver firmware was exploited? I'm referring to the vulnerabilities listed here including these. On GNU/Linux/...
user avatar
0 votes
1 answer
107 views

How secure is the wireless Bluetooth data stream going from my computer to my headphones?

Let's say I have bought a USB-to-Bluetooth dongle and "paired" it with my wireless Bluetooth headphones which I purchased by accident, thinking that they were wired. One of the biggest ...
user avatar
2 votes
1 answer
103 views

Does Windows use Bluetooth Authenticated pairing with encryption automatically?

Does Windows use Bluetooth Authenticated pairing with encryption automatically when you connect Bluetooth devices like earbuds to it? Is that Level 4? If it's not automatic, how do I get Windows to do ...
user avatar
0 votes
1 answer
99 views

Can a wifi Access Point be reconfigured to receive other radio signals?

Say we have a remote transmitter that is not connected to a wifi router (neither wirelessly nor by cable), but which transmits information using electromagnetic waves. Examples include walkie-talkies, ...
user avatar
  • 1
0 votes
0 answers
158 views

Bluetooth keys for QR code pairing

Lets suppose we have two devices A and B that want to connect over BLE using OOB pairing with QR codes. I am asking myself whether the transmitted DH keys are static. At least the information provided ...
user avatar
  • 31
1 vote
0 answers
77 views

Why does Bluetooth pairing require initiation from both devices? [closed]

I recently wanted to transfer some data from my smartphone to my laptop via bluetooth. This requires pairing the devices first. In the bluetooth options I could see all the other bluetooth devices in ...
user avatar
  • 123
0 votes
0 answers
86 views

I Received a strange Bluetooth Connection request from one of my own computers on my network

I wish I'd taken a screenshot of the connection request, but it basically was asking to connect to my work laptop and I could either accept or reject the request. The requesting computer is using an ...
user avatar
  • 111
0 votes
0 answers
74 views

Setting secret at factory to be used in Bluetooth pairing authentication

Setup: We have 2 kinds of Bluetooth devices. Device Type A is connected to power with ethernet capability and will be used as initiator for BT connections. Device Type B is mobile, battery powered (...
user avatar
  • 101
0 votes
0 answers
21 views

What do unkown MAC addresses mean in this context? [duplicate]

I've recently begun learning about Cyber Security related to Bluetooth. I toggled the "Show Bluetooth devices without names" (or something similar) in my phone in developer mode and went to ...
user avatar
  • 1
0 votes
0 answers
71 views

bluetooth link encrytion under bluetooth 4 .2 and 5.x

This is a follow up question regarding this answer In Linux does the encryption of the bluetooth link using bluetooth 4.2 or 5.x depend on the version of the kernel - and whether or not the kernel ...
user avatar
0 votes
0 answers
87 views

Options for Integrating or developing a physical security solution (physical access control via in-house mobile apps [NFC/Bluetooh])

Our team is looking to either integrate or develop a physical security solution for a rather large campus. Requirements: Ability to either integrate (with reader/electronic lock hardware) from our ...
user avatar
1 vote
1 answer
333 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
user avatar
  • 21
3 votes
1 answer
153 views

How does the Apple/Google Exposure Notification system prevent infected users from being identified?

Under Apple and Google's contact tracing scheme, Alice's device generates a daily random value (termed a Temporary Exposure Key or TEK in the Cryptography Specification). Every 10 minutes, a Rolling ...
user avatar
  • 131
1 vote
0 answers
80 views

Bluetooth module and an Android app [closed]

I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data. how can I make sure my system only connects to phones that activated bluetooth through the app? ...
user avatar
1 vote
0 answers
177 views

SSL Handshake in Android via Bluetooth Classic [closed]

I am working on implementing an Android App (client) which will be connected to Raspberry Pi (server) via Bluetooth Classic. To make data transfer securely, I want to implement SSL encryption between ...
user avatar
1 vote
1 answer
174 views

Can Bluetooth earphone leak data between phones?

I have a Bluetooth earphone connects to both iPhone and android. I forgot to switch off the connection of android when using iPhone. So I am wondering if the sound of iPhone or even the iPhone data ...
user avatar
3 votes
1 answer
848 views

Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?

There are some threads talking about Bluetooth keyboard security. But I have a different concern. I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a ...
user avatar
  • 133
3 votes
1 answer
120 views

Freshness Protection in BL and BLE

I recently found this document: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf , Guide to Bluetooth Security from NIST. Unfortunately, there is nothing described w.r.t....
user avatar
  • 31
1 vote
1 answer
774 views

How do I add application level encryption to an Android BLE connection?

The Android Bluetooth Low Energy documentation recommends adding application layer encryption on-top of the BLE connection if the exchanged data is sensitive: Caution: When a user pairs their device ...
user avatar
-1 votes
1 answer
92 views

Cyber Security in Hardware Products? [closed]

I am currently working on a product similar to smart locks that work with BLE identification. I can handle the hardware of the product very well (mechanics / electronics / embedded software), however, ...
user avatar
  • 9
3 votes
0 answers
106 views

Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?

Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
user avatar
  • 31
0 votes
1 answer
501 views

Can people hack your iPhone Via Bluetooth if you leave it on?

I live in an apartment complex with lots of people, and oftentimes I would be able to see Bluetooth devices that do not belong to me on my iPhone or MacBook when I search for my Bluetooth device. ...
user avatar
1 vote
1 answer
356 views

Can Bluetooth "headphones" be malicious?

I received a parcel from Amazon which I did not order, addressed to me. It contained Bluetooth earphones. It may just be part of a brushing scam, but it's got me curious. So my question is.. Could a ...
user avatar
  • 11
1 vote
1 answer
864 views

Apple bluetooth keyboard insecure connection?

From time to time, I see this dialog box pop up on my MacBook Pro screen. It typically happens as the computer wakes up from sleep. Magic keyboard is trying to connect using an unsecured Bluetooth ...
user avatar
  • 413
0 votes
0 answers
39 views

Anonimity of Bluetooth tokens [duplicate]

In the context of contact tracing, I have a privacy question. I have read a few (and "few" is already a bad thing) articles about Bluetooth contact tracing, especially in the context of the Sars-Cov2 ...
user avatar
-1 votes
1 answer
114 views

Bluetooth vulnerability on a Raspberry PI running Raspian

Is it possible for someone to exploit a Raspberry PI running Raspian through bluetooth just by having the bluetooth enabled?
user avatar
1 vote
1 answer
114 views

What did the Author mean by saying "Bluetooth does not provide native user authentication."

I was reading an article on Bluetooth security (see citation below), and in the introduction the authors writes: "Bluetooth specifications provide for three basic security services: - Authentication:...
user avatar
0 votes
0 answers
79 views

BLE IoT device as platform backdoor for hackers

I have a IoT device that works with BLE and uses a smartphone as a bridge to connect to a digital platform (cloud). The communication between the IoT device and the platform is based in PKI. The IoT ...
user avatar
3 votes
1 answer
316 views

Why are some Bluetooth devices susceptible to ping floods and some are not?

Just for fun, I've ping flooded my bluetooth speaker at home using l2ping on Linux and I was unable to connect to it as the pinging continued. I've tried flooding my phone and it seems to have ...
user avatar
1 vote
0 answers
112 views

How does BLE secure connection ensure man in the middle protection?

I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker. In contrast, in secure ...
user avatar
0 votes
1 answer
118 views

Can sending a hidden Text/SMS messages be considered a security issue?

tl;dr: My Toyota Aygo sends Text/SMS messages through Bluetooth and my mobile phone. These messages are delivered to the recipient, but there is no sign of them in my Messages app. Should I be ...
user avatar
  • 3,287
1 vote
1 answer
164 views

Bluetooth 5 - is a pass key enough?

So far I understood that from Bluetooth 4.2 onwards the Pass Key method is safer due to pre-shared public keys and a 128-bit encryption key. After this pairing process occurs, is the link between the ...
user avatar
2 votes
1 answer
214 views

Bluetooth LE with Secure Connection and static passkey: This is a bad idea, right?

I am currently looking into how to protect a BLE connection from active attacks (man-in-the-middle) if one of the devices neither has a display nor a keyboard. Lemberg Solutions suggests this: ...
user avatar
  • 135
1 vote
2 answers
325 views

Is Bluetooth on cellphone a reliable protocol for encrypted text transmission?

I'm developing a solution for secure chat over instant messaging, here is the scenario: I need to encrypt my message then send it on {Whatsapp, telegram, Wechat,...}, I don't trust any software above,...
user avatar
1 vote
0 answers
174 views

Where are the drivers stored on usb receivers? [closed]

I am wondering where the firmware / driver is stored on these devices? If it cannot be used as a storage device, how could it possibly store any firmware for itself? How could I access these "files"? ...
user avatar
  • 335
1 vote
0 answers
75 views

Standards restricting bluetooth/usb access?

AFAIK in most OSes an app is given access to USB and Bluetooth and it's fairly blanket access. I believe maybe iOS now has per app Bluetooth access controls but if you give an app bluetooth access it ...
user avatar
  • 458
2 votes
1 answer
184 views

Is it possible to track by Bluetooth headphones

Is it possible to find bluetooth device if I have MAC of the device.
user avatar
  • 21
3 votes
1 answer
660 views

Security risk of leaving bluetooth on all the time on an Android 10 phone

What are the security risks associated with leaving bluetooth on all the time on a Pixel phone updated to Android 10? In this question, I am NOT focusing on the risks associated with someone ...
user avatar
  • 109
1 vote
0 answers
446 views

How do I know a USB Bluetooth Adapter is safe to use? [duplicate]

I've found several extremely cheap USB Bluetooth options and, while the reviews say they work, I am skeptical of them because they are so cheap/have no name brand recognition. Here is the main one I ...
user avatar
6 votes
0 answers
70 views

Can a wireless headphone contain malware which can infect an Android device? [duplicate]

I go to conferences and there are often free bluetooth earbuds and headsets given away. If I pair them with an Android device, is it possible for them to infect the phone with a virus? I have read ...
user avatar
  • 109
1 vote
0 answers
307 views

How can I check if my Bluetooth devices are vulnerable to a KNOB attack?

On Linux and/or macOS, how can I check if a device is vulnerable to a Key Negotiation of Bluetooth (KNOB) Attack? And if a device is vulnerable, is there something I can do to mitigate the danger?
user avatar
  • 1,841
1 vote
0 answers
161 views

Bluetooth security [closed]

How secure is it to use Bluetooth handsfree? Can't someone eavesdrop the signals and listen to the conversation? Does encryption in Bluetooth secure the information? Can I use anyother tool ...
user avatar
-1 votes
1 answer
106 views

Syncing Bluetooth in a vehicle and access text messages from the phone?

If you connect your Bluetooth to a vehicle for music, can the owner of that vehicle download your text messages without your knowledge or can it download the messages that have been erased?
user avatar
1 vote
2 answers
236 views

Mobile phone is picking up 13 bluetooth devices and not sure what they are?

I have a particular problem with a potential security breach. I bought a new device today that connects to my phone via Bluetooth. Nothing strange about that. Surprisingly when I turned Bluetooth on ...
user avatar
  • 1,103
4 votes
2 answers
3k views

Can neighbour hear my bluetooth headset?

I'd like to buy a wireless bluetooth headset to not disturbing others by my TV sound but I'm wondering how private the transmission will be? Can a neighbour with a bluetooth headset hear my TV's ...
user avatar
  • 165
1 vote
1 answer
2k views

How to sniff bluetooth traffic to Android app?

Please bare with me with this introduction to the problem. Unfortunately title might be confusing, but it's hard to came up with proper one - let me show you why. I'm trying to decode WM-Bus (Smart ...
user avatar
  • 11