Skip to main content

Questions tagged [bluetooth]

Bluetooth is a technology that allows for wireless communication between hosts.

Filter by
Sorted by
Tagged with
0 votes
0 answers
6 views

Sniff Bluetooth traffic using Fitness Tracker [migrated]

I am attempting to sniff the Bluetooth between the fitness tracker(GOJI ACTIVE GFITBK20 Activity Tracker) and the application(Goji Active) installed on the phone but I am unable to see any health ...
user309729's user avatar
5 votes
0 answers
128 views

Android Find My Device Network Privacy

My Android device today popped up a screen indicating that it had joined the new Find My Device Network that allows two-way scanning of device locations over Bluetooth. Despite Google's claims of ...
Robert Chapin's user avatar
2 votes
0 answers
119 views

Why does Bluetooth Low Energy Secure Connections with Passkey Entry check the Passkey bit by bit?

If we want to enable an authenticated connection via BLE the passkey method seems like a good idea. A 6-digit PIN is generated randomly on one device and has to be entered on the other - these 20 Bit ...
jusaca's user avatar
  • 71
8 votes
2 answers
2k views

Doubts about Bluetooth Secure Authentication

I'm reading "Guide to Bluetooth Security" by NIST (available here). At page 22 (page 33 of the PDF), they describe the Secure Authentication scheme. From what I can understand, both the ...
StefanoTrv's user avatar
1 vote
0 answers
113 views

Needing information on cyberattack that occured [closed]

If someone hacks into your WiFi and comes through an unlocked networked and knows your password and IP address and learns the specs on all your devices, the computer and cellphones, the smart TV, are ...
Larry Lesser's user avatar
0 votes
1 answer
173 views

How to get accurate info on a device from solely the bluetooth address? [duplicate]

I am looking to be able to scan bluetooth addresses around me, and then get info on the devices from the address (i.e. if its a phone/speaker, or maybe if there is a public registry of device ...
Kovy Jacob's user avatar
0 votes
1 answer
151 views

Suspected Audio/Wireless/Bluetooth Hijacking - Need Expert Insight [closed]

I have reason to believe that there may be ongoing audio/wireless/Bluetooth hijacking occurring in my network environment. The issue appears to involve unauthorized access to Bluetooth and wireless ...
Jimmy's user avatar
  • 3
1 vote
1 answer
139 views

Are Bluetooth and/or NFC anonymous?

Suppose I have a smartphone and I have disabled all usual de-anonymizing things (e.g., wifi probe requests). My phone sends some data over Bluetooth (or NFC) to device A, and then at a different place ...
Sam Jaques's user avatar
1 vote
0 answers
242 views

Are Android Bluetooth file transfers encrypted?

Suppose I pair two Android phones together using Bluetooth and transfer a file from the first phone to the second by sharing the file using Bluetooth. Does Android encrypt the file transfer so that no ...
Flux's user avatar
  • 923
1 vote
0 answers
206 views

Why was CVE-2022-20411 (Bluetooth Remote Code Execution) not detected by Android's BoundSanitizer?

CVE-2022-20411 enabled remote code execution over Bluetooth on Android. It was fixed in December 2022. But why was it not detected by Android's BoundsSanitizer? Its purpose is to detect and prevent ...
Finni's user avatar
  • 111
3 votes
1 answer
1k views

Do wireless (2.4 ghz) headphones use encryption?

I've noticed that there are two types of wireless headphones / headsets / earbuds on the market – bluetooth and 2.4 GHz wireless (via proprietary dongles). Good example of headset that has both – ...
Mike's user avatar
  • 141
2 votes
2 answers
425 views

Do bluetooth accessories assure personal privacy?

I want to buy a pair of Bluetooth earbuds like these for use with my phone: https://www.amazon.com/Wireless-Bluetooth-Canceling-Headphones-Earphones/dp/B09P38XS9M?th=1 I want to know if devices like ...
CurtisB's user avatar
  • 33
0 votes
1 answer
240 views

Is there something I'm missing about Bluetooth security?

I recently bought a Volcano Hybrid from Storz & Bickel. It has Bluetooth functionality, and indeed requires it to change certain important settings, such as the brightness of the display (which is ...
Kaiman's user avatar
  • 1
1 vote
1 answer
369 views

How is it possible to simply a decode Bluetooth communications from a medical device?

Excuse the naive question but I'm trying to understand a bit about security in home health and medial devices and a recent report about how home Covid test results can be altered has left me a bit ...
orome's user avatar
  • 333
2 votes
1 answer
277 views

Are there ways to mitigate the risks of using a Bluetooth/wireless keyboard when the device connected is next to it?

Normally, I avoid using any Bluetooth or wireless devices, especially HIDs, but for a project I am working on the only keyboards that will fit the size are Bluetooth and wireless keyboards, so I am ...
user942937's user avatar
0 votes
1 answer
219 views

How does HMAC fit in BLE?

In BLE there is events like authentication, pairing, bonding, exchange of LTK to secure a link, etc... How does HMAC fit in BLE? I know that HMAC is used to ensure the integrity of a message so does ...
Belphegor's user avatar
  • 101
0 votes
1 answer
307 views

Security of Bluetooth to stream audio in a highrise apartment building, relative to using Wi-Fi for laptop access to router/modem

My question is about the general security of using Bluetooth in a highrise apartment building. I am not a software developer, a network administrator, nor do I work in IT. When needed, I "code&...
user2153235's user avatar
4 votes
1 answer
1k views

How secure is the wireless Bluetooth data stream going from my computer to my headphones?

Let's say I have bought a USB-to-Bluetooth dongle and "paired" it with my wireless Bluetooth headphones which I purchased by accident, thinking that they were wired. One of the biggest ...
Caseton Siebenhaar's user avatar
2 votes
1 answer
344 views

Does Windows use Bluetooth Authenticated pairing with encryption automatically?

Does Windows use Bluetooth Authenticated pairing with encryption automatically when you connect Bluetooth devices like earbuds to it? Is that Level 4? If it's not automatic, how do I get Windows to do ...
user271001's user avatar
0 votes
1 answer
159 views

Can a wifi Access Point be reconfigured to receive other radio signals?

Say we have a remote transmitter that is not connected to a wifi router (neither wirelessly nor by cable), but which transmits information using electromagnetic waves. Examples include walkie-talkies, ...
RLR's user avatar
  • 1
1 vote
0 answers
148 views

Why does Bluetooth pairing require initiation from both devices? [closed]

I recently wanted to transfer some data from my smartphone to my laptop via bluetooth. This requires pairing the devices first. In the bluetooth options I could see all the other bluetooth devices in ...
quarague's user avatar
  • 183
0 votes
0 answers
232 views

I Received a strange Bluetooth Connection request from one of my own computers on my network

I wish I'd taken a screenshot of the connection request, but it basically was asking to connect to my work laptop and I could either accept or reject the request. The requesting computer is using an ...
hepcat72's user avatar
  • 111
0 votes
0 answers
25 views

What do unkown MAC addresses mean in this context? [duplicate]

I've recently begun learning about Cyber Security related to Bluetooth. I toggled the "Show Bluetooth devices without names" (or something similar) in my phone in developer mode and went to ...
Basti's user avatar
  • 1
0 votes
0 answers
128 views

Options for Integrating or developing a physical security solution (physical access control via in-house mobile apps [NFC/Bluetooh])

Our team is looking to either integrate or develop a physical security solution for a rather large campus. Requirements: Ability to either integrate (with reader/electronic lock hardware) from our ...
spencer741's user avatar
1 vote
1 answer
827 views

Is Bluetooth low energy (BLE) still secure?

Some time ago, Bluetooth was hit by a severe exploit (KNOB attack) that rendered its encryption pretty much useless. Publishers like the German Heise summarized it in an article* as an issue in the ...
Nils's user avatar
  • 21
3 votes
1 answer
199 views

How does the Apple/Google Exposure Notification system prevent infected users from being identified?

Under Apple and Google's contact tracing scheme, Alice's device generates a daily random value (termed a Temporary Exposure Key or TEK in the Cryptography Specification). Every 10 minutes, a Rolling ...
Marcel's user avatar
  • 131
1 vote
0 answers
116 views

Bluetooth module and an Android app [closed]

I have few sensors, a microcontroller with a bluetooth module and an android app to visualize the data. how can I make sure my system only connects to phones that activated bluetooth through the app? ...
JadedBeast's user avatar
1 vote
0 answers
468 views

SSL Handshake in Android via Bluetooth Classic [closed]

I am working on implementing an Android App (client) which will be connected to Raspberry Pi (server) via Bluetooth Classic. To make data transfer securely, I want to implement SSL encryption between ...
Kiran Varma's user avatar
1 vote
1 answer
630 views

Can Bluetooth earphone leak data between phones?

I have a Bluetooth earphone connects to both iPhone and android. I forgot to switch off the connection of android when using iPhone. So I am wondering if the sound of iPhone or even the iPhone data ...
Extrasecurity's user avatar
4 votes
1 answer
2k views

Is bluetooth keyboard more secure than USB keyboard for a malicious firmware?

There are some threads talking about Bluetooth keyboard security. But I have a different concern. I will only need 4 keys from an external keyboard, Home/End/PageUp/PageDn keys. Because I use them a ...
sgon00's user avatar
  • 143
3 votes
1 answer
223 views

Freshness Protection in BL and BLE

I recently found this document: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-121r2.pdf , Guide to Bluetooth Security from NIST. Unfortunately, there is nothing described w.r.t....
Marc's user avatar
  • 31
1 vote
1 answer
2k views

How do I add application level encryption to an Android BLE connection?

The Android Bluetooth Low Energy documentation recommends adding application layer encryption on-top of the BLE connection if the exchanged data is sensitive: Caution: When a user pairs their device ...
deiShie0's user avatar
-1 votes
1 answer
128 views

Cyber Security in Hardware Products? [closed]

I am currently working on a product similar to smart locks that work with BLE identification. I can handle the hardware of the product very well (mechanics / electronics / embedded software), however, ...
ATarek's user avatar
  • 9
3 votes
0 answers
142 views

Can Apple and Google bypass the decentralised COVID-19 tracing approach (DP-3T)?

Many thoughts have been spent on creating the decentralised, minimum-knowledge contact tracing approach DP-3T. This has been implemented in contact tracing apps of several countries, e. g. the German ...
edfrank's user avatar
  • 31
0 votes
1 answer
2k views

Can people hack your iPhone Via Bluetooth if you leave it on?

I live in an apartment complex with lots of people, and oftentimes I would be able to see Bluetooth devices that do not belong to me on my iPhone or MacBook when I search for my Bluetooth device. ...
Ecotistician's user avatar
1 vote
1 answer
1k views

Can Bluetooth "headphones" be malicious?

I received a parcel from Amazon which I did not order, addressed to me. It contained Bluetooth earphones. It may just be part of a brushing scam, but it's got me curious. So my question is.. Could a ...
SPM's user avatar
  • 11
1 vote
1 answer
1k views

Apple bluetooth keyboard insecure connection?

From time to time, I see this dialog box pop up on my MacBook Pro screen. It typically happens as the computer wakes up from sleep. Magic keyboard is trying to connect using an unsecured Bluetooth ...
ahron's user avatar
  • 423
0 votes
0 answers
43 views

Anonimity of Bluetooth tokens [duplicate]

In the context of contact tracing, I have a privacy question. I have read a few (and "few" is already a bad thing) articles about Bluetooth contact tracing, especially in the context of the Sars-Cov2 ...
usr-local-ΕΨΗΕΛΩΝ's user avatar
-1 votes
1 answer
162 views

Bluetooth vulnerability on a Raspberry PI running Raspian

Is it possible for someone to exploit a Raspberry PI running Raspian through bluetooth just by having the bluetooth enabled?
VerySeriousSoftwareEndeavours's user avatar
1 vote
1 answer
188 views

What did the Author mean by saying "Bluetooth does not provide native user authentication."

I was reading an article on Bluetooth security (see citation below), and in the introduction the authors writes: "Bluetooth specifications provide for three basic security services: - Authentication:...
ArchenonPoros's user avatar
0 votes
0 answers
131 views

BLE IoT device as platform backdoor for hackers

I have a IoT device that works with BLE and uses a smartphone as a bridge to connect to a digital platform (cloud). The communication between the IoT device and the platform is based in PKI. The IoT ...
LazyTurtle's user avatar
3 votes
1 answer
960 views

Why are some Bluetooth devices susceptible to ping floods and some are not?

Just for fun, I've ping flooded my bluetooth speaker at home using l2ping on Linux and I was unable to connect to it as the pinging continued. I've tried flooding my phone and it seems to have ...
user avatar
1 vote
0 answers
218 views

How does BLE secure connection ensure man in the middle protection?

I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker. In contrast, in secure ...
RealTimeEngineer91's user avatar
0 votes
1 answer
177 views

Can sending a hidden Text/SMS messages be considered a security issue?

tl;dr: My Toyota Aygo sends Text/SMS messages through Bluetooth and my mobile phone. These messages are delivered to the recipient, but there is no sign of them in my Messages app. Should I be ...
trejder's user avatar
  • 3,639
1 vote
1 answer
343 views

Bluetooth 5 - is a pass key enough?

So far I understood that from Bluetooth 4.2 onwards the Pass Key method is safer due to pre-shared public keys and a 128-bit encryption key. After this pairing process occurs, is the link between the ...
Luke Galea's user avatar
2 votes
1 answer
771 views

Bluetooth LE with Secure Connection and static passkey: This is a bad idea, right?

I am currently looking into how to protect a BLE connection from active attacks (man-in-the-middle) if one of the devices neither has a display nor a keyboard. Lemberg Solutions suggests this: ...
DrP3pp3r's user avatar
  • 135
1 vote
2 answers
501 views

Is Bluetooth on cellphone a reliable protocol for encrypted text transmission?

I'm developing a solution for secure chat over instant messaging, here is the scenario: I need to encrypt my message then send it on {Whatsapp, telegram, Wechat,...}, I don't trust any software above,...
DingoStiglitz's user avatar
1 vote
0 answers
115 views

Standards restricting bluetooth/usb access?

AFAIK in most OSes an app is given access to USB and Bluetooth and it's fairly blanket access. I believe maybe iOS now has per app Bluetooth access controls but if you give an app bluetooth access it ...
gman's user avatar
  • 458
2 votes
1 answer
1k views

Is it possible to track by Bluetooth headphones

Is it possible to find bluetooth device if I have MAC of the device.
Stan's user avatar
  • 21
3 votes
1 answer
814 views

Security risk of leaving bluetooth on all the time on an Android 10 phone

What are the security risks associated with leaving bluetooth on all the time on a Pixel phone updated to Android 10? In this question, I am NOT focusing on the risks associated with someone ...
help's user avatar
  • 109