Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- It still leaks when you turn bluetooth off in "control center". Last time i checked you're broadcasting an unchanging uuid that only changes every 12 hours or so. It's gross.by pcdoodle
- A side channel attack revealing AES key from just 90,000 traces.
Sigh, side channel attacks seem to be everywhere now.
by vardump - I read the abstract, while not familiar with the topic, how would we go about limiting the inpact?by 3abiton
- Time for everyone to implement some variation of https://www.bluetooth.com/specifications/specs/authorization... ?by Verdex
- I really think we need a modern replacement to bluetooth, something that doesn't have weird behaviour with headphones, is more secure and doesn't have weird connection issues all the time, and is as ubiquitous as bluetooth is now. I know it will never happen, but I can only hopeby voidUpdate
- As someone who finally recently escaped bluetooth firmware development: yes, Bluetooth is leaking secrets and it doesn't even require any silly RF shenanigans. Almost nothing actually implements LESC. Apple refuses to implement OOB pairing, so no peripherals can force you to use it, so everything is subject to MITM attacks. The entire ecosystem is a mess of consultants and underpaid devs copy-pasting Nordic sample code, with no time or financial incentive to do more than the bare minumum. Never trust any product that moves sensitive data through Bluetooth.by ryukoposting