Dismiss this notice
PureVPN Special COVID-19 Father's Day 2020 Giveaway - https://www.geeks.fyi/showthread.php?tid=11841

Thread Rating:
  • 2 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Bluetooth Bugs Allow Impersonation Attacks on Legions of Devices
#1
Information 
Quote:Academic researchers have uncovered security vulnerabilities in Bluetooth Classic that allows attackers to spoof paired devices: They found that the bugs allow an attacker to insert a rogue device into an established Bluetooth pairing, masquerading as a trusted endpoint. This allows attackers to capture sensitive data from the other device.
 
The bugs allow Bluetooth Impersonation Attacks (BIAS) on everything from internet of things (IoT) gadgets to phones to laptops, according to researchers at the École Polytechnique Fédérale de Lausanne (EPFL) in Switzerland. The flaws are not yet patched in the specification, though some affected vendors may have implemented workarounds.
 
“We conducted BIAS attacks on more than 28 unique Bluetooth chips (by attacking 30 different devices),” the researchers said. “At the time of writing, we were able to test chips from Cypress, Qualcomm, Apple, Intel, Samsung and CSR. All devices that we tested were vulnerable to the BIAS attack.”

The issue lies in the pairing/bonding protocols used in the specification. When two Bluetooth devices are paired for the first time, they exchange a persistent encryption key (the “long-term key”) that will then be stored, so that the endpoints are thereafter bonded and will connect to each other without having to perform the lengthier pairing process every time.
 
For the attacks to be successful, an attacking device would need to be within wireless range of a vulnerable Bluetooth device that has previously established bonding with a remote device with a Bluetooth address known to the attacker.

Read more: https://threatpost.com/bluetooth-bugs-im...es/155886/
[-] The following 1 user Likes silversurfer's post:
  • harlan4096
Reply


Messages In This Thread
Bluetooth Bugs Allow Impersonation Attacks on Legions of Devices - by silversurfer - 20 May 20, 15:27

Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
Windows 10: The beginning of the end for...
Microsoft has start...silversurfer — 18:45
Intel discontinues its Gemini Lake CPUs
First introduced b...silversurfer — 18:41
All iPhone 12 models to have OLED panels...
Apple is expected ...silversurfer — 18:40
Google begins rolling out dark mode supp...
Google is beginning...silversurfer — 12:15
The Office.com homepage is getting a fac...
Image credit: OnM...silversurfer — 12:05

[-]
Birthdays
Today's Birthdays
avatar (50)Step 1
Upcoming Birthdays
avatar (41)dapedDow
avatar (43)TromPerl
avatar (40)RidgeDimb
avatar (31)ipumaqar
avatar (45)tanliorsPeri
avatar (37)lapedDow
avatar (43)rituabew
avatar (31)omyjul
avatar (35)papedDow
avatar (44)ArnoldFum
avatar (32)yfaza
avatar (43)Kevensi
avatar (42)ConradRoand
avatar (33)boineDon
avatar (45)spoofTum
avatar (44)WillieVot
avatar (34)Grompelbawn
avatar (35)vkseogaF
avatar (31)usogy
avatar (34)ywixazok
avatar (32)ixoqe

[-]
Online Staff
There are no staff members currently online.

>