8 ms·
Bluetooth Low Energy Swiss-Army Knife
- jerkstate 8y agoCool! I have been using a Nordic BLE sniffer for reverse engineering fitness bands, which is awful because it's only half duplex. Can't wait to try this out.
- THE_PUN_STOPS 8y agoUsing Hacker News as a mechanical engineer with not much interest in software sometimes leads to cases where I misinterpret article titles. I was very excited to find out how and why anybody would put BLE into a literal multi tool!
- alasano 8y ago> Person 1: BLE in a Swiss-Army Knife.. what can you do with that? > Person 2: Take a look. "Your Swiss-Army Knife is now connected" > Person 1: Nice. > Person 2: Nice.
- TeMPOraL 8y agoOh look, it's downloading a software update!
- teekert 8y agoImagine it connects to your phone and reports temperature, tilt, humidity, its location, works as a compass (Why not use the phone directly? Well maybe I need to monitor the trailer I am trying to get level as I adjust the front wheel?)
- screature2 8y agoHaha, looks like Victorinox did actually propose a "Presentation Pro" which was to include a bluetooth remote for powerpoint presentations. Doesn't seem to be for sale on the Victorinox website though. https://www.engadget.com/2009/01/09/victorinox-presentation-pro-floated-by-the-swiss-army/ https://www.engadget.com/2009/01/09/victorinox-presentation-...
- sohkamyung 8y agoElectrical engineer here: and I also read the title, wondering who would 'put BLE into a literal multi tool!' :-)
- pjc50 8y agoI thought "someone must already have done that", and sure enough: http://www.dailymail.co.uk/sciencetech/article-1111407/Cutting-edge-The-Swiss-army-knife-Bluetooth-USB-drive-unlocks-fingerprint.html http://www.dailymail.co.uk/sciencetech/article-1111407/Cutti... (like all the larger Swiss Army knives, it's a gimmick.)
- furbyhat 8y agoThis. I thought exact same thing and realized what my (actual physical) Swiss Army Knife is missing. Disappointed
- exabrial 8y agoAre ble connections neither encrypted nor authenticated? How on Earth does the connection hijacking work so simplistically?
- Jedd 8y agoMy understanding is the initial handshake is not terribly secure, and sniffers watching that can obtain the long term key used by the pair forever. But I gather a third party can force a handshake refresh at will, which may be what they're doing here. Code's available. : )
- dmitrygr 8y agoFalse, basically on every count. This attack has zero effect on connections established using mitm-protected paring method. This attack is a non-event to any device that follows proper security design as per BT spec
- keybuk 8y agoThere are vulnerabilities in the "standard" LE pairing, even with MITM, that make these things possible. Fixed with the BT LE Secure Connections key exchange, but many devices don't implement that
- oflannabhra 8y agoI’ve only used Ubertooth [0] to sniff BLE. I was not very impressed with its ability to follow connections (it would frequently miss the connection exchange due to channel hopping). Can using multiple micro:bits at once with BTLEJack increase the success rate? Most BLE diagnostic equipment that guarantees capture of all traffic costs over $10k. [0] - https://github.com/greatscottgadgets/ubertooth https://github.com/greatscottgadgets/ubertooth
- alex_suzuki 8y agoSame here. We've been using Ubertooth One and it was not a pleasant experience. Certainly cheap and easy to set up, but with very mixed results. Not only does it miss connections due to the channel hopping, it also frequently loses connections, which is even more frustrating. We've had the privilege to know someone with a professional wide-band solution (Ellisys Bluetooth Explorer), and it was miles ahead, including the analysis software. Disclaimer: I am not in any way affiliated with Ellisys.
- IshKebab 8y agoI've used a professional wideband BLE analyser before (I can't remember which one unfortunately) and while it was a few thousand pounds, I don't think it cost as much as $10k. Also I've used Nordic's sniffer program before and it worked well and is free (plus a very small amount for the hardware). Windows only though.
- jaimex2 8y agoWould this work on Tesla Model 3's phone key system? https://www.tesla.com/support/model-3#phone-key https://www.tesla.com/support/model-3#phone-key