9 ms·

This doesn't mention Windows at all. That sounds great on the surface, but it would be really helpful to understand why Windows is not actually at fault so I c

This doesn't mention Windows at all. That sounds great on the surface, but it would be really helpful to understand why Windows is not actually at fault so I can better measure the risk profile. For example, knowing that the Windows Bluetooth stack has the architectural equivalent of BlueZ's `ClassicBondedOnly=false` would be really helpful to know; that would tell me to keep an eye out for it being `true` in environments I'm trying to harden, for example. Alternatively the stack might work entirely differently and the status quo might consist of a different set of considerations to keep in mind. This is awesome and I'm looking forward to the PoCs and (pleeease) video with lots of demonstrations :) But Windows has enough market share and enough sysadmins are going to be going "!!!...???" that some info would be helpful. That info might be "I haven't attacked Windows yet". That would be good to know too :)

ComodoHacker 3y ago
I believe it's because they just didn't bother trying this on Windows (yet)
- SCdF 3y ago
  Do you believe that, or do you actually know that because he said it somewhere? If you look at the linux patch[1] it's a case of bad defaults. So maybe Windows just has good defaults? [1] https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675 https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/pr...
  - SpaghettiCthulu 3y ago
    I think "insecure default" or even "wrong default" is more fitting in this case.
wkipling 3y ago
Because Bluetooth barely works normally for Windows
- Etheryte 3y ago
  Can't be affected by an attack vector if the vector doesn't work to begin with, clever.
- d3w4s9 3y ago
  As someone who used a bluetooth mouse with Windows for the past few years, have to disagree And Bluetooth got quite a bit better on Windows 11 after the new audio profile thing is available
- FirmwareBurner 3y ago
  I know it's a popular trope on HN to say nothing on Windows ever works but anecdotally I've been using Bluetooth on windows for over 10 years now from 7 to 11, and never had any issues whatsoever that were related to Windows itself. The only issues I have are Bluetooth disappears after wake from sleep which after research appears to be due to buggy firmware of the Mediatek network card installed in the laptop and not due to Windows, as the same issue happens at wake from sleep in Ubuntu. And another issue was due to the device used being a Chinese no-name bootleg e-waste piece of crap off Amazon. Ironically never had any issues with Bluetooth earphones off AliExpress. So YMMV.
  - 360MustangScope 3y ago
    I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller and then repair it each time. Sometimes I can’t even delete it and have to go into RegEdit and delete it. The delete button just does nothing sometimes in that menu
    - FirmwareBurner 3y ago
      The Xbox is a popular controller so its Bluetooth connection issues on windows should be well documented online by multiple users by now if it's a known issue. Or is it just you and a handful of unlucky users due to some buggy Bluetooth card-driver combo? There are a lot of short straws you can pull in the Bluetooth stack lottery that don't necessarily stem from the OS.
WhackyIdeas 3y ago
Maybe this particular hack isn’t vulnerable to Windows. But, with my Flipper Zero I can create a bluetooth device and as soon as a Windows client connects it will think it’s a keyboard and fire whatever powershell commands I want.. I have only used it to do a RickRoll myself (spawning Youtube), ai haven’t tried anything illegal with it. Now I have all of my bluetooth disabled. But, I don’t know how to remove bluez without breaking linux.
teddyh 3y ago
> knowing that the Windows Bluetooth stack has the architectural equivalent of BlueZ's `ClassicBondedOnly=false` Did you mean “ClassicBondedOnly=true”?

ComodoHacker 3y ago

I believe it's because they just didn't bother trying this on Windows (yet)

SCdF 3y ago
Do you believe that, or do you actually know that because he said it somewhere? If you look at the linux patch[1] it's a case of bad defaults. So maybe Windows just has good defaults? [1] https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675 https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/pr...
- SpaghettiCthulu 3y ago
  I think "insecure default" or even "wrong default" is more fitting in this case.

wkipling 3y ago

Because Bluetooth barely works normally for Windows

Etheryte 3y ago
Can't be affected by an attack vector if the vector doesn't work to begin with, clever.
d3w4s9 3y ago
As someone who used a bluetooth mouse with Windows for the past few years, have to disagree And Bluetooth got quite a bit better on Windows 11 after the new audio profile thing is available
FirmwareBurner 3y ago
I know it's a popular trope on HN to say nothing on Windows ever works but anecdotally I've been using Bluetooth on windows for over 10 years now from 7 to 11, and never had any issues whatsoever that were related to Windows itself. The only issues I have are Bluetooth disappears after wake from sleep which after research appears to be due to buggy firmware of the Mediatek network card installed in the laptop and not due to Windows, as the same issue happens at wake from sleep in Ubuntu. And another issue was due to the device used being a Chinese no-name bootleg e-waste piece of crap off Amazon. Ironically never had any issues with Bluetooth earphones off AliExpress. So YMMV.
- 360MustangScope 3y ago
  I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller and then repair it each time. Sometimes I can’t even delete it and have to go into RegEdit and delete it. The delete button just does nothing sometimes in that menu
  - FirmwareBurner 3y ago
    The Xbox is a popular controller so its Bluetooth connection issues on windows should be well documented online by multiple users by now if it's a known issue. Or is it just you and a handful of unlucky users due to some buggy Bluetooth card-driver combo? There are a lot of short straws you can pull in the Bluetooth stack lottery that don't necessarily stem from the OS.

WhackyIdeas 3y ago

Maybe this particular hack isn’t vulnerable to Windows. But, with my Flipper Zero I can create a bluetooth device and as soon as a Windows client connects it will think it’s a keyboard and fire whatever powershell commands I want.. I have only used it to do a RickRoll myself (spawning Youtube), ai haven’t tried anything illegal with it. Now I have all of my bluetooth disabled. But, I don’t know how to remove bluez without breaking linux.

teddyh 3y ago

> knowing that the Windows Bluetooth stack has the architectural equivalent of BlueZ's `ClassicBondedOnly=false` Did you mean “ClassicBondedOnly=true”?