3 ms·
>Once the attacker has paired with the target phone or computer A small detail, though, the target device has to accept the connection. Once someone lets you i
by DeathArrow 3y ago
>Once the attacker has paired with the target phone or computer
A small detail, though, the target device has to accept the connection. Once someone lets you in his house, you can steal his silver, yes.
- clort 3y agoYes, i am reading the title which says 'Bluetooth keystroke-injection' which is concerning on one level, but in fact the article talks about authenticating a device without user interaction which seems way more serious to me. however, it also mentions > stay tuned for Part 2: More Vulnerabilities so I guess we'll see
- overstay8930 3y agoHow in the world is this a CVSS 8.8 if this is the case? What a waste of everyone's time if this is true.
- Koffiepoeder 3y agoCtrl+alt+t (insert malicious shell command)
- TylerE 3y agoOk, but any reasonable threat model has assumed forever that physical access to the machine is essentially game over regardless. Or to put it another way... who cares about that when the adversary is in position to just do a snatch and grab of the whole device?
- stavros 3y agoWireless protocols don't count as physical access, since I can perform the attack from a car outside your house.
- jeroenhd 3y agoThis is an automatic bluetooth pairing attack. With the right equipment (which can be as simple as a Pringles can and an antenna aimed through a window) you can execute this attack from a hundred meters away. That's not physical access.
- 127361 3y agoEven more scary: (launch child porn web site)
- overstay8930 3y agoThat is only part of the CVSS scoring system. Not only do you need near-physical access (i.e. not open to the internet, already drops the rating significantly), it requires the victim to interact with a suspicious prompt, which basically drops it to the level of a phishing email (i.e. not CVSS 8.8).
- fomine3 3y agoNo victim operation is needed, just type it by automated pseudo HID device
- TylerE 3y agoPeople are silly about security. Has your social media not been flooded with oldsters circulating that copypasta about how iOS contact sharing is going to let thieves "STEAL YOUR INFO!!1?!111"?
- atoav 3y agoSo you are saying this is not true? You mean they got Google to react to a made up vulnerability? Did you even read the text?
- TylerE 3y agoThey’re not talking about this. They’re talking about the NameDrop feature added in iOS 17. The one with multiple confirmation steps, while the facebook memes talk like hackers can steal your info from long range with no intervention. https://www.snopes.com/fact-check/iphone-namedrop-warning/ https://www.snopes.com/fact-check/iphone-namedrop-warning/
- atoav 3y agoAh thanks for the context
- deleted 3y ago[deleted]
- jgilias 3y ago> The vulnerabilities work by tricking the Bluetooth host state-machine into pairing with a fake keyboard without user-confirmation.
- mihalycsaba 3y agoIs this possible to pair a keyboard device to Android without confirmation?
- stavros 3y agoIf the vulnerability author is to be believed, yes.
- keep_reading 3y agoIt's apparently a feature of ancient Bluetooth