4 ms·
Obviously any vulnerability is bad, but I'm trying to understand just how bad this one is. What "scary" things could an attacker do? It doesn't sound like they
by schrodinger 2y ago
Obviously any vulnerability is bad, but I'm trying to understand just how bad this one is. What "scary" things could an attacker do?
It doesn't sound like they could listen in on a phone call you're having without your knowledge, or even an audio stream, since it breaks the original connection, right? So is the worst they could do is come within a pretty short distance of you, scan for your mac address, and the auto-connect and play some noise into your ears? Or is there more?
I suppose you could do something like take over the airpods of a high-level celebrity or politician while they're on a video call, that could be bad (but caught instantly). Anything worse?
- Gigachad 2y agoRealistically the worst thing is just being annoying. If it was left unpatched, someone would make an airpod jammer app for the flipper zero and cause annoyance in public places killing the audio on everyones airpods.
- etbebl 2y agoA lot of people wear airpods around even if they're not actively using them, right? So if that's the case, you could use the microphone to eavesdrop on an in-person conversation. Although since it has to be within Bluetooth range, might be easier to just eavesdrop normally.
- anamexis 2y ago> A lot of people wear airpods around even if they're not actively using them, right? Do they?
- stirlo 2y agoYes. They’re easy to just leave in your ears and go about your day
- cpuguy83 2y agoEspecially with the loud noise suppression.
- charrondev 2y agoFor me it’s the opposite. They have a “transparency” feature that works lets through ambient noise. I often wear one set to transparency when I’m alone and have a podcast going or something. Ideal for something like a grocery store but still leaves me with full awareness. They also detect if I start speaking and automatically pause whatever is playing.
- dagmx 2y agoLoud noise suppression works with transparency mode. You might be thinking of the similarly named noise cancellation mode which works opposite to transparency. Loud noise suppression does a temporary switchover when a loud noise happens to try and protect your hearing.
- cozzyd 2y agoYes they do, and they look as ridiculous as you think
- KawaiiCyborg 2y agoHow would you as an observer tell if somebody is using their AirPods to listen to music or whether they're just in their ears for noise cancellation and thus "look ridiculous"?
- sambazi 2y agothat's the point: i can't tell and that is uneasing
- KawaiiCyborg 2y agoI don't understand why yet. Why is it important to you to know whether someone is listening to music or not? Why do you need to be able to tell at all?
- recursive 2y agoIt indicates whether you would be interrupting if you tried to talk to them.
- crazygringo 2y agoDepends on what is meant by "not actively using them". I use mine in noise-cancelling mode all the time, without music/podcasts/anything. But the noise-cancelling is definitely active. Always when I'm in the subway, along busy streets full of honking and emergency vehicles, and so forth. Makes urban life much more tolerable.
- Brajeshwar 2y agoThis is a weird behavior and it seems people, these days, consider this normal! I usually stop talking if someone wears a headphone and give them the opportunity to finish listening to whatever they are listening to. How do one talk to someone whose ears are blocked by plugged-in headphones (even if they are passive, which I won't know). I believe it is a courtesy to remove one's headphone when talking to another person.
- SoftTalker 2y agoSame. If I see someone has earphone/airpods in I don't speak to them. I'll indicate with gestures "take your earphones out" if they are trying to talk to me.
- kortilla 2y agoWhy would you do that if they are actively talking to you? You know some people use them to hear better, right?
- sambazi 2y agosome do, most don't. wearing headphones gives way to the assumption that the person is listening to something other than their surroundings; their talking is probably directed at someone on the phone. hearing aids can be used as headphones as well, but generally aren't.
- kortilla 2y agoSo if someone is talking to you, you make them remove their listening device just in case they are listening to someone else? You’re being an asshole and you need to stop this behavior. Wait until it’s clear someone can’t hear you before making this gesture.
- sambazi 2y ago> So if someone is talking to you, you make them remove their listening device just in case they are listening to someone else? i don't "make them" but i don't feel accepted or heard until they do and this will limit my interactions with them (for better or worse). > You’re being an asshole and you need to stop this behavior. Wait until it’s clear someone can’t hear you before making this gesture. seems like you got some things backwards and this is one of them.
- swatcoder 2y agoObvious ones are that an attacker could play a damagingly loud noise, could eavesdrop on your in-person environment if you're wearing the AirPods without using them, as many do, or could masquerade as a caller without actually using a call service or leaving call records. It also provides a straightforward avenue for further chains of exploit, if some were known to the attacker, since taking over the bluetooth connection represents a pretty wide channel of opportunity.
- grotorea 2y agoStupid question but can AirPods play a noise that can do damage faster than a person can remove them? Call my a cynic but if that was possible it would be a well known "prank" in the edgier corners of the Internet?
- doodpants 2y agoApparently so. https://lawandcrime.com/lawsuit/airpods-caused-permanent-hearing-loss-after-blaring-amber-alert-tore-apart-12-year-old-boys-ear-drum-lawsuit-says/ https://lawandcrime.com/lawsuit/airpods-caused-permanent-hea...
- withinboredom 2y agoWorst case, someone could create a device they drop in your bag that records everything from your headphones. Maybe even in the shape of a USB drive or something. I believe the "fast connect" protocol allows you to be "connected" to more than one device at a time, so you likely wouldn't even notice. Another attack would be to set "coffee coasters" around an office as a janitor, that snagged audio from any nearby pods. Essentially, you basically have the hard part done for any bugs, you just need to build a device with a little battery, a BT transmitter, and storage; then you've got high quality audio near where anyone is speaking.
- tlb 2y agoThey could also just drop a device with a microphone in your bag and listen to both sides of every conversation. Involving bluetooth seems like an extra complication.
- withinboredom 2y agoMicrophones in a bag don’t have great pickup and are obvious once found. Something electronic? Everyone has that laying around.