New BLUFFS attack lets attackers hijack Bluetooth connections

ijeff@lemdro.idmod to Android@lemdro.id – 62 points –
bleepingcomputer.com
16

So basically all Bluetooth devices are affected? This is huge news.

It's also crazy how there is this push from all OEM to remove headphone jack and force consumers to use wireless earphones, further making the attack surface much wider.

Even now I think we should've added a second USB Port if we were going to remove the headphone jack.

A second USB port or headphone jack adds $1(US) to the manufacturing cost, if even that. Can't cut into the corporation's massive profits by even a little. Nope, can't have that.

I wonder if it would still be an issue had Bluetooth won the wireless network stack war.

Wireless Network Stack War? Do you mind enlightening me? I've never heard of such a thing.

It came down to Wi-Fi and Bluetooth to be the wireless network standard. For a hot minute it wasn't clear who would come out the winner.

I can't find shit about it though. It was around 2000ish.

You’re probably thinking about homerf, which was the competitor to WiFi. I don’t think Bluetooth was ever marketed as an alternative to WiFi.

It could be a Mandela effect thing. 🀷

not even close. They were always intended for different purposes. They never were in competition

Bluetooth has it's own stack. Wifi typically runs tcpip. Your post doesn't even make sense because both wifi and Bluetooth coexist today so clearly there was no "winner".

You aren't crazy. I remember this being posited as a wifi alternative too. They claimed you could have a Bluetooth signal that wouldn't reach beyond the walls of your home, preventing outside people (neighbors etc) from piggybacking on your network even if they had a password or the network was open because of the short range. And that tech does sort of exist today. A lot of mesh wifi routers use Bluetooth to connect to each other and provide that wifi to you in whatever part of your home you happen to be in. IOT devices do this as well. I believe this was called a piconet. But it never caught on, and I think it was more a theoretical idea than an actual real push.

Oh wow, I'm glad Bluetooth lost given that it's vastly inferior. I mean we're even starting to see wifi headphones now, soon Bluetooth will be relegated to legacy devices.

When these kinds of exploits are discovered, my first fear is people with Flipper Zeros running custom firmware exclusively for trolling...

Imagine you're listening to music in your headphones (or in your car with Bluetooth), then without warning it reconnects and now you're hearing baby shark 😣

Jokes on them. I was already listening to baby shark on loop.

I have a Bluetooth amp in my kitchen. I live in a row home. One day it started blasting country music... Turned it off for a couple hours, never happened again. Probably a curious neighbor, but still funny.