New Bluetooth Vulnerability Leak, Your Passcode to Hackers During Pairing (gbhackers.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 02 Oct 2024 12:00
https://sh.itjust.works/post/26053723

#cybersecurity

threaded - newest

JoMomma@lemm.ee on 02 Oct 2024 12:56 next collapse

Who uses Bluetooth passcodes?

remotelove@lemmy.ca on 02 Oct 2024 13:14 collapse

They are used for most pairing sequences, but we don’t type them in anymore. They are used more to validate that it’s you that are connecting two devices.

reddig33@lemmy.world on 02 Oct 2024 19:41 collapse

In other words, this vulnerability isn’t that big of a deal.

remotelove@lemmy.ca on 02 Oct 2024 20:09 collapse

Maybe? There are a ton of shitty BT implementations in the wild that will never get patched. This does seem quirky at first glance, but could just as easily affect millions of vehicles, as an example.

If I was so inclined, I would camp out in a busy parking lot with an antenna just to see what I could find.

atrielienz@lemmy.world on 02 Oct 2024 13:30 next collapse

The comma makes this title read very weird.

massive_bereavement@fedia.io on 02 Oct 2024 13:50 next collapse

Didn't know Christopher Walken was into netsec.

c0smokram3r@midwest.social on 02 Oct 2024 19:23 collapse

Now imagine: I use arch, by the way 😅😂

can@sh.itjust.works on 02 Oct 2024 15:38 next collapse

I can’t seem, to parse it for the life of me

toynbee@lemmy.world on 03 Oct 2024 11:49 collapse

I would have called this a comma splice, but apparently what I was taught that is - just a comma incorrectly inserted into a sentence - is not the entirety of what a comma splice is.

en.m.wikipedia.org/wiki/Comma_splice

drspod@lemmy.ml on 03 Oct 2024 02:47 collapse

This vuln is not new, it was published 3.5 years ago: nvd.nist.gov/vuln/detail/CVE-2020-26558