Someone could take over your Bluetooth devices as simply as turning a knob
In brief: Researchers have found a flaw in Bluetooth’s authentication protocols which can be exploited in a clever, man-in-the-middle attack between two paired devices.
A newly discovered vulnerability in the Bluetooth protocol shows how a malicious actor can reduce the encryption strength for the keys used in the pairing of Bluetooth devices and gain complete control over them as a result. The official body that’s in charge of the Bluetooth standard discovered the flaw and is serious enough that it required a change to the official specification.
The way it works is quite creative: instead of trying to brute-force a pairing with your device, an attacker could instead try to interfere with the normal pairing procedure, when both devices have to agree on the connection using an exchange of public keys that verify their identities. These keys change every time, but if the attacker can guess them fast enough, they can force a shorter encryption key for the next pairing, as low as a single octet — which is the size of one character.
The flaw was discovered by researchers from the Singapore University of Technology and Design, Oxford, and CISPA Helmholtz Center for Information Security, who dubbed it KNOB, short for “Key Negotiation of Bluetooth.” The tests were conducted on more than 17 different Bluetooth chips that are common in consumer products, and all of them were vulnerable to the KNOB attack.
The findings were presented at the USENIX Security Symposium, and while Bluetooth Low Energy isn’t affected by KNOB, traditional Bluetooth chips from major manufacturers like Intel, Broadcom, Qualcomm, Chicony, and even Apple are vulnerable to the attack. The reason it was deemed as a serious flaw is that victims of a KNOB attack are none the wiser about it. It’s also worth noting that it even works on previously paired devices, provided that both are vulnerable.
On the upside, the whole attack is a race against time, and the hacker would have to be in the range of the two devices at the exact moment the pairing takes place. Then, they’d have to “intercept, manipulate, and retransmit key length negotiation messages between the two devices while also blocking transmissions from both,” which is as challenging as it sounds. And the attack needs to be repeated this way every time encryption gets enabled.
Bluetooth SIG notes there is no evidence that anyone has exploited the vulnerability in the wild, and while all current Bluetooth BR/EDR devices are susceptible to it, there is an easy fix that Microsoft and Apple are already rolling out. The Bluetooth Core Specification has also been changed to require manufacturers to hardcode a minimum encryption key length of seven octets (characters) in future devices.
Earlier this year there was a similar revelation of a security flaw in the Bluetooth protocol that allows devices to be tracked using an easier exploit. And yet both vulnerabilities may be less of a reason to worry than the 10 percent tariffs that will reflect in the price of many devices imported in the US starting next month.
Credits to Adrian Potoroaca for this informative article.
Hi, I do think this is an excellent site. I stumbledupon it ;
) I’m going to come back once again since I bookmarked it.
Money and freedom is the best way to change, may you be rich and
continue to guide other people. Hi, I log on to your blogs on a regular basis.
Your writing style is awesome, keep it up!
Hi Kiersten,
Thank you for always checking on our post. We will continue to guide other people in resolving computer-related concerns.
You may also visit our official website: http://www.reimageplus.com
Regards,
Deborah Moore
I’m not that much of a internet reader to be honest but your blogs really nice, keep
it up! I’ll go ahead and bookmark your website
to come back later on. All the best
Hi,
We are glad that you enjoyed reading the blogs that we posted.
Thank you for including our website on your bookmarks.
You may also visit our official website (www.reimageplus.com) if you need further assistance on your computer.
Best Regards,
Kerry Hershey
Reimage
Hi, I think your site might be having browser compatibility issues.
When I look at your blog in Ie, it looks fine but when opening in Internet Explorer,
it has some overlapping. I just wanted to give you a quick heads up!
Other then that, awesome blog!
Hi!
Thank you for bringing this matter to our attention. We’ll definitely check it out using Internet Explorer.
If you have further questions, please let us know. You can also visit our website, http://www.reimageplus.com
Cheers!
Regards,
Deborah
I’m not that much of a online reader to
be honest but your blogs really nice, keep it up!
I’ll go ahead and bookmark your website to come back
later on. Cheers
Hello!
Thank you for this feedback! We’re happy to hear that you like our blogs!
For questions or inquiries, you may visit our website http://www.reimageplus.com
Regards,
Matthew
Remarkable issues here. I’m very happy to look your post.
Thank you a lot and I am having a look forward
to touch you. Will you please drop me a mail?
Hi, just wanted to say, I liked this post. It was practical.
Keep on posting!
My brother recommended I might like this website. He was totally right.
This post truly made my day. You can not imagine just
how much time I had spent for this info! Thanks!
Hi!
Thank you for your feedback.
Regards,
Matthew
Quality posts is the key to interest the visitors to go to see the web page, that’s what
this web site is providing.
Thank you.
Best Regards,
Kerry Hershey
say thanks to a lot for your internet site it helps a lot.|
Thank you.
Best Regards,
Kerry Hershey
Wow, beautiful website. Thnx …|
Thank you.
Best Regards,
Kerry Hershey
Your tips is amazingly interesting.|
Thank you.
Best Regards,
Kerry Hershey
Wow….such a valuable online site.|
Thank you.
Best Regards,
Kerry Hershey
You’re an extremely useful internet site; could not make it without ya!|
Thank you.
Best Regards,
Kerry Hershey
Incredible, such a beneficial site.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Great internet site! It looks really professional! Sustain the good job!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Lovely Web site, Maintain the wonderful work. Thanks a ton.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
How are you, excellent websites you’ve presently.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Really this is a handy internet site.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Hiya, nice web page you have got at this time there.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
I adore this website – its so usefull and helpfull.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Great looking website. Assume you did a bunch of your very own coding.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Great looking site. Think you did a great deal of your very own coding.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
With thanks! It is definitely an amazing web page.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Especially educational….looking forward to visiting again.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
You’re a very useful internet site; could not make it without ya!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Good day, neat web-site you possess right now.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Great website! It looks extremely expert! Sustain the good work!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
What’s up, very good web-site you have at this time there.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Great Web site, Maintain the great job. Thanks for your time.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Wow because this is extremely excellent job! Congrats and keep it up.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Great Web page, Keep up the beneficial work. Appreciate it.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
I treasure the information on your web site. Thanks for your time.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Many thanks very beneficial. Will share site with my pals.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Highly educational….looking forth to coming back.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Hey there, good web page you have got in here.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Thank you so much for sharing this very good websites.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Love the website– really individual pleasant and whole lots to see!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Passion the site– really individual friendly and lots to see!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
say thanks to a lot for your site it assists a whole lot.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Extremely revealing, look forwards to coming back.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
The tips is amazingly significant.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Sustain the incredible work !! Lovin’ it!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
I delight in the details on your web site. Thanks a ton.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Maintain the great job and generating the group!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Much thanks! This a superb web page!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Especially informative look onward to coming back.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Thanks for the purpose of supplying this kind of superior details.
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Extremely individual friendly website. Huge information offered on few gos to.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
I like this site – its so usefull and helpfull.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Very good content you’ve got there.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
You have among the best internet sites.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Keep up the excellent work !! Lovin’ it!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Whoa….such a good web-site.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
say thanks to so much for your website it aids a whole lot.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
I love this site – its so usefull and helpfull.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Great looking internet site. Think you did a whole lot of your own coding.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Incredibly individual friendly website. Great information offered on few gos to.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
I like browsing your internet site. Appreciate it!|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
thank so much for your site it assists a whole lot.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Many thanks, this website is extremely handy.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Incredible, this is a good website.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
I love this website – its so usefull and helpfull.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
You have the best websites.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
Really helpful, look forwards to coming back.|
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee
you are in point of fact a excellent webmaster.
The web site loading pace is incredible. It sort of feels that you’re doing any distinctive trick.
In addition, The contents are masterwork. you’ve done a great process
in this subject!
Hi,
We appreciate your feedback.
Watch out for more interesting articles.
Regards,
Kylee