Major Vulnerability Discovered in Bluetooth Once Thought Safe

first_imgStay on target Here we go again. Another day, another critical security breach. Researchers at the Technion-Israel Institute of Technology and the Hiroshi Fujiwara Cyber Security Research Center have found an exploit in the wireless tech. This allows them to read information directly. Thing is, until, now, essentially, Bluetooth was largely considered secure.Unlike Wifi systems or other networks, Bluetooth requires pairing. So each device is only vulnerable when they’re actively searching for one another. Once a phone and a car, for instance, have connected though, they only direct messages to one another and can use a private security key on the backend. An encrypted backchannel connects the devices and you’re largely set. For some time, because of this, Bluetooth was considered quite resistant to attack. Resistant, but not invulnerable. “The technology we developed reveals the encryption key shared by the devices and allows us, or a third device, to join the conversation,” Professor Eli Biham, head of the Hiroshi Fujiwara Cyber Security Research Center told “We can eavesdrop on or sabotage a conversation. As long as we do not actively participate, the user has no way of knowing that there is a third party listening in.”Bluetooth uses a relatively advanced method of cryptography, but the researchers found a way around it using math (because of course, funky numbers are the fix). Thankfully the team has been in contact with hardware and software companies to get fixes out.We also contacted major international companies including Intel, Google, Apple, Qualcomm, and Broadcom, which hold most of the relevant market, and informed them about the breach and ways to fix it,” Biham said. “Google defined the breach as ‘severe’ and distributed an update about a month ago; Apple released an update this week. Other manufacturers who heard about the breach contacted us in order to check their products.”Let us know what you like about Geek by taking our survey. This Adapter Lets You Add Bluetooth to Your Nintendo SwitchBluetooth Direction Finding Is Like Super-Precise GPS for Connected Things last_img