News for hackers. Stuff that matters.
Re:Key Negotiation of Bluetooth Attack by miohtama on Friday August 16, 2019 @11:42AM (#20716278)
Obvious attack target: Bluetooth keyboards for keylogging.
Re:Key Negotiation of Bluetooth Attack by koolba on Friday August 16, 2019 @11:46AM (#20716331)
Obvious solution: never use wireless input devices.

Has the added benefit of never having to deal with charging batteries or charging.

Re:Key Negotiation of Bluetooth Attack by xnyan on Friday August 16, 2019 @12:56PM (#20717063)
Obvious solution, don't use anything that emits electromagnetic radiation: https://en.m.wikipedia.org/wiki/Van_Eck_phreaking
Re:Key Negotiation of Bluetooth Attack by wincy on Friday August 16, 2019 @01:09PM (#20717187)
Well, time to go back to typing everything on a typewriter.
Re:Key Negotiation of Bluetooth Attack by vardump on Friday August 16, 2019 @01:33PM (#20717438)
Your data will leak regardless because of typewriter keystroke acoustics [0]. So you better have a soundproof room for that purpose.

Keep any electronics out of the room that might have a microphone. Like phones, laptops, or running mechanical hard drives [1].

[0]: https://arxiv.org/abs/1609.09359

[1]: https://spqr.eecs.umich.edu/papers/Kwong-HDDphone-IEEE-SP-20...

Re:Key Negotiation of Bluetooth Attack by loeg on Friday August 16, 2019 @10:52PM (#20721670)
Re:Key Negotiation of Bluetooth Attack by dangus on Friday August 16, 2019 @12:28PM (#20716812)
Well you can avoid all software vulnerabilities by not using computers at all, right?

Maybe I should use an Ethernet cable on my iPhone instead of LTE, that should be convenient.

Re:Key Negotiation of Bluetooth Attack by throwamay1241 on Friday August 16, 2019 @07:58PM (#20720840)
As soon as people stop treating the physical layer as a security control, the better.

Encrypt your damn comms.

Re:Key Negotiation of Bluetooth Attack by acd on Friday August 16, 2019 @04:27PM (#20719393)
Never trusted wireless keyboards always uses cable connected devices. Although those could still be tapped by a usb sniffer but it’s more safe than wireless.

The Bluetooth attack seems similar to car keyfob attacks. Block and replay.

A directional antenna could do the Bluetooth attack from distance.

Counter measures to key logging use one time passwords otp. A password strength also depends on password age.

Re:Key Negotiation of Bluetooth Attack by fortran77 on Friday August 16, 2019 @02:31PM (#20718108)
Wireless mice that use their own little receivers and not bluetooth are also very susceptible to monitoring.

See: https://www.theverge.com/2019/7/14/20692471/logitech-mouseja...

I use a wired keyboard, but I also use a wireless mouse! I've been careful at DEFCON not to.

Re:Key Negotiation of Bluetooth Attack by jwtorres on Friday August 16, 2019 @12:37PM (#20716903)
Only keyboards that use BR/EDR are affected. BLE keyboards are unaffected.
Re:Key Negotiation of Bluetooth Attack by SwaraLink on Friday August 16, 2019 @01:13PM (#20717222)
Sadly, many BLE keyboards on the market today are still not using the LE Secure Connections feature during pairing. The LE legacy pairing algorithm does not use Elliptic Curve Diffie-Hellman Key Exchange, and is easily susceptible to having the encryption cracked via passive eavesdropping.
Re:Key Negotiation of Bluetooth Attack by etqwzutewzu on Friday August 16, 2019 @02:53PM (#20718373)
Do you know one keyboard on the market today that has LE Secure Connections feature enabled?
Re:Key Negotiation of Bluetooth Attack by SwaraLink on Friday August 16, 2019 @08:52PM (#20721151)
I don't know of any because I haven't tested too many, but LE Secure Connections has been around since the Bluetooth 4.2 spec, which was adopted in 2014. The feature is supported by most single-mode BLE chipsets / stacks that have been released since then. I'd be surprised if there were none that supported it, though I don't know for sure.