News for hackers. Stuff that matters.

A comment on Critical Bluetooth vulnerability in Android. Parent comment

Re:Critical Bluetooth vulnerability in Android by dspillett on Friday February 07, 2020 @08:31AM (#22265743)
At least there is the mitigation that it isn't exploitable unless the device is scanning for new devices to pair with, at least by my reading of the reports I've seen.

Phones are not usually in that state unless the BT settings screen is open. Otherwise it would drain excess battery in normal use.

[ Parent | on HN ]
Re:Critical Bluetooth vulnerability in Android by londons_explore on Saturday February 08, 2020 @02:12AM (#22274447)
No - it is always exploitable, but you need to know the Mac address to pull off the exploit.

While scanning for devices, a phone reveals the Mac address. There are other ways to know the Mac address too.

[ Parent | on HN ]