Bluetooth Headphone Jacking: A Key to Your Phone [video]

Re:Bluetooth Headphone Jacking: A Key to Your Phone [video] by willnix on Thursday January 01, 2026 @02:41PM (#46457307)

One of the researchers here. Many people seem to prefer text to videos, which I sympathize with. So please excuse me hijacking the top comment with links to our blog post and white paper:

Blog: https://insinuator.net/2025/12/bluetooth-headphone-jacking-f...

Paper: https://ernw.de/en/publications.html

[ Parent | on HN ]

Re:Bluetooth Headphone Jacking: A Key to Your Phone [video] by avidiax on Thursday January 01, 2026 @11:27PM (#46461415)

Did you look into whether the spoofed device can also be "upgraded" to be used as an HID device, like a mouse or keyboard? That upgrade would be several CVEs against the OS vendors.

That would make the attacks potentially silent, since the attacked could simulate keypresses to dismiss notifications, or can at least keep the target unable to respond by spamming home/back or pressing power and simulating a swipe to shutdown.

[ Parent | on HN ]

Re:Bluetooth Headphone Jacking: A Key to Your Phone [video] by j16sdiz on Friday January 02, 2026 @02:50AM (#46462445)

You can't change the device class.

It would be an vulnerability on the host stack to accept that.

[ Parent | on HN ]