Comment on Are BLUFFS attacks still a vulnerability to the average Bluetooth user?
BearOfaTime@lemm.ee 1 year ago
Well, since I’ve not seen any updates to the BT stack, I’d go with yes.
Stopping using BT seems a bit extreme. What’s your risk?
I only use BT for listening to music/podcasts. I never allow BT connections to have access to contacts, messages, etc. So the only risk (contacts/messages) is pretty well mitigated.
And IIRC, BLUFFS is a MITM risk (existing connection can be spoofed because of how a key is managed), so only connect to devices you control, don’t allow random connections, leave BT off as much as is reasonable, and perhaps delete/recreate connections occasionally (I think the key gets regenerated on a new connection?).
The most someone would get from my BT is listening to my podcasts.
Rebels_Droppin@lemmy.world 1 year ago
Thanks for responding, I don’t necessarily have any risk, but just didn’t want to open myself up to anything since I didn’t quite understand what information could be taken. Better safe than sorry approach you know?
But good to know that in being selective in permissions can mitigate some issues. I worry about a few family members who are not tech literate at all and use rail travel for work that puts them around people in masse and frivolously give permissions to their devices in different vehicles.
BearOfaTime@lemm.ee 1 year ago
Yea, “frivolous” is the part that’s concerning. Perfect description of how average users approach tech. I’ll be borrowing that!
Guess I need to write up something for family and friends, a good summary of BT risks and how to manage it. Sigh.