Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bluetooth keystroke-injection in Android, Linux, macOS and iOS

github.com

Post reply on HN
Print view View original

111–120 of 265 posts

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#111

Post by ofrzeta »

wkipling wrote: post #89
exikyut wrote: post #25

This doesn't mention Windows at all. That sounds great on the surface, but it would be really helpful to understand why Windows is not actually at fault so I can better measure the risk profile. For example, knowing that the Windows Bluetooth stack has the architectural equivalent of BlueZ's `ClassicBondedOnly=false` would be really helpful to know; that would tell me to keep an eye out for it being `true` in environ…

Because Bluetooth barely works normally for Windows

I think you mixed up Windows and Linux. Or maybe both have their share of problems. Or maybe it is, as some people here say, impossible to implement Bluetooth properly.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#112

Post by 360MustangScope »

FirmwareBurner wrote: post #103
wkipling wrote: post #89

Earlier quoted context omitted.

Because Bluetooth barely works normally for Windows

I know it's a popular trope on HN to say nothing on Windows ever works but anecdotally I've been using Bluetooth on windows for over 10 years now from 7 to 11, and never had any issues whatsoever that were related to Windows itself. The only issues I have are Bluetooth disappears after wake from sleep which after research appears to be due to buggy firmware of the Mediatek network card installed in the laptop and not…

I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine.

My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect.

I have to delete the controller and then repair it each time. Sometimes I can’t even delete it and have to go into RegEdit and delete it. The delete button just does nothing sometimes in that menu

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#113

Post by WhackyIdeas »

exikyut wrote: post #25

This doesn't mention Windows at all. That sounds great on the surface, but it would be really helpful to understand why Windows is not actually at fault so I can better measure the risk profile. For example, knowing that the Windows Bluetooth stack has the architectural equivalent of BlueZ's `ClassicBondedOnly=false` would be really helpful to know; that would tell me to keep an eye out for it being `true` in environ…

Maybe this particular hack isn’t vulnerable to Windows.

But, with my Flipper Zero I can create a bluetooth device and as soon as a Windows client connects it will think it’s a keyboard and fire whatever powershell commands I want.. I have only used it to do a RickRoll myself (spawning Youtube), ai haven’t tried anything illegal with it.

Now I have all of my bluetooth disabled. But, I don’t know how to remove bluez without breaking linux.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#114

Post by FirmwareBurner »

360MustangScope wrote: post #112
FirmwareBurner wrote: post #103

Earlier quoted context omitted.

I know it's a popular trope on HN to say nothing on Windows ever works but anecdotally I've been using Bluetooth on windows for over 10 years now from 7 to 11, and never had any issues whatsoever that were related to Windows itself. The only issues I have are Bluetooth disappears after wake from sleep which after research appears to be due to buggy firmware of the Mediatek network card installed in the laptop and not…

I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller an…

The Xbox is a popular controller so its Bluetooth connection issues on windows should be well documented online by multiple users by now if it's a known issue. Or is it just you and a handful of unlucky users due to some buggy Bluetooth card-driver combo?

There are a lot of short straws you can pull in the Bluetooth stack lottery that don't necessarily stem from the OS.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#115

Post by 127361 »

Koffiepoeder wrote: post #57
overstay8930 wrote: post #40

Earlier quoted context omitted.

How in the world is this a CVSS 8.8 if this is the case? What a waste of everyone's time if this is true.

Ctrl+alt+t (insert malicious shell command)

Even more scary: (launch child porn web site)

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#116

Post by lencastre »

rplnt wrote: post #62
kelnos wrote: post #46

I had to dig a little to figure this out, so, to keep yourself safe: Android: disable Bluetooth when you're not using it (but you'll be vulnerable while you are). My Pixel just got the 12/5/2023 security update, which fixes the issue; not sure about non-Pixel phones. Linux: Open up /etc/bluetooth/input.conf and set ClassicBondedOnly=true (in my case I just had to uncomment this, not add anything). The next version of…

Too bad iOS makes it very hard to disable bluetooth. Android was swipe+click, iOS it's swipe, two long presses, two clicks. Or you can type it, but that's obviously more clicks (though possibly faster). I used to make the effort when I switched from Android, but I already gave up...

Make a shortcut to disable or enable and add that shortcut to your Home Screen

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#117

Post by cma »

rplnt wrote: post #73
haraldooo wrote: post #66

Earlier quoted context omitted.

Am I missing something? Swipe from the top, tap to disable BT?

Notice the difference in color when you do that. As the other comment pointed out, it only disconnects devices. Apple makes it hard for their users to disable bluetooth (or gps) so features like airtag work well. You are sacrificing your battery life (and I guess privacy and security) for the ecosystem to work.

Google won't let you use GPS for maps without also turning on wifi for similar reasons I guess. It does make it more accurate but shouldn't be required.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#118

Post by yunohn »

> iOS and macOS are vulnerable when Bluetooth is enabled and a Magic Keyboard has been paired with the phone or computer

I’d really love more details on this, especially given the Magic Keyboard pairing requirement. Surely they can disclose the exploit now that it’s been fixed?

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#119

Post by pcthrowaway »

kelnos wrote: post #47
bee_rider wrote: post #33

Earlier quoted context omitted.

Wireless keyboard generally seem like a totally terrible idea, just waiting for hacks. The author mentions not going after wireless gaming keyboards because they were the “wrong kind of mess,” I assume, security through abstrusity :)

I never really understood the benefits of a wireless keyboard. Do people usually carry their keyboard from their desk with them when they take their laptop somewhere else? I guess I could maybe -- maybe -- see the convenience if you have some sort of small-form-factor keyboard that you stash in your bag. But still, the wire doesn't seem like much of a burden, and personally I'd find the annoyance of needing to ensure…

If you're using an external display, your display might not be near your computer.

In that case, you likely want a wireless keyboard and mouse to use it.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#120

Post by tesdinger »

kelnos wrote: post #46

I had to dig a little to figure this out, so, to keep yourself safe: Android: disable Bluetooth when you're not using it (but you'll be vulnerable while you are). My Pixel just got the 12/5/2023 security update, which fixes the issue; not sure about non-Pixel phones. Linux: Open up /etc/bluetooth/input.conf and set ClassicBondedOnly=true (in my case I just had to uncomment this, not add anything). The next version of…

I don't have an input.conf file on my OnePlus phone. There are bt_stack.conf and bt_did.conf in the same directory though.
Post reply on HN