Live data from Hacker News

Bluetooth keystroke-injection in Android, Linux, macOS and iOS

github.com

121–130 of 265 posts

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#121
Bluetooth is the gift that keeps on giving. Not sure why my Ubuntu insists on enabling it on every boot, at least on my hardware.

Good thing PC peripherals moved away from this junk. It was fascinating watching Logitech sell 300 euro BT keyboard with literally a second of lag, or "high end" mice with 500ms or more.

Hell, I barely use my PS5 controller because it sucks ass compared to my old Xbox 360 pad. Lag, lag, lag. 8 guess the majority does not notice or care, though.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#122

If you can silently pair to a phone, you can make the phone dial whatever number you want. Recently found this out when connecting the serial terminal to an earbud for repair (it wouldn't auto-connect to the other earbud).

How would you reliably unlock the phone and get to the dialer app? Given how varied home screen layouts are, even an unlocked phone might be hard to attack this way

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#123
post #46

I had to dig a little to figure this out, so, to keep yourself safe: Android: disable Bluetooth when you're not using it (but you'll be vulnerable while you are). My Pixel just got the 12/5/2023 security update, which fixes the issue; not sure about non-Pixel phones. Linux: Open up /etc/bluetooth/input.conf and set ClassicBondedOnly=true (in my case I just had to uncomment this, not add anything). The next version of…

Seems like the flag defaults to true since December 7 (Fedora 38) with bluez v5.70-4: $ rpm -q --changelog bluez | grep CVE-2023-45866 -C1 * Thu Dec 07 2023 Peter Robinson - 5.70-4 - Add mitigation for CVE-2023-45866

This seems correct, however 'ClassicBondedOnly=true' is commented out in '/etc/bluetooth/input.conf' in Fedora 39 with bluez v5.70-4 anyways.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#124
post #62

Earlier quoted context omitted.

Too bad iOS makes it very hard to disable bluetooth. Android was swipe+click, iOS it's swipe, two long presses, two clicks. Or you can type it, but that's obviously more clicks (though possibly faster). I used to make the effort when I switched from Android, but I already gave up...

I had to create custom shortcuts to disable WiFi and Bluetooth after Apple made the ones from Control Center useless.

It makes sense for most people. When they want to turn those off they want to either disconnect from WiFi or disconnect from Bluetooth audio, and they don’t expect things like airdrop or their Apple Watch to stop working when they turn them off.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#125

Earlier quoted context omitted.

I know it's a popular trope on HN to say nothing on Windows ever works but anecdotally I've been using Bluetooth on windows for over 10 years now from 7 to 11, and never had any issues whatsoever that were related to Windows itself. The only issues I have are Bluetooth disappears after wake from sleep which after research appears to be due to buggy firmware of the Mediatek network card installed in the laptop and not…

I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller an…

For what it’s worth, I had a similar experience with my old Xbox controller. I bought a new one and the issue went away.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#126
post #62

Earlier quoted context omitted.

Too bad iOS makes it very hard to disable bluetooth. Android was swipe+click, iOS it's swipe, two long presses, two clicks. Or you can type it, but that's obviously more clicks (though possibly faster). I used to make the effort when I switched from Android, but I already gave up...

It’s impossible to permanently disable Bluetooth on iOS. Every iOS update re-enables it.

Same on MacOS. It got to the point where I made a start up script to check and disable Bluetooth.

Apples official stance is that this behavior “functions as intended”.

https://lapcatsoftware.com/articles/bluetooth.html

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#127
post #47

Earlier quoted context omitted.

Wireless keyboard generally seem like a totally terrible idea, just waiting for hacks. The author mentions not going after wireless gaming keyboards because they were the “wrong kind of mess,” I assume, security through abstrusity :)

I never really understood the benefits of a wireless keyboard. Do people usually carry their keyboard from their desk with them when they take their laptop somewhere else? I guess I could maybe -- maybe -- see the convenience if you have some sort of small-form-factor keyboard that you stash in your bag. But still, the wire doesn't seem like much of a burden, and personally I'd find the annoyance of needing to ensure…

> Do people usually carry their keyboard from their desk with them when they take their laptop somewhere else?

Yes, absolutely. Having your keyboard right next to your screen is terrible ergonomics. Fine in a pinch or during a meeting, but not for working for hours.

The Magic Keyboard slides right into my bag, and I use it on my lap while my laptop sits on a table or airplane tray. It's incredibly more comfortable. I have long arms and it's literally impossible to type on a plane otherwise, without elbowing seatmates in the ribs. If I'm working somewhere remote that's more private, I use a tiny collapsible stand that raises the laptop display closer to eye height as well. (Don't want to attract weird attention like that in a coffee shop though.)

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#128
post #47

Earlier quoted context omitted.

Wireless keyboard generally seem like a totally terrible idea, just waiting for hacks. The author mentions not going after wireless gaming keyboards because they were the “wrong kind of mess,” I assume, security through abstrusity :)

I never really understood the benefits of a wireless keyboard. Do people usually carry their keyboard from their desk with them when they take their laptop somewhere else? I guess I could maybe -- maybe -- see the convenience if you have some sort of small-form-factor keyboard that you stash in your bag. But still, the wire doesn't seem like much of a burden, and personally I'd find the annoyance of needing to ensure…

The only case I like for it is, I’ve got a windows computer that I plug into the TV for gaming (glorified console really). It is nice to not have wires across the room.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#129
post #62

Earlier quoted context omitted.

Too bad iOS makes it very hard to disable bluetooth. Android was swipe+click, iOS it's swipe, two long presses, two clicks. Or you can type it, but that's obviously more clicks (though possibly faster). I used to make the effort when I switched from Android, but I already gave up...

> Too bad iOS makes it very hard to disable bluetooth. Depending on whether you have the Settings icon on your Home Screen, that’s three taps (Settings -> Bluetooth -> Off). Not even any scrolling.

Setting doesn't always open on "home".

Annoyingly so it doesn't even always open on the expected screen, e.g. when opening "Wifi settings" from the network selection you might end up in notifications if it was the last screen you used. Not a consistent bug.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#130
post #90

Earlier quoted context omitted.

A laptop by default is not suitable for working any substantial length of time due to the fixed coupling between its screen and keyboard. Separating them—so that you can relax while keeping your screen roughly at your eye level and at comfortable distance, and your elbows bent at comfortable 90 degrees (or more)—gets you 80% there in terms of ergonomics. You could carry around a portable display, but that might be a…

I find the notion that wires are less reliable than wireless extremely contrary to my own experience.

That’s not what the parent said. The wired connection itself is better, but it has the tradeoff of physical wear and tear and ports that break.
Post reply on HN