This is a pretty tremendous hack. Almost all computers are vulnerable and if you can get close enough to them you can quickly send keyboard presses to open a terminal window and install software (hopefully the password request saves you at this point).
Bluetooth keystroke-injection in Android, Linux, macOS and iOS
141–150 of 265 posts
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#142glad my hunch was right. always feel weird being the only one with wired everything... but now i can say i was righ...stubborn :p
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#143Can someone walk me through the process of exploiting Android or iOS with this? I never attached a keyboard to my phones. How do I get to the app store and download an app using just the keyboard? On iOS it requires the fingerprint if I remember correctly, at least on mine. But it's for work and I do mostly very basic stuff with it, so I could be wrong.
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#144Earlier quoted context omitted.
Is it possible to do for Location as well? Last time I tried to search for it, it really wasn't possible except through Siri somehow.
I made one to open locations in settings via open URL: prefs:root=Privacy&path=LOCATION
Wow, that's bonkers. I thought apple cared about privacy?
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#145By the way, USB is similar. If you connect a keyboard to "charging only" port, it works. Tried myself on Android. Was told off here it's supposedly not practically exploitable.
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#146Bluetooth doesn’t need to exist.
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#147This is great news now that the industry phased out physical audio connection on phones in favor of wireless. Good job, guys.
This vulnerability is about injecting keystrokes into connected wireless keyboards and mice.[1] With the phone industry adoption of USB-C, they've made wired easier than ever before.
[1] https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/pr...
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#148I had to dig a little to figure this out, so, to keep yourself safe: Android: disable Bluetooth when you're not using it (but you'll be vulnerable while you are). My Pixel just got the 12/5/2023 security update, which fixes the issue; not sure about non-Pixel phones. Linux: Open up /etc/bluetooth/input.conf and set ClassicBondedOnly=true (in my case I just had to uncomment this, not add anything). The next version of…
> Android: disable Bluetooth when you're not using it (but you'll be vulnerable while you are). Page says it only works for stuff that doesn't require password or biometrics. I actively lock my phone when not using it, and surely I'd see the activity of the keystrokes being sent when using my device, no? In that case it doesn't seem that horrible to leave Bluetooth enabled.
> surely I'd see the activity of the keystrokes being sent when using my device, no?
That was my first thought as well. Then I remembered how much time my device spends in my pocket or on my nightstand
Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS
#149This is a pretty tremendous hack. Almost all computers are vulnerable and if you can get close enough to them you can quickly send keyboard presses to open a terminal window and install software (hopefully the password request saves you at this point).
Yes, thankfully there's a password on installing software as root
Obligatory https://xkcd.com/1200/
Running code works fine without root, at least to copy your emails, saved logins, and browser sessions file and such