Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bluetooth Headphone Jacking: A Key to Your Phone [video]

media.ccc.de

Post reply on HN
Print view View original

41–50 of 228 posts

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#41

Post by IshKebab »

dijit wrote: post #14
denysvitali wrote: post #12

Earlier quoted context omitted.

Disclaimer: This comment is not intended to be political - I don't care about the specific party she's part of. Out of all the people I would trust on the matter, Kamala Harris doesn't certainly end up at the top of my list, for reasons such as this one: https://youtu.be/O2SLyBL2kdM?si=Zq-EN8zxj4Y_UCwI You also don't need to be in classified meetings to understand that Bluetooth/ BLE (and specifically the way most ve…

I think many people would be justified in making the argument that bluetooth has existed for at least 20 years and thus is the established battle tested protocol.

I think people are generally aware of how low quality the Bluetooth protocol suite is though so maybe they'd guess that extends to security too.

I definitely remember lots of folk security advice to keep bluetooth off on your phone back when smartphones were new (nobody does that now though, and Android auto-enables it these days).

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#43

Post by CharlesW »

realusername wrote: post #33
CharlesW wrote: post #31

Earlier quoted context omitted.

The official reason was, famously and ridiculously, "courage". Apple further explained that space is at a premium, listed the many things competing for that space, and noted that a large, single-purpose legacy connector no longer made sense. A lot of Apple's strategic choices are driven by products that take 5, 10, or sometimes 20 years to realize. For example, the forthcoming foldable iPhone (and the proving ground…

Apple is very late to the foldable phones now, not sure that's the best example

Regardless, the point of mentioning it is that Apple commonly makes decisions that can seem bizarre to people who don't consider systemic and longer-term reasons why they might've been made. Another micro-example of this that comes to mind is Tahoe's mostly-reviled chonky window borders, which along with many other gradual UX changes over years, absolutely foreshadow touchscreen Macbooks.

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#44

Post by brohee »

K0balt wrote: post #36
petit_robert wrote: post #30

Earlier quoted context omitted.

GP seems to mean that if people cared about audio quality, they would not use bluetooth in the first place? Audiophiles tend to have firm stances on what is acceptable or not, I find.

There are also some amazing cables available in the space. Especially the digital cables, they are really amazing.

A friend worked in an audiophile shop during his physics master and he'd swear the customer base was the most gullible bunch he ever saw... And mostly unswayable by rational arguments.

In any case someone ought to shear the sheep....

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#45

Post by mi_lk »

miduil wrote: post #13

Glad this submission is finally receiving upvotes. This was just shown at the 39C3 in Hamburg, few days back. Common (unpached) Bluetooth headsets using Airoha's SoCs can be completely taken over by any unauthenticated bystander with a Linux laptop. (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, ... > Examples of…

> This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, ..

That doesn't sound very serious if they're exposed, is it? Can it be used to eavesdrop my conversation if I'm speaking through the headphone

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#46

Post by realusername »

CharlesW wrote: post #43
realusername wrote: post #33

Earlier quoted context omitted.

Apple is very late to the foldable phones now, not sure that's the best example

Regardless, the point of mentioning it is that Apple commonly makes decisions that can seem bizarre to people who don't consider systemic and longer-term reasons why they might've been made. Another micro-example of this that comes to mind is Tahoe's mostly-reviled chonky window borders, which along with many other gradual UX changes over years, absolutely foreshadow touchscreen Macbooks.

They've also been late sometimes and had to change by force their assumptions, the first app store in iOS was cydia and a lot of what we consider modern iOS design was copied over from the jailbreaking community.

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#47

Post by miduil »

mi_lk wrote: post #45
miduil wrote: post #13

Glad this submission is finally receiving upvotes. This was just shown at the 39C3 in Hamburg, few days back. Common (unpached) Bluetooth headsets using Airoha's SoCs can be completely taken over by any unauthenticated bystander with a Linux laptop. (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, ... > Examples of…

> This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, .. That doesn't sound very serious if they're exposed, is it? Can it be used to eavesdrop my conversation if I'm speaking through the headphone

the session (or pairing key) means you can both connect to the headphone or impersonate it.

It can toggle the hands-free mode and listen to whatever is being talked, you'd notice that it has switched to the mode though - but if you're headphones are powered on and you're not listening to in they can be used for eavesdropping.

During the talk they both demonstrate listening to the microphone and also receiving a WhatsApp 2FA call.

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#48

Post by [deleted] »

TheAceOfHearts wrote: post #8

Haven't watched the video yet, but I think this capability was leaked by VP Kamala Harris during her recent interview with the Late Night Show [0]. She stated she doesn't use wireless headphones because she's been in security meetings and knows they're not safe. [0] https://youtu.be/BD8Nf09z_38 (Timestamp 18:40)

[deleted]

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#49

Post by DangerousPie »

mi_lk wrote: post #45
miduil wrote: post #13

Glad this submission is finally receiving upvotes. This was just shown at the 39C3 in Hamburg, few days back. Common (unpached) Bluetooth headsets using Airoha's SoCs can be completely taken over by any unauthenticated bystander with a Linux laptop. (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, ... > Examples of…

> This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, .. That doesn't sound very serious if they're exposed, is it? Can it be used to eavesdrop my conversation if I'm speaking through the headphone

They also demonstrated how this could be used to silently find out someone’s phone number and then hijack a TFA validation call from an app like WhatsApp to take over their account with no user interaction.

Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]

#50

Post by 9029 »

TheAceOfHearts wrote: post #8

Haven't watched the video yet, but I think this capability was leaked by VP Kamala Harris during her recent interview with the Late Night Show [0]. She stated she doesn't use wireless headphones because she's been in security meetings and knows they're not safe. [0] https://youtu.be/BD8Nf09z_38 (Timestamp 18:40)

It seems this vuln was already publicized in june, or is that interview from earlier?
Post reply on HN