Earlier quoted context omitted.
> This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, .. That doesn't sound very serious if they're exposed, is it? Can it be used to eavesdrop my conversation if I'm speaking through the headphone
the session (or pairing key) means you can both connect to the headphone or impersonate it. It can toggle the hands-free mode and listen to whatever is being talked, you'd notice that it has switched to the mode though - but if you're headphones are powered on and you're not listening to in they can be used for eavesdropping. During the talk they both demonstrate listening to the microphone and also receiving a Whats…
Bluetooth Headphone Jacking: A Key to Your Phone [video]
51–60 of 228 posts
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#52Glad this submission is finally receiving upvotes. This was just shown at the 39C3 in Hamburg, few days back. Common (unpached) Bluetooth headsets using Airoha's SoCs can be completely taken over by any unauthenticated bystander with a Linux laptop. (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, ... > Examples of…
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#53Most audiophiles ignore bluetooth headphones due to sound quality + latency, so we (audiophiles) stick to wired at home and we also have dedicated headphone amps since the pissy sound card D/A convertors are incredibly bad. Bluetooth only when I’m doing yard work. Sadly, modern music is tuned to crappy headphones, crappy car systems, crappy speakers … I miss the 80’s audiophile obsession, the equipment had heart, and…
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#54Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#55Earlier quoted context omitted.
The official reason was, famously and ridiculously, "courage". Apple further explained that space is at a premium, listed the many things competing for that space, and noted that a large, single-purpose legacy connector no longer made sense. A lot of Apple's strategic choices are driven by products that take 5, 10, or sometimes 20 years to realize. For example, the forthcoming foldable iPhone (and the proving ground…
Apple is very late to the foldable phones now, not sure that's the best example
“PC guys are not going to just figure this out. They’re not going to just walk in.” — Palm CEO Ed Colligan, 2006, https://www.engadget.com/2006-11-21-palms-ed-colligan-laughs...
“A wizard is never late, nor is he early, he arrives precisely when he means to.” — Gandalf the Gray
:)
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#56Glad this submission is finally receiving upvotes. This was just shown at the 39C3 in Hamburg, few days back. Common (unpached) Bluetooth headsets using Airoha's SoCs can be completely taken over by any unauthenticated bystander with a Linux laptop. (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) This includes firmware dumps, user preferences, Bluetooth Classic session keys, current playing track, ... > Examples of…
> Most vendors gave the security researchers either silent treatment or were slow, even after Airoha published fixes. Jabra was one of the positive outlier, Sony unfortunately negatively. While I don't recall Sony issuing an advisory, I believe the users of their app would have started getting update notifications since they (quietly) released firmware updates. > This means there is great opportunity for Linux users…
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#57Meanwhile all the phones dropping jack because Apple started it. Official reason is to "waterproof phones"
The most frustrating part is when Apple dropped the jack we laughed at the "courage" bit, Apple's given reasons where already seen as bullshit, Samsung had their finger pointing moment. And it just went on, Apple weathered the critics, the other makers also dropped it, and at some point there was just nowhere to go for anyone still wanted a 3.5 jack with a decent phone.
It's not a good solution though. In particular I find the USB-C port gets worn out pretty quickly. Its also easy to lose the dongle and of course it's more complicated to setup. (I'm not sure how to articulate the "it's more complicated" part. Adding the dongle elevates the action of "plug in headphones" from something you can do without attention to something that requires attention, and I don't like that.)
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#58Earlier quoted context omitted.
Apple is very late to the foldable phones now, not sure that's the best example
> Apple is very late to the foldable phones now, not sure that's the best example “PC guys are not going to just figure this out. They’re not going to just walk in.” — Palm CEO Ed Colligan, 2006, https://www.engadget.com/2006-11-21-palms-ed-colligan-laughs... “A wizard is never late, nor is he early, he arrives precisely when he means to.” — Gandalf the Gray :)
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#59Earlier quoted context omitted.
Some of us kept using OpenBSD (longer than they should’ve?) because of that and a few other related decisions. So who is everyone, in your meaning?
You can't read English like if it was a declarative logical language. It is obviously an hyperbole to say "everyone". It means "a lot of people". So why they didn't say "a lot of people"? Language uses hyperboles to make a point stronger.
Re: Bluetooth Headphone Jacking: A Key to Your Phone [video]
#60Earlier quoted context omitted.
> Glad this submission is finally receiving upvotes. Speaking for myself, I have very little patience for technical videos, so I don't believe I've ever upvoted a YouTube submission.
I would read it if it was an article of identical length! One second thought I think this is called a transcript... --- Edit: Auto-Transcript! (No timestamps, sorry) https://jsbin.com/jiqihuveci/edit?html,output