Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bluetooth keystroke-injection in Android, Linux, macOS and iOS

github.com

Post reply on HN
Print view View original

191–200 of 265 posts

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#191

Post by MBCook »

xp84 wrote: post #35
wtallis wrote: post #20

Earlier quoted context omitted.

Doesn't Android Auto carry audio over Bluetooth? That would be consistent with how unreliable the audio is.

Hey don’t knock it until you’ve tried Apple’s equivalent (wireless CarPlay) which has a 3 second buffer since they decided to use Wi-Fi for audio. Imagine if every time you play or pause or change tracks you have to count to three in your head before it responds. Yes, I’m bitter. Somehow the video and touch are lag-free 1 but the audio is on a delay. I’d love to have regular Bluetooth audio be used.

That’s why always use wired CarPlay despite having wireless support.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#192

Post by MBCook »

wtallis wrote: post #52
kelnos wrote: post #48

Earlier quoted context omitted.

Wait, what? Wifi? Does that mean that a car that has CarPlay must also have Wifi that can act as an access point, and do some sort of automatic connection negotiation when the phone is plugged in and CarPlay is activated? That seems... terrible.

Wireless CarPlay didn't show up until several years after the original USB-based CarPlay, which is still around and there may still be new vehicles on the market which only support the USB-based CarPlay. Wireless CarPlay starts with a Bluetooth connection which is then used to negotiate the higher-bandwidth WiFi link. Neither CarPlay nor Android Auto can operate on Bluetooth alone, because the video data that needs t…

It’s a point to point link too, not standard access point style.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#194

Post by maxerickson »

layer8 wrote: post #187
maxerickson wrote: post #185

Earlier quoted context omitted.

A wireless keyboard that didn't use Bluetooth wouldn't be vulnerable to this. I didn't really try to figure it out, but I expect paired in the sense of paired, not connected. Sounds like ios toggles a setting for HID when you pair the magic keyboard an becomes vulnerable to this.

If it’s “paired” in the first sense, then merely using a non-Bluetooth keyboard is not sufficient, you also have to make sure to unpair any previously paired Bluetooth devices. It would therefore seem important to find out what precisely is the case.

I guess if you have Apple devices, yeah, it might be worth figuring it out.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#195

Post by horusthegame »

kelnos wrote: post #46

I had to dig a little to figure this out, so, to keep yourself safe: Android: disable Bluetooth when you're not using it (but you'll be vulnerable while you are). My Pixel just got the 12/5/2023 security update, which fixes the issue; not sure about non-Pixel phones. Linux: Open up /etc/bluetooth/input.conf and set ClassicBondedOnly=true (in my case I just had to uncomment this, not add anything). The next version of…

Ubuntu 2022, the default appears to be true already:

# Defaults to true for security. #ClassicBondedOnly=true

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#196

Post by SpaghettiCthulu »

SCdF wrote: post #86
ComodoHacker wrote: post #75

Earlier quoted context omitted.

I believe it's because they just didn't bother trying this on Windows (yet)

Do you believe that, or do you actually know that because he said it somewhere? If you look at the linux patch[1] it's a case of bad defaults. So maybe Windows just has good defaults? [1] https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/pr...

I think "insecure default" or even "wrong default" is more fitting in this case.

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#197

Post by 360MustangScope »

vel0city wrote: post #161
360MustangScope wrote: post #112

Earlier quoted context omitted.

I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller an…

I've experienced Bluetooth issues like that before on Windows. 100% of the time it's been solved by using a better Bluetooth adapter. I don't have any issues after using actually good Bluetooth adapters, such as modern Intel ones.

I could do that, but I’m using the built in Bluetooth on my desktop. Honestly, I’m just annoyed with Bluetooth and windows. Everything else not based on Windows work completely fine, from macOS to my multiple linux desktops

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#198

Post by 360MustangScope »

FirmwareBurner wrote: post #114
360MustangScope wrote: post #112

Earlier quoted context omitted.

I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller an…

The Xbox is a popular controller so its Bluetooth connection issues on windows should be well documented online by multiple users by now if it's a known issue. Or is it just you and a handful of unlucky users due to some buggy Bluetooth card-driver combo? There are a lot of short straws you can pull in the Bluetooth stack lottery that don't necessarily stem from the OS.

A few of friends also have this experience with the controller. Nobody bothers to say anything though and they all told me that I’d just be better off plugging it in. Which is what they do and what I ended up doing

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#199

Post by 360MustangScope »

solardev wrote: post #177
360MustangScope wrote: post #112

Earlier quoted context omitted.

I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller an…

Side note, have you tried a firmware update with the Xbox controller, inside the Xbox app for Windows? It helped me a lot, especially earlier generation / early production units. (But yes, I always have issues with Bluetooth on Windows too)

I have, it’s on the latest firmware from the Xbox app. Still have these issues, the Xbox controller is just the biggest thing, my Sony headphones also have issues with Windows.

All of my coworkers have issues with anything regarding Bluetooth on Windows too

Re: Bluetooth keystroke-injection in Android, Linux, macOS and iOS

#200

Post by 360MustangScope »

givinguflac wrote: post #125
360MustangScope wrote: post #112

Earlier quoted context omitted.

I’ve had a ton issues on Windows with Bluetooth and I know it’s not the hardware because on Linux it works fine. My Xbox Series controller is the biggest issue. For instance will not automatically reconnect when I pair it the first time and then disconnect. On the next turn on of the controller, it never finds the PC and connects. Windows then has no push for me to press to connect. I have to delete the controller an…

For what it’s worth, I had a similar experience with my old Xbox controller. I bought a new one and the issue went away.

For me, it never went away. I had an Xbox One S controller before with the same issue. Bought the Xbox Series controller last year for Elden Ring, same issue on Windows. Gave up, and just got a longer USB C cable.
Post reply on HN