And this is why people wanted headphone jacks... and also why corporations didn't want them.
post
downvoted for that website's super illegal "pay us to not track you" policy
Consent required for free use
I think that’s explicitly forbidden by the EU, and it’s a German domain.
The site wants to share info with advertisers. I found this to be refreshingly honest.
We and our up to 185 partners use cookies and tracking technologies. Some cookies and data processing are technically necessary, others help us to improve our offer and operate it economically...
Anyway, can we get an archive link?
It’s strange to think about how complicit the public has become with this. You mean to tell me that 185 separate connections to other companies are required for me to… read an article?
You can get/make your own archive link by going to archive.ph and entering the article's URL.
Here's the link for this one: https://archive.ph/wUAQn
Instead of hacking Bluetooth, sounds more effective to be an "advertising partner".
This really makes me hate that we don’t have headphone jack anymore
Ive always hated phones without the 3.5mm and won't stop even if all phone manufacturers remove it
Unchecked consumer-grade RF signals that are broadcast in every direction are insecure??
Color me shocked!
There's lots of money to be made by inserting a hardware back door in your product then later disclosing it as an unfixable vulnerability and force your customers to buy new hardware which has the same but different backdoor. Repeat.
Every spy in my vicinity is going to be dancing to The Meters - Cissy Strut.
Hah, jokes on them, I managed to fuck my earbuds' microphones so they're useless now.
Even if these attacks seem frightening on paper, the ERNW researchers are reassuring: many conditions must be met to carry out an eavesdropping attack. First and foremost, the attacker(s) must be within range of the Bluetooth short-range radio; an attack via the Internet is not possible. They must also carry out several technical steps without attracting attention. And they must have a reason to eavesdrop on the Bluetooth connection, which, according to the discoverers, is only conceivable for a few target people. For example, celebrities, journalists or diplomats, but also political dissidents and employees in security-critical companies are possible targets.
I guess they didn’t point this out because it’s kind of obvious, but it sounds like they also have to actually be on to be exploited. So it’s not going to turn on and start listening to you at least. Definitely concerning, but I’m still gonna be listening to my audio books and podcasts with my wireless headphones.
A speaker i have from bose is always on and "sleeping" and can be connected to from the phone no matter what i do, drains the fucking battery and when i want to use it finaly its dead.. wouldnt be surprised if some headphones worked the same..
Sounds like the attack scenario is very sophisticated and targeted, and only works within the range of Bluetooth low energy (BLE) connectivity, so 10-15 meters under best circumstances. At that point they might as well eavesdrop on my calls in person.
I think BLE is only required for the initial compromise (extracting the pairing key). After that the attack can be performed over classic BT, and can impersonate either part (headphones or phone) to the other.
It's still very targeted and sophisticated, so no reason to panic unless you have reasons to think someone with the resources could target you.
Regarding the attacks, they go way beyond eavesdropping calls, since BT headphones usually have access to contacts and smart assistants, that you can use to extract a lot more information
So glad I use wired earbuds and refused to buy a phone that didn't support them.
Same. I can't find any Bluetooth headphones whose batteries don't die in 4 or 5 months anyway. Meanwhile my Moondrop wired headphones have been going strong for almost 3 years.
LOL at the big debate I read just yesterday about how better wireless headphones are, and how useless jacks on phones are nowadays...
So how do you determine if your headphones have the vulnerable chip in them?
The flaws, discovered by German cybersecurity firm ERNW and first reported by Heise Online, affect dozens of headphone models from brands such as Sony, JBL, Bose, and Marshall, with no comprehensive firmware fixes available yet.
- Sony WH-1000XM4/5/6, WF-1000XM3/4/5, LinkBuds S, ULT Wear, CH-720N, C500, C510-GFP, XB910N
- Marshall ACTON III, MAJOR V, MINOR IV, MOTIF II, STANMORE III, WOBURN III
- JBL Live Buds 3, Endurance Race 2
- Jabra Elite 8 Active
- Bose QuietComfort Earbuds
- Beyerdynamic Amiron 300
- Jlab Epic Air Sport ANC
- Teufel Airy TWS 2
- MoerLabs EchoBeatz
- Xiaomi Redmi Buds 5 Pro
- earisMax Bluetooth Auracast Sender
ERNW emphasizes that this is only a partial list.
Sony WH-1000XM4/5/6
I don't have one of those, but they're pretty popular as headphones with good ANC.
Jlab Epic Air Sport ANC
I do have those, though.
Damn that's pretty big, hopefully they update and give a final list of affected devices. Not to mention, gotta pray the devices will see software updates to try and mitigate it.
I had a neighbor about 6 years ago that blasted rap at full volume every evening.
rap booming in the background
one fine day
"hmmm, what were these headphones on bt again? wait... soundbar. I don't have a soundbar.
hmmm, I wonder"
device paired
Jellyfin>Artists>..... Meshuggah
Obzen
Combustion
play
Volume 100%
"I think I'll go to the store for a while!"
They said I was mad when they removed the headphone jack - well who’s mad now??! AHAHahahahaaaaaaahhhhcrap it’s me.
I’m still mad. Fuckers.
What is that site asking me to agree to? No thanks
GDPR. First time opening a European website? German ones like this are particularly transparent (by law, not choice).
I was hoping this would allow me to take over Bluetooth speakers that people use while skiing and replace their music with a PSA about how no one wants to hear their music
Most annoying people on the mountain
Or public transit. Or public parks. Or grocery stores.
... and this is why I don't use bluetooth on anything.
I never have it enabled unless I am in the car driving and need driving directions or listening to music/podcasts. I prefer wired headphones, but manufacturers are making that difficult.
top 50 comments