EEVblog Electronics Community Forum

Products => Computers => Security => Topic started by: madires on May 18, 2022, 11:20:25 am

Title: BLE relay attacks
Post by: madires on May 18, 2022, 11:20:25 am
Using BLE without any additional measures as authentication token or key for buildings, cars and other things is a bad idea. The standard even warns about this. But some specialists think they are smart ...

Security researcher's marketing post:
Technical Advisory – BLE Proximity Authentication Vulnerable to Relay Attacks (https://research.nccgroup.com/2022/05/15/technical-advisory-ble-proximity-authentication-vulnerable-to-relay-attacks/ (https://research.nccgroup.com/2022/05/15/technical-advisory-ble-proximity-authentication-vulnerable-to-relay-attacks/))

And a more practical approach to get a Tesla for free:
Hackers can steal your Tesla Model 3, Y using new Bluetooth attack (https://www.bleepingcomputer.com/news/security/hackers-can-steal-your-tesla-model-3-y-using-new-bluetooth-attack/ (https://www.bleepingcomputer.com/news/security/hackers-can-steal-your-tesla-model-3-y-using-new-bluetooth-attack/))