Key Takeaways
- Cov kws tshawb fawb pom tau tias cov teeb liab Bluetooth tuaj yeem raug txheeb xyuas tshwj xeeb ua tsaug rau qhov tsis zoo me me hauv cov chips.
- Cov txheej txheem, txawm li cas los xij, zoo dua rau kev taug qab pab pawg neeg ntau dua li cov tib neeg, qhia cov kws tshaj lij.
- Lawv hais tias nws yuav tsum tau siv los ua lwm yam piv txwv txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau taug qab.
Cov kws tshawb fawb tau tshawb pom lwm qhov tsis zoo ntawm Bluetooth, uas tuaj yeem ua rau muaj kev pheej hmoo rau koj tus kheej yog tias tsuas yog nws yooj yim rau riam phom.
Nyob ntawm lub rooj sib tham IEEE Security thiab Privacy tsis ntev los no, cov kws tshawb fawb los ntawm University of California, San Diego, tau nthuav tawm lawv cov kev tshawb pom txog Bluetooth chips muaj qhov tsis zoo ntawm cov khoom siv tshwj xeeb uas tuaj yeem ua tus ntiv tes. Qhov no theoretically enables attackers mus taug qab cov neeg siv los ntawm lub Bluetooth chips embedded nyob rau hauv lawv cov ntse gadgets, txawm hais tias cov kws tshawb fawb lawv tus kheej lees tias cov txheej txheem yuav tsum muaj ntau npaum li cas ntawm kev ua hauj lwm thiab ib tug noj qab nyob zoo dollop ntawm koob hmoov.
"Kev taug qab" ntawm cov neeg siv khoom siv uas lawv piav qhia yog lwm qhov kev nce ntxiv hauv kev sib tw caj npab txuas ntxiv ntawm cov ntaub ntawv brokers thiab cov neeg siv khoom ntiag tug, " Evan Krueger, Tus Thawj Coj ntawm Engineering ntawm Token, hais rau Lifewire hauv email. "Cov txheej txheem no tsis zoo li yuav raug siv rau kev tawm tsam, xws li taug qab lossis kev sib raug zoo nrog tus khub kev ua phem raws li tib neeg tau pom Apple AirTags siv tsis ntev los no."
Bluetooth Forensics
Cov kws tshawb fawb tau sib cav tias tsis ntev los no, cov khoom siv txawb, suav nrog cov xov tooj smartphones, thiab cov ntse saib, tau nce ob npaug li wireless taug qab beacons, tsis tu ncua xa cov teeb liab rau cov ntawv thov xws li kev sib cuag lossis nrhiav cov khoom ploj.
Raws li cov kws tshawb fawb, peb cov cuab yeej ntse tau txuas ntxiv mus txog pua pua beacons ib feeb. Hauv lawv cov kev sim nrog ntau lub cuab yeej ntse, lawv tau teev lub iPhone 10, xa tawm ntau dua 800 lub cim ib feeb, thaum Apple Watch 4 nto qaub ncaug yuav luag 600 beacons txhua 60 vib nas this.
"Cov ntawv [Bluetooth] no siv cryptographic anonymity uas txwv tsis pub tus yeeb ncuab lub peev xwm siv cov beacons los soj ntsuam tus neeg siv," sau tseg cov kws tshawb fawb. "Txawm li cas los xij, cov neeg tawm tsam tuaj yeem hla cov kev tiv thaiv no los ntawm kev sau cov ntiv tes ntawm lub cev-txheej txheej tsis zoo hauv kev sib kis ntawm cov khoom siv tshwj xeeb."
Kev tshawb fawb tseem ceeb vim nws tau pab qhia tias Bluetooth cov cim qhia muaj qhov sib txawv, thiab cov ntiv tes taug qab tau.
Txawm li cas los xij, cov txheej txheem tseeb rau kev txheeb xyuas lub cim tshwj xeeb ntawm lub cuab yeej siv qee qhov ua, thiab tsis yog ib txwm lav ua haujlwm vim tias tsis yog txhua lub chips Bluetooth muaj peev xwm tib yam, thiab ntau yam.
Tug of War
"Raws li kev tshawb fawb, cov txheej txheem no zoo li tsis zoo li yuav raug siv hauv lub ntiaj teb tiag tiag yam tsis muaj qee qhov kev ua kom yooj yim rau nws siv thiab ua kom nws ruaj khov dua," Matt Psencik, Tus Thawj Coj, Tus Kws Saib Xyuas Kev Ruaj Ntseg Kawg, ntawm Tanium, hais rau Lifewire dhau email, tom qab perusing los ntawm daim ntawv.
Psencik piav qhia nws qhov kev sib cav los ntawm kev hais tias nws nyuam qhuav siv BluetoothLE Scanner app uas tau khaws 165 Bluetooth li nyob ze nws thaum nyob rau hauv pem teb thib peb ntawm ib chav tsev. "Nrog rau qhov no hauv siab, siv txoj kev no los taug qab ib tus neeg los ntawm cov chaw muaj neeg coob coob yuav ua tau zoo dua nrog cov kab classic ntawm kev pom kev pom," said Psencik.
Nws tau sau tseg tias thaum cov kws tshawb fawb tau txheeb xyuas qhov tsis txaus ntseeg hauv Bluetooth, lawv cov txheej txheem taug qab yuav tsim cov ntaub ntawv tag nrho nrog kev them nyiaj tsawg.
Krueger pom zoo, hais tias tsis yog kev siv los taug qab cov tib neeg, cov kws tshawb fawb cov haujlwm yuav yog qhov txaus siab rau cov tuam txhab lag luam cov ntaub ntawv uas sim soj ntsuam cov neeg coob coob thiab muag cov ntaub ntawv, lossis nkag mus rau nws, rau kev tshaj tawm purposes.
"Txawm hais tias tus neeg muag khoom yuav pom kev taug qab cov neeg siv khoom ntawm Bluetooth ntiv tes thaum lawv tsiv mus nyob ib puag ncig lawv lub khw tsis muaj teeb meem rau cov neeg siv khoom thiab muaj txiaj ntsig zoo rau kev lag luam, qhov tshwm sim ntawm kev soj ntsuam tsis muaj kev txhawj xeeb yog qhov txaus ntshai," ntseeg Krueger.
Piav txog lub ntiajteb txawj nqus ntawm qhov xwm txheej, Krueger tau hais tias tib neeg muaj kev xiam oob khab hauv kev tawm tsam ncaj qha rau qhov kev taug qab no, muab cov theem ntawm kev ua haujlwm zoo los ntawm cov txheej txheem luam ntiv tes no thiab kev nthuav dav ntawm Bluetooth beaconing hauv cov khoom uas tau dhau los ua qhov tseem ceeb rau peb. lub neej txhua hnub.
Ib qho kev xaiv uas tib neeg muaj yog los nrhiav cov khoom thiab cov kev pabcuam nrog cov ntaub ntawv qhia pom ntawm kev saib xyuas tus neeg siv khoom ntiag tug, los ntawm cov tuam txhab uas tau tawm suab txhawb kev cai lij choj txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau taug qab tib neeg, raws li tau piav qhia hauv daim ntawv.
"Cov no yuav xav tias me me lossis txawm tias tsis tsim nyog cov kauj ruam rau ib tus neeg yuav tsum ua," lees paub Krueger, "tab sis qhov no yog ib qho teeb meem sib koom ua ke, thiab nws tsuas yog daws tau los ntawm kev txhawb nqa, kev ua lag luam thiab kev tswj hwm."
