Babe, wake up its time for your china fear mongering news
Technology
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
At this point I welcome them to come through.
Come through with what though?
Idk what they can do with my data from my many Bluetooth devices so they are welcome to come through my Bluetooth devices 😂 and I'd be fine with being a Chinese citizen if that's where this leads, they have healthcare and social housing.
welp, TL;DR from comments says its fear mongering at best, physical access required right?
Code execution required lmao
It allows the takeover of devices!
How?
By already having taken over the device.
Wtf is this reporting
Does anyone know where it is that we can find these new commands? I have an esp32 dev kit just a few feet away from me as i read this. It might be interesting to know what these new product "features" are.
Haha. I wear cheap Chinese bluetooth literally on my skull like 95% of the time, web when sleeping.
Hope they enjoy my thoughts.
The rebuttal wasn't as comforting as some are making it out to be. They seem to be more interested in the semantics of it not being a backdoor tied to a specific product, which appears to be true.
Rather it is a potential for vulnerability that exists in all wireless implementation, which seems to me to be a bigger issue.
It's a vulnerability where an attacker already needs code execution on the device/physical access.
If you have that you're already compromised no matter what.
The biggest risk would be IoT devices.
That's just the summary of the entire existence of IoT devices
The issue is where the undocumented commands are. They aren't just allowing any old external person to send payloads to this.
It's kind of like noticing that someone unexpectedly hid a spare key next to the door... On the inside of the house. Like, sure, maybe the owner would have like to know about that key, but since you have to be inside the house to get to it, it doesn't really make a difference.
I was reading someone else's explanation and they said it's the equivalent of every computer possibly having a backdoor because there is code in a computer that a bad actor can use. There are extra commands that could possibly be used for a backdoor if a malicious actor found a way to use those bits of code. It's much less oh here is a security vulnerability that is being used and more of a if a robber breaks into our house which is possible they will rob us situation.
Please update the title of this post to mention the update