Jump to content
View in the app

A better way to browse. Learn more.

Surly Horns

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Bleedingbit zero-day chip flaws may expose majority of enterprises to remote code execution attacks

Featured Replies

Quote

Bleedingbit is a set of two new zero-day vulnerabilities which have the potential to expose enterprise firms to remote code execution attacks worldwide.

On Thursday, researchers from enterprise security firm Armis revealed the bugs, which together impact Bluetooth Low-Energy (BLE) chips used in millions of Cisco, Meraki, and Aruba wireless access points (APs).

Developed by Texas Instruments (TI), the vulnerable BLE chips are used by roughly 70 to 80 percent of business wireless access points today by way of Cisco, Meraki and Aruba products.

"Because businesses rely on them for mission-critical communications, a compromise at this level can give attackers deep access into enterprise networks," Armis says.

...

More:  https://www.zdnet.com/article/new-bleedingbit-zero-day-vulnerabilities-impact-majority-of-enterprises-at-the-chip-level/

So apparently Bluetooth can be compromised.

17 minutes ago, bernorange said:

So apparently Bluetooth can be compromised. 

And you thought it woudn't be?

Bluetooth has been compromised for years just like many other frequencies that are picked up by cell phones, computers, etc.   Think your Bluetooth is turned off? Nope.  Oh that FM radio chip that all the phones have, yeah that's been hacked too and leveraged as a pivot point just like bluetooth.  I'm surprised more hasn't come out of this with IoT being such a big thing now. 

china and world governments love bluetooth.  easy way to spread viruses and malware.   this and blueborne are only what is discovered.  no doubt all governments and hackers have a toolbox of bt malware and exploits. 

 

we are all freely turning over our privacy and deluding ourselves that privacy matters.  this includes companies.  like with everyone else, i've traded convenience and information for privacy.  but i use vpn, so my delusion is intact.  cognitive dissonance is a wonderful thing.

2 minutes ago, crash_davis said:

china and world governments love bluetooth.  easy way to spread viruses and malware.   this and blueborne are only what is discovered.  no doubt all governments and hackers have a toolbox of bt malware and exploits. 

 

we are all freely turning over our privacy and deluding ourselves that privacy matters.  this includes companies.  like with everyone else, i've traded convenience and information for privacy.  but i use vpn, so my delusion is intact.  cognitive dissonance is a wonderful thing.

depends on the VPN and they do deter malicious activity - however - I bet there is a tool-kit out there for exploits especially with quantum computing becoming more of a reliable thing

1 hour ago, crash_davis said:

china and world governments love bluetooth.  easy way to spread viruses and malware.   this and blueborne are only what is discovered.  no doubt all governments and hackers have a toolbox of bt malware and exploits. 

Bleedingoutofsomewherebit and Bluebalz, too.

I’m upgrading to this bad boy. Unhackable according to the ebay description.

Fisher-Price-Phone.jpg

2 hours ago, Doc Holliday said:

depends on the VPN and they do deter malicious activity - however - I bet there is a tool-kit out there for exploits especially with quantum computing becoming more of a reliable thing

You can set one up on an EC2 instance in AWS pretty easily. That is what I use just so I can have a static IP if I'm not at home/office for our security group settings in our cloud infrastructure.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.