BIAS ndikuwukira kwatsopano pa Bluetooth komwe kumakupatsani mwayi wowononga chipangizocho

Ofufuza ochokera ku Federal Polytechnic School of Lausanne kuwululidwa Kufooka kwa njira zolumikizirana za zipangizo zomwe zimagwirizana ndi muyezo wa Bluetooth Classic (Bluetooth BR/EDR). Kufooka kwapatsidwa dzina la code ZABWINO (PDFVutoli limalola wowukira kulumikiza chipangizo chake chabodza m'malo mwa chipangizo chomwe wogwiritsa ntchito adalumikizidwa kale ndikumaliza bwino njira yotsimikizira popanda kudziwa kiyi ya njira (kiyi yolumikizira) yopangidwa panthawi yolumikizira koyamba kwa zidazo, zomwe zimathandiza kupewa kubwereza njira yotsimikizira pamanja pa kulumikizana kulikonse.

BIAS - kuukira kwatsopano kwa Bluetooth komwe kumakupatsani mwayi wonyenga chipangizo cholumikizidwa

Njirayi imakhala ndi wowukira amene, akamalumikiza ku zipangizo zomwe zimathandizira Secure Connections, amalengeza kuti palibe njira iyi ndipo amabwerera ku njira yodziwitsira yakale (legacy mode). Mu legacy mode, wowukirayo amayamba kusintha udindo wa master-slave ndipo, powonetsa chipangizo chake ngati master, amatenga udindo wotsimikizira njira yodziwitsira. Kenako wowukirayo amatumiza chidziwitso cha kutsimikizika kopambana, ngakhale atakhala ndi kiyi ya njira, ndipo chipangizocho chimakhala chovomerezeka kwa winayo.

Pambuyo pa izi, wowukirayo akhoza kugwiritsa ntchito kiyi yayifupi kwambiri yobisa, yokhala ndi byte imodzi yokha ya entropy, ndikugwiritsa ntchito kuukira komwe kudapangidwa kale ndi ofufuza omwewo. KNOB kuti akhazikitse kulumikizana kwa Bluetooth kobisika pansi pa mawonekedwe a chipangizo chovomerezeka (ngati chipangizocho chatetezedwa ku ziwopsezo za KNOB ndipo kukula kwa kiyi sikungachepe, ndiye kuti wowukirayo sangathe kukhazikitsa njira yolumikizirana yobisika, koma apitilizabe kukhala wovomerezeka kwa wolandila).

Kuti agwiritse ntchito bwino kufooka kumeneku, chipangizo cha woukirayo chiyenera kukhala pafupi ndi chipangizo cha Bluetooth chomwe chili pachiwopsezo ndipo woukirayo ayenera kudziwa adilesi ya chipangizo chakutali chomwe chidalumikizidwa nacho kale. lofalitsidwa chitsanzo cha chida chogwiritsira ntchito pogwiritsa ntchito njira yowukira yomwe ikuperekedwa komanso awonetsa momwe mungagwiritsire ntchito laputopu ndi Linux ndi ma board a Bluetooth CYW920819 Sewerani kulumikizana ndi foni yam'manja ya Pixel 2 yomwe kale inali yolumikizidwa.

Vutoli limayambitsidwa ndi cholakwika mu specification ndipo limapezeka m'ma Bluetooth stacks osiyanasiyana ndi ma firmware a ma chips a Bluetooth, kuphatikizapo tchipisi Intel, Broadcom, Cypress Semiconductor, Qualcomm, Apple, ndi Samsung, zomwe zimagwiritsidwa ntchito m'mafoni a m'manja, ma laputopu, makompyuta a bolodi limodzi, ndi zida zolumikizirana kuchokera kwa opanga osiyanasiyana. kuyesedwa Zipangizo 30 (Apple) iPhone(iPad/MacBook, Samsung Galaxy, LG, Motorola, Philips, Google Pixel/Nexus, Nokia, Lenovo ThinkPad, HP ProBook, Raspberry Pi 3B+, ndi zina zotero), zomwe zimagwiritsa ntchito ma chips 28 osiyanasiyana, zinadziwitsa opanga za kufooka kwa Disembala watha. Sizikudziwikabe kuti ndi opanga ati omwe atulutsa kale zosintha za firmware ndi kukonza.

Bluetooth SIG, bungwe lomwe limayang'anira kukhazikitsa miyezo ya Bluetooth, adalengeza Pakukonza zosintha za Bluetooth Core specification. Mtundu watsopanowu umalongosola momveka bwino milandu yomwe kusintha kwa udindo wa master-slave kumaloledwa, kumabweretsa chofunikira chofunikira kuti munthu atsimikizire kuti ali ndi vuto akabwerera ku legacy mode, ndipo amalimbikitsa kuyang'ana mtundu wa encryption kuti apewe kuchepetsa chitetezo cha kulumikizana.

Source: opennet.ru

Gulani kuchititsa kodalirika kwamasamba okhala ndi chitetezo cha DDoS, ma seva a VPS VDS Gulani malo odalirika osungira mawebusayiti okhala ndi chitetezo cha DDoS, ma seva a VPS VDS | ProHoster