BIAS ke tlhaselo e ncha ho Bluetooth e u lumellang ho senya sesebelisoa se pentiloeng

Bafuputsi ba École Polytechnique Federale de Lausanne senotsoe ho ba kotsing mekhoeng ea ho hokahanya ha lisebelisoa tse tsamaellanang le maemo a Bluetooth Classic (Bluetooth BR/EDR). Bofokoli bo filoe lebitso la khoutu LEEMESE (PDF). Bothata bo lumella mohlaseli ho hlophisa khokahano ea sesebelisoa sa hae sa fake ho fapana le sesebelisoa sa mosebelisi se neng se hokahantsoe pele, mme a phethe ts'ebetso ea netefatso ka katleho ntle le ho tseba senotlolo sa khokahano se hlahisitsoeng nakong ea ho kopanya lisebelisoa tsa pele le ho lumella motho ho qoba ho pheta ts'ebetso ea netefatso ka letsoho. khokahano ka 'ngoe.

BIAS ke tlhaselo e ncha ho Bluetooth e u lumellang ho senya sesebelisoa se pentiloeng

Ntho ea bohlokoa ea mokhoa ona ke hore ha o hokahanya le lisebelisoa tse tšehetsang Sireletsehile Connections mode, mohlaseli o phatlalatsa ho ba sieo ha mokhoa ona mme o khutlela ho sebelisa mokhoa oa ho netefatsa oa khale ("legacy" mode). Ka mokhoa oa "lefa", mohlaseli o qala phetoho ea karolo ea monghali-lekhoba, 'me, a hlahisa sesebelisoa sa hae e le "monghali," o nka boikarabelo ba ho netefatsa mokhoa oa ho netefatsa. Motho ea hlaselang o romela tsebiso ea hore netefatso e atlehile, leha a se na senotlolo sa mocha, 'me sesebelisoa se netefatsoa ho motho e mong.

Kamora sena, mohlaseli a ka fihlela ts'ebeliso ea senotlolo sa encryption se khuts'oane haholo, se nang le 1 byte feela ea entropy, mme a sebelisa tlhaselo e entsoeng pele ke bafuputsi ba tšoanang. KHOBOKO e le ho hlophisa khokahanyo ea Bluetooth e patiloeng tlas'a sesebediswa se nepahetseng (haeba sesebelisoa se sirelelitsoe litlhaselong tsa KNOB mme boholo ba senotlolo bo ne bo ke ke ba fokotseha, joale mohlaseli a ke ke a khona ho theha mocha oa puisano o patiloeng, empa o tla tsoela pele. ho dula o netefalitsoe ho moamoheli).

Ho sebelisa monyetla oa ho ba kotsing ka katleho, hoa hlokahala hore sesebelisoa sa mohlaseli se fihlelle ho sesebelisoa sa Bluetooth se tlokotsing 'me mohlaseli o tlameha ho tseba aterese ea sesebelisoa se hole seo khokahano e neng e entsoe ho sona pele. Bafuputsi e phatlalalitsoeng mohlala oa sephutheloana sa lisebelisoa ka ho kenya tšebetsong mokhoa o sisintsoeng oa tlhaselo le li bontšitse mokhoa oa ho sebelisa laptop ka Linux le karete ea Bluetooth EA-920819 ho qhekella khokahano ea smartphone ea Pixel 2 e neng e pentiloe pele.

Bothata bo bakoa ke bofokoli bo itseng 'me bo iponahatsa ka li-stacks tse fapaneng tsa Bluetooth le li-firmwares tsa Bluetooth chip, ho kenyeletsoa. li-chips Intel, Broadcom, Cypress Semiconductor, Qualcomm, Apple le Samsung tse sebelisoang ho li-smartphone, li-laptops, li-PC tsa board board le li-peripheral tse tsoang ho bahlahisi ba fapaneng. Bafuputsi lekoa Lisebelisoa tse 30 (Apple iPhone/iPad/MacBook, Samsung Galaxy, LG, Motorola, Philips, Google Pixel/Nexus, Nokia, Lenovo ThinkPad, HP ProBook, Raspberry Pi 3B+, joalo-joalo) tse sebelisang li-chips tse 28 tse fapaneng, le bahlahisi ba tsebisitsoeng ka ho ba kotsing ka Tshitwe selemong se fetileng. Ke ofe ho bahlahisi ea seng a lokolotse lintlafatso tsa firmware ka tokiso ha e so hlalosoe ka botlalo.

Bluetooth SIG, mokhatlo o ikarabellang bakeng sa ho ntlafatsa maemo a Bluetooth, e phatlalalitse mabapi le nts'etsopele ea ntlafatso ho litlhaloso tsa Bluetooth Core. Khatiso e ncha e hlalosa ka ho hlaka maemo ao ho 'ona ho lumelletsoeng ho fetola mesebetsi ea makhoba a master, e hlahisitse tlhokahalo e tlamang bakeng sa ho netefatsoa ha motho a khutlela mokhoeng oa "lefa", mme e khothalelitse ho lekola mofuta oa encryption ho thibela ho fokotseha ha maemo. tshireletso ya kgokelo.

Source: opennet.ru

Eketsa ka tlhaloso