#1
#1 out of 323.6K est. views35.92%
technology4h ago
Hundreds of Millions of Audio Devices Need a Patch to Prevent Wireless Hacking and Tracking
- Security researchers demonstrated that 17 devices across 10 brands could be silently paired by an attacker within Bluetooth range using WhisperPair.
- Attacks could hijack audio streams, inject sound, or secretly access microphones on vulnerable devices.
- The study found that Find Hub could enable stealthy tracking of a victim’s location via connected devices.
- Patches have been issued for Google and several hardware makers, but user deployment may be slow and inconsistent.
- Experts call for cryptographic enforcement to ensure only authenticated pairings occur, addressing the root issue.
- Google’s Validator App exists to certify Fast Pair implementations, yet tested devices still passed despite flaws.
- Vulnerable devices include models from Sony, JBL, Jabra, Xiaomi, Nothing, OnePlus, Soundcore, Marshall, and more.
- The researchers used a Raspberry Pi 4 to test pairing attempts from about 14 meters away.
- Google acknowledged the findings and said it is continually evaluating and enhancing Fast Pair security.
- Security groups warn that consumer updates remain inconsistent, leaving IoT devices vulnerable for months or years.
Vote 4
