[go: nahoru, domu]
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Investigate how malicious devices could become trusted keyboards/mice #46

Open
jyasskin opened this issue Sep 24, 2014 · 3 comments
Open

Investigate how malicious devices could become trusted keyboards/mice #46

jyasskin opened this issue Sep 24, 2014 · 3 comments
Labels
help wanted security
Milestone
Initial GATT Comm...

Comments

@jyasskin
Copy link
Member

USB devices are trusted as keyboards and mice by default, which leads to well-known exploits like https://srlabs.de/badusb/.

How vulnerable are current operating systems to the same attacks over Bluetooth? For example, if I pair a device that looks like a fitbit, but which also exposes a HID keyboard service, will my OS trust the keyboard without warning me? If I pair a device, and it adds a keyboard service later, will my OS trust the new keyboard?

This is relevant to this project because we have to assume some devices will be vulnerable to GATT writes in ways that let the attacker compromise the firmware and add new services.

@jracle @armansito
@keybuk
Copy link
keybuk commented Sep 25, 2014

Linux systems will trust that keyboard, I suspect that OS X and Windows will too.

We don't really have a well-defined notion of intent when dealing with Bluetooth devices. If I pair a device through the UI, do I intend to use that device as a keyboard, or with an app, or both? If I only intend to use it through an app, how do I subsequently use it with additional apps, or as a system device?

It's not a technology problem, adding a service whitelist to the device database is trivial. It's a UX one.

@shuangMoz
Copy link

Keyboards/mice implemented as the standard HOGP, and they are almost filtered out from the list of discovered services by OS (such iOS, Android). Can UA application actually handle it?

@jyasskin jyasskin mentioned this issue Oct 29, 2015
Open
@shuangMoz
Copy link

@jyasskin
When you paired with device in Linux, that device will not mark as "Trusted" by default, right? In that way, we can control it per service.

@adamroach adamroach mentioned this issue Jul 6, 2018
Closed
@lidel lidel mentioned this issue Dec 6, 2018
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
help wanted security
Projects
None yet
Milestone
Initial GATT Communication
Development

No branches or pull requests
3 participants
@jyasskin @keybuk @shuangMoz