Every Bluetooth device, from a smartphone to wireless earbuds and a mouse, constantly broadcasts small packets announcing its presence. They keep devices connected and enable Apple's Automatic Pairing and Google's Fast Pair, but they can also reveal information about the person carrying them. Intercepting these packets is called Bluetooth sniffing.
A captured packet can show a device's name, manufacturer, firmware version and MAC address. If someone leaves a sniffer running in a busy place, such as a hotel lobby, they can work out how often a device advertises and when it appears and disappears from range.
Image: ellisys.com — https://www.ellisys.com/products/bex400/
Bluetooth Low Energy security has improved, but flaws remain. Researchers at the French institute Eurecom have shown that the re-pairing process can be exploited to impersonate devices, downgrade security and enable unauthorised pairing, whatever the Bluetooth version.
Not all devices are equal
Many laptops and smartphones use Resolvable Private Addresses, which rotate the identifier a device uses and make long-term tracking harder. Not every device does this, and some headphones and smartwatches renew them less often than they should. RPAs alone do not fully prevent information leaks.
The riskiest places are where people gather: airports, hotels, conferences, cafés and gyms. For professionals handling sensitive material, older devices are a particular concern. Aimee Simpson, director of product marketing at Huntress, warns that devices with outdated firmware or legacy Bluetooth versions are more vulnerable, and that the OBEX protocol can let attackers bypass authentication and extract data. Outdated mice, keyboards or headsets supplied to employees raise the risk.
Image: daraz.com.bd — https://www.daraz.com.bd/products/upgraded-one-bluetooth-protocol-analyzer-one-bluetooth-protocol-analyzer-open-source-24ghz-transmitreceive-supports-ble-i1578810898.html
Brett Walkenhorst, chief technology officer at Bastille, points to a vulnerability found about ten years ago in 2.4GHz wireless dongles that connect mice to computers. These use a different protocol from Bluetooth but remain common in offices, meeting rooms and homes. He advises organisations to know which wireless devices operate in their environments and to set rules for their use.
The name gives you away
If a device is labelled with your name, such as "Jada's AirPods", anyone sniffing nearby knows who you are. Lorena Carthy-Wilmot, head of EU security strategy at iVerify, recommends random or vague names. In her experience, though, sniffing is more often a backup tactic than a primary source of valuable data: for an ordinary person the risk of being targeted is low, while for government officials and senior executives it is higher.
No comments yet. Be the first!