Bluetooth Low Energy WarDriving 101 | Hacker News Reader

Bluetooth Low Energy WarDriving 101

davidsopas.com

95 pointsinfosecrf25 comments

This is interesting and has potential, but right now it's just getting the hardware going with a better antenna. It'll be much more interesting to see what he finds over the course of a month or so.

So the idea would be to see how easy it is to hijack these devices wit driveby attacks?

I'd think passive data collection would be more interesting (for nefarious purposes), considering that BTLE is widely used for sensors and in particular for sensors that record very personal data like heart rate.

> I'd think passive data collection would be more interesting (for nefarious purposes), considering that BTLE is widely used for sensors and in particular for sensors that record very personal data like heart rate.

What nefarious things can you do with knowledge of someone's heart rate though?

Spoofing HR and power telemetry for opposing running/cycling/triathlon teams. I'd send it slightly low, say 3-5bpm, so the target overexerts themselves.

While it doesn't necessarily use the heart rate data (maybe some ID gets broadcasted), you probably can use it to track somebody's whereabouts... to know when they are close to a specific location, for example.

Paparazzi spying an ailing Senator, for example. BTLE is also used for more sensitive medical sensors.

If you detect irregularities you can deny them health insurance.

There is much better hardware out there. The Ubertooth devices can pick up BLE, and can also plug into basically any antenna you want. It's been a while since I played with it, but a few years ago my ubertooth was grabbing LAPs without difficulty. It's not a dirt-cheap device (150$ all in) but is open and available from a variety of sources.

https://github.com/greatscottgadgets/ubertooth/wiki/Capturin...

Would this process also work for WiFi usb dongles, which also operate on 2.4GHz?

What are thoughts on what one could potentially achieve with connectable devices?

Skynet

David: If you are reading this, your site has very annoying "smooth scroll" that breaks scrolling for all mac users and also breaks the "back" shortcut on mac trackpads. Would recommend removing this: https://www.davidsopas.com/wp-content/themes/blg/framework/j...

If only browsers would support scrolling their content natively...

The site works fine for this Mac user. (Safari 11.0.2, High Sierra)

On Sierra here:

* Chrome 63.0.3239.108 - broken

* Safari 11.0.2 (12604.4.7.1.4) - works fine

High Sierra 10.13.2 (17C88) Chrome 63.0.3239.108 - Flawless Safari 11.0.2 (13604.4.7.1.3) - Broken

Yeah, can you please elaborate? MacBook Air Mid 2012 with High Sierra Safari 11.0.2, and everything on the site is fine.

Scrolls smooth, gestures work.

The site doesn’t come up at all on iOS and the built-in Safari mini browser.

Not all mac users - it is working just fine for me. (Chrome 63.0.3239.84, High Sierra)

Broken for me - Chrome 63.0.3239.108, Sierra.

Broken for me - Chrome 63.0.3239.84, Sierra.

Broken for me - Chrome 63.0.3239.84, Sierra

Fine on Firefox 57.0.1, High Sierra

Usable, but annoying, on a Thinkpad trackpoint.

Reply on news.ycombinator.com