Ezinsukwini ezimbalwa ezedlule, abacwaningi abavela eSwiss Federal Institute of Technology Lausanne bamemezele ukuthi sebethole ubuthakathaka ezindleleni zokubhanqa zamadivayisi ahambisana nezinga le -Bluetooth Classic (i-Bluetooth BR/EDR).
Ubungozi bubizwa nge-codename BIAS futhi inkinga ivumela umhlaseli ukuthi ahlele uxhumano lwedivayisi yakhe mbumbulu esikhundleni sedivayisi yomsebenzisi exhunywe ngaphambilini futhi aphumelele inqubo yokuqinisekisa ngaphandle kokwazi ukhiye wesiteshi (ukhiye wesixhumanisi) owenziwe ngesikhathi sokuxhumanisa idivayisi kokuqala nokuvumela ngaphandle kokuphinda inqubo yokuqinisekisa ngesandla kuxhumano ngalunye.
Ingqikithi yale ndlela ukuthi uma uxhuma kumadivayisi asekela imodi ye-Secure Connections, umhlaseli ukhangisa ukungabikho kwale modi bese ebuyela endleleni yokuqinisekisa ephelelwe yisikhathi ("imodi yefa"). Kumodi "yefa", umhlaseli uqala ushintsho lwendima ye-master-slave, ethula idivayisi yakhe njenge-"master" futhi ethatha inqubo yokuqinisekisa. Umhlaseli ube esethumela isaziso sokuqedwa kokuqinisekisa okuphumelelayo, ngaphandle kokuba nokhiye wesiteshi, bese idivayisi iziqinisekisa ngakolunye uhlangothi.
I-Bluetooth Spoofing Attack (i-BIAS) ingenziwa ngezindlela ezimbili ezihlukene, kuya ngokuthi iyiphi indlela elula yokubhanqa okuvikelekile (noma ngabe i-Legacy Secure Connections noma i-Secure Connections) eyayikade isetshenziswa ukuqala ukuxhumana phakathi kwamadivayisi amabili. Uma inqubo yokubhangqa iqediwe kusetshenziswa indlela yokuxhumana okuvikelekile, umhlaseli angasho ukuthi iyithuluzi elikude elibhanqiwe ngaphambilini elingasasekeli ukuxhumana okuphephile, kunciphisa ukuphepha kokufakazela ubuqiniso.
Ngemva kwalokho, umhlaseli angakwazi ukusebenzisa ukhiye wokubethela omfushane kakhulu, oqukethe i-byte e-1 kuphela ye-entropy , futhi asebenzise ukuhlaselwa kwe-KNOB okwakhiwe ngaphambilini ngabacwaningi abafanayo ukuze kusungulwe uxhumano lwe-Bluetooth olubethelwe ngaphansi kwesimo sedivayisi esemthethweni (uma idivayisi ivikelekile ekuhlaselweni kwe-KNOB futhi usayizi wokhiye ungancishiswa, umhlaseli ngeke akwazi ukusungula isiteshi sokuxhumana esibethelwe, kodwa uzoqhubeka nokuqinisekiswa kumphathi).
Ukuze kusetshenziswe ngempumelelo ubungozi , idivayisi yomhlaseli kumele ibe ngaphakathi kwedivayisi ye-Bluetooth esengozini, futhi umhlaseli kumele anqume ikheli ledivayisi ekude lapho uxhumano lwenziwe khona ngaphambilini.
Abaphenyi bashicilele ikhithi yamathuluzi esebenzisa indlela ehlongozwayo yokuhlasela futhi bakhombisa ukuthi bangakuthinta kanjani ukuxhuma kwe-smartphone ye-Pixel 2 ebhangqwe phambilini besebenzisa ilaptop ye-Linux kanye nekhadi le-Bluetooth le-CYW920819.
Indlela ye-BIAS ingenziwa ngenxa yalezi zizathu ezilandelayo: ukusungulwa koxhumano oluphephile i-Bluetooth ayibetheli futhi ukukhethwa kwendlela yokuxhumanisa evikelekile akusebenzi ukubhangqwa osekuvele kumisiwe, ukusungulwa koxhumano oluphephile lwe-Legacy Secure Connections ayidingi ukufakazelana ubuqiniso bobabili, idivaysi ye-Bluetooth ingenza ushintsho lwendima nganoma yisiphi isikhathi ngemuva kosesho lwe-baseband, futhi amadivayisi abhanqwe ne-Secure Connections angasebenzisa i-Legacy Secure Connections ngenkathi esungula ukuxhumana okuphephile.
Inkinga ibangelwa ukukhubazeka kwememori futhi ibonakala kuma-Bluetooth stacks amaningana kanye ne-Bluetooth chip firmware, okuhlanganisa i-Intel, i-Broadcom, i-Cypress Semiconductor, i-Qualcomm, i-Apple, kanye nama-Samsung chip asetshenziswa kuma-smartphone, ama-laptop, amakhompyutha ebhodi elilodwa, kanye nezinto ezisetshenziswa kubakhiqizi abahlukahlukene.
Abacwaningi bahlole amadivayisi angu-30 (i-Apple iPhone/iPad/MacBook, i-Samsung Galaxy, i-LG, i-Motorola, i-Philips, i-Google Pixel/Nexus, i-Nokia, i-Lenovo ThinkPad, i-HP ProBook, i-Raspberry Pi 3B+, njll.), asebenzisa ama-chip angu-28 ahlukene, futhi azisa abakhiqizi ngobungozi ngoDisemba odlule. Akukaziwa okwamanje ukuthi yibaphi abakhiqizi abakhiphe izibuyekezo ze-firmware ngokulungiswa.
Ngenxa yalokho, i-Bluetooth SIG, inhlangano ephethe ukuthuthukisa amazinga e-Bluetooth, imemezele isibuyekezo se-Bluetooth Core specification . Uhlelo olusha luchaza ngokucacile izimo lapho kuvunyelwe khona ukushintsha indima ye-master-slave, lugunyaza ukuqinisekiswa okuhambisanayo lapho lubuyela kumodi "yefa", futhi luncoma ukuqinisekisa uhlobo lokubethela ukuze kuvinjelwe ukwehla kokuphepha kokuxhumeka.
Umthombo: https://www.kb.cert.org