Shostack + Friends Blog Archive

 

Disclosure

Adam Laurie and company continue to not release code for their Bluetooth attacks, and vendors continue not to fix them. Are we better off, with millions more Bluetooth devices out there? Do we expect that there will be no release of code, and that without POC code, we’re safe? Bluetooth is different from internet vulns, in that you need to be nearby to exploit them. That may well tip the balance against disclosure, but as someone who travels to lots of security conferences attended by hackers and elite attackers, I wish my phone was secure.

(Via Netsec.)

3 comments on "Disclosure"

  • Cypherpunk says:

    My phone is secure!

  • Disclosure of Bluetooth exploits

    Adam Shostack writes: Adam Laurie and company continue to not release code for their Bluetooth attacks, and vendors continue not to fix them. Are we better off, with millions more Bluetooth devices out there? Do we expect that there will…

  • David Maynor says:

    Sounds like the problems of the late 90’s have found their way to mobile devices.

Comments are closed.