Researchers at Eurecom have developed six new attacks collectively named 'BLUFFS' that can break the secrecy of Bluetooth sessions, allowing for device impersonation and man-in-the-middle (MitM) attacks.
It's also crazy how there is this push from all OEM to remove headphone jack and force consumers to use wireless earphones, further making the attack surface much wider.
When these kinds of exploits are discovered, my first fear is people with Flipper Zeros running custom firmware exclusively for trolling...
Imagine you're listening to music in your headphones (or in your car with Bluetooth), then without warning it reconnects and now you're hearing baby shark 😣
I have a Bluetooth amp in my kitchen. I live in a row home. One day it started blasting country music... Turned it off for a couple hours, never happened again. Probably a curious neighbor, but still funny.