Technology

64933 readers

3979 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

952

Undocumented Commands Found In Bluetooth Chip Manufactured in China Used By a Billion Devices. (www.tarlogic.com)

submitted 1 day ago* (last edited 16 hours ago) by Tea to c/[email protected]

166 comments fedilink hide all child comments

Source Link Privacy.

https://themarkup.org/blacklight?url=https%3A%2F%2Fwww.tarlogic.com%2Fnews%2Fbackdoor-esp32-chip-infect-ot-devices%2F&device=mobile&location=us-ca&force=false

Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of mass-market IoT devices. Exploitation of this backdoor would allow hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls.

Update: The ESP32 "backdoor" that wasn't.

(page 3) 50 comments

sorted by: hot top controversial new old

[–] [email protected] 21 points 1 day ago

One more reason to have actual open-source drivers instead of binary blobs..

[–] [email protected] 5 points 1 day ago* (last edited 1 day ago)

Jokes on them, I live in America when all that shit was already being done.

[–] [email protected] 9 points 1 day ago (4 children)

Is this some hardware flaw, or just something in their standard BT stack?

[–] [email protected] 3 points 1 day ago

I was wondering the same thing. Wasn't clear on whether these backdoors are there on purpose or because of mistakes

load more comments (3 replies)

[–] [email protected] 4 points 1 day ago

I read in another article that the identified 28 backdoor commands.

[–] [email protected] 4 points 1 day ago (1 children)

Yeah one of my more… tech adventurous friends had the most insane series of security breaches (to out it mildly) potentially related to this and some other recent ridiculousness.

[–] [email protected] 1 points 20 hours ago

What do you mean

[–] [email protected] 4 points 1 day ago (1 children)

I have a bunch of ESP32's that ... I can update and replace the firmware on, if i reset it the right way with a usb cable. the web site doesn't explain it any way how this is any worse than that...?

[–] embed_me 5 points 1 day ago

The website is also the guy trying to sell the solution so I'm just sceptical for now

load more comments