HackerPapers

arXiv:2108.07190cs.CR

Happy MitM: Fun and Toys in Every Bluetooth Device

Jiska Classen, Matthias Hollick

Early discovery. Linked by one identifiable commenter. This paper is outside the main ranking; a mention is not an endorsement.

Abstract

Bluetooth pairing establishes trust on first use between two devices by creating a shared key. Similar to certificate warnings in TLS, the Bluetooth specification requires warning users upon issues with this key, because this can indicate ongoing Machine-in-the-Middle (MitM) attacks. This paper uncovers that none of the major Bluetooth stacks warns users, which violates the specification. Clear warnings would protect users from recently published and potential future security issues in Bluetooth authentication and encryption.

arXiv comments
Journal reference
WiSec 2021: Proceedings of the 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks
DOI
doi:10.1145/3448300.3467822
Subjects
cs.CRCryptography and Security cs.NINetworking and Internet Architecture

On Hacker News

Linked by 1 identifiable commenter in 1 comment across 1 thread, from Jan 2026 to Jan 2026.

Comments linking this paper, per year.

Discussed in comments1 thread

  1. Bluetooth Headphone Jacking: A Key to Your Phone [video] 1 comment

    • Regular Bluetooth security is not that great. A lot of it is poor usability where the user can't easily know that they don't have a secure connection. Setting up a secure connection might involve entering a PIN on each end of the connection which might be challenging for…

      upofadownView on HNParent context

Submitted to Hacker News

Connected through shared HN threads, not inferred similarity or a recommendation.