Iqembu labacwaningi liveze ubuthakathaka obusha obuthinta ukuxhumana kwe-Bluetooth . Ngokusho kwabo, iphutha libhekwa njengelibi kakhulu ngoba ukuphepha nobumfihlo babo bonke abasebenzisi be-Bluetooth kungaba sengozini.
Ingabe uxhumano lwami lwe-Bluetooth aluvikelekile ngempela?
Iqembu labacwaningi, elimemezele lobu bungozi obusha ekuxhumekeni kwe-bluetooth ngesikhathi se-USENIX Security Symposium, kuye kwacaca: kubi kakhulu. Futhi yebo, kungenxa yokuthi i-Bluetooth SIG ngokwayo, indikimba eyengamele amazinga alobu buchwepheshe, iqinisekise ubukhona bayo futhi yakhipha isaziso sokuphepha salokho abaye bakubiza ngokuthi i-KNOB (Ukuxoxisana Okubalulekile kwe-Bluetooth).
Ubuthakathaka okukhulunywa ngabo buhilela ukusebenzisa inqubo yokubhanqa ye-Bluetooth ukuguqula ukhiye wokubethela ube omfushane , okwenza kube lula ukuqhekeka. Lokhu kuvumela umhlaseli ukuthi asebenzise ukuhlasela kwe-brute-force uma amadivayisi esebhangqiwe ukuze athole ukhiye futhi athole ukufinyelela kudatha eyabelwana ngawo phakathi kwawo.
Njengoba izigidi zamadivayisi zisebenzisa lolu hlobo lokuxhumana, njengezingcingo, amakhompyutha, izimoto, izipikha, izinto ezigqokwayo, njll., kunengqondo ukuhlukanisa usongo njengolungathi sÃna . Ngaphezu kwalokho, asikho isisombululo esingahileli ukuguqulwa okuphelele kwemininingwane. Ngakho-ke, sidinga ukuthola izindlela zokuxazulula izinkinga zokunciphisa nokunciphisa ingozi.
Nansi ingxenye ebalulekile: lokhu kukuthinta kanjani njengomsebenzisi? Okwamanje, kubalulekile ukucacisa ukuthi, ngokolwazi olutholakalayo, kuthinteka kuphela amadivayisi anoxhumano "olujwayelekile" (i-Bluetooth BR/EDR). Uma idivayisi yakho isebenzisa i-Bluetooth LE (amandla aphansi), ayikho engcupheni.
Uma usebenzisa enye yama-chip angu-17 abonakala njengamanje njengasengozini, kuzodingeka ubuyekeze noma ufake ama-patch okuphepha akhishwe abakhiqizi. Kuze kube manje, yi-Apple ne-Microsoft kuphela abakhiphe ama-patch okuphepha. I -Bluetooth core nayo ishintshiwe ukuze isethe ubude bokhiye obuncane bokubethela ngenani eliphakeme, okwenza kube nzima kakhulu ukuwaphula usebenzisa amandla amakhulu.
Ngakho-ke, uma umuntu ecabangela ukuthi ukuze asizakale, umhlaseli kufanele abe phakathi nesikhathi sesenzo somsebenzisi futhi enze yonke into efasiteleni lesikhathi elincane kakhulu, singasho ukuthi ungaphumula kalula. Ngaphezu kwalokho, i-Bluetooth SIG ngokwayo ayinaso isiqinisekiso noma ubufakazi bokuthi ixhashaziwe.
Noma kunjalo, kunezinkampani eziningi ezisebenzisa eyodwa yalawo ma-chips angu-17 athintekile. Apple, Intel, Qualcomm, Broadcom nabanye abaningi. Ngakho-ke qaphela izibuyekezo ezingaba khona noma amapeshi, ukugcina idivayisi yakho isesikhathini kubalulekile ukuze ugweme izinkinga zalolu hlobo.