Zephyr OS Bluetooth vulnerabilities left smart devices open to attack

Vulnerabilities in the Zephyr real-time operating system's Bluetooth stack have been identified, leaving a wide variety of Internet of Things devices open to attack – unless upgraded to a patched version of the OS. A security advisory released by Synopsys this afternoon highlights eight key vulnerabilities in Zephyr's …

[Wilhemina Droodle]

Subtitle is the headliner

Subtitle is one of the funniest in recent memory. Well done! LMO (no A left afterward).

[A random security guy]

It's been around for a long time, though.

[Michael Wojcik]

Not sure what your antecedent is there.

When the first draft Bluetooth spec came out, Bruce Schneier excoriated the committee in CRYPTO-GRAM for not including security professionals and doing a poor job with security in the first place. Bluetooth has never gotten better. While these are implementation vulnerabilities, the whole thing is a mess.

[Gene Cash]

Bluetooth LE long-range mode??? WTF?

"Bluetooth LE long-range mode, which was introduced in the Bluetooth 5 specification, may provide a range of up to 1km"

Isn't that Bluetooth Low-Energy high-energy mode? My classic Bluetooth doesn't go past a couple dozen meters!

[Warm Braw]

Re: Bluetooth LE long-range mode??? WTF?

Isn't that Bluetooth Low-Energy high-energy mode?

Actually, no. It's more of a lower-throughput, same energy mode.