BlueMaster: Bypassing and Fixing Bluetooth-based Proximity Authentication
summary
Researchers disclose three practical attacks that bypass Android Smart Lock and Windows Dynamic Lock by abusing Bluetooth properties: SDP-based spoofing lets an attacker trigger a trusted connection without encryption, missing isEncrypted checks allow Android unlock bypasses, and Windows relies on untrusted RSSI manipulation and device-class spoofing so a laptop can stay unlocked. Demos show persistent unlocked or non-locking states, Google issues fixes, Microsoft updates guidance, and an open‑source state-analysis tool is released.
AI-written summary · about
chapters (11)
- 0:00Introduction to speaker
- 1:00Bluetooth auth overview
- 5:53Windows dynamic lock
- 7:35Security analysis basics
- 11:48Bluetooth protocol security
- 13:58Proximity check vulnerabilities
- 18:31Technical attack details
- 24:35Android attack demo
- 26:22Windows dynamic lock demo
- 37:27Mitigation and best practices
- 40:59Q&A and conclusion
related talks
18mNo Key, No Problem: Vulnerabilities in Master Lock Smart Locks
51mBluetooth Hacking: Tools And Techniques
35mDeep into Android Bluetooth Bug Hunting: New Attack Surfaces and Weak Code Patterns
42mBreakMi: Reversing, Exploiting & Fixing Fitness Tracking Ecosystems
26mMerging Passwordless and Physical Access Control
22mA Mirage of Safety: Bug Finding & Exploit Techniques of Top Android Vendor's Privacy Protection Apps
18mBLESA: Spoofing Attacks against Reconnections in Bluetooth Low Energy
40mGattacking Bluetooth Smart Devices - Introducing a New BLE Proxy Tool