KNOB Attack compromises Bluetooth security, but fix is already hitting Android

A research team has publicized about a vulnerability in Bluetooth that may affect nearly every device that supports the wireless communication protocol. Chipmakers were made aware to the so-called Key Negotiation of Bluetooth (KNOB) Attack in November. BlackBerry and Google have announced patches for Android devices.

In short, the vulnerability occurs in the encryption key generation process when two device are pairing. Specifically, an entropy load to obscure the key while in transit is negotiated in an unencrypted fashion and can be easily interfered with either by a man-in-the-middle attack or bad code injected into a Bluetooth chip's firmware.

Read More

KNOB Attack compromises Bluetooth security, but fix is already hitting Android was written by the awesome team at Android Police.

from Android Police – Android news, reviews, apps, games, phones, tablets http://bit.ly/2HhGbRr