Courses:

Offensive Countermeasures: The Art Of Active Defense: SANSFIRE June 15-16, Blackhat USA July 27-28 & 29-30


Conferences:

Check out the entire PaulDotCom crew at BsidesRI June 14-15th!



Subscribe:

Blog:
Videos:
Podcast:


PaulDotCom EspaƱol


Hack Naked TV


Hack Naked At Night


Stogie Geeks


Sponsored By:


www.coresecurity.com


www.tenablesecurity.com


www.sans.org



Follow Us On:


twitter.com/pauldotcom

PaulDotCom YouTube Channel


Bluetooth for Windows Remote Audio Eavesdropping

|
This setting allows anyone to remotely inject audio into a victim's PCspeakers, as well as remotely monitor audio via the microphone.

This is one of the scariest hacks I've seen lately. As indicated above, it allows you to record or play audio remotely on a victim's machine! This vulnerability applies to the Widcomm Windows bluetooth drivers which do not require authentication in order to connect to the Audio Gateway.

More information, including remediation steps, can be found here.

What would people hear you saying at your desk? (I mostly curse certain vendors web browsers, occasionally burp, and say "wow, that's cool" a lot). Now, as far as being able to play audio on a remote machine I could have so much fun with that one. Just think, the "The Italian Christmas Donkey" song playing over and over and over and over and over......

Full Advisory

.com