this post was submitted on 27 Jun 2025
506 points (97.4% liked)

Technology

71995 readers
2707 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
506
Zero-day: Bluetooth gap turns millions of headphones into listening stations (www.heise.de)
submitted 1 day ago by [email protected] to c/[email protected]
116 comments fedilink hide all child comments
 

The Bluetooth chipset installed in popular models from major manufacturers is vulnerable. Hackers could use it to initiate calls and eavesdrop on devices.

Source

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 21 points 1 day ago (3 children)

So how do you determine if your headphones have the vulnerable chip in them?

[–] [email protected] 57 points 1 day ago (3 children)

The flaws, discovered by German cybersecurity firm ERNW and first reported by Heise Online, affect dozens of headphone models from brands such as Sony, JBL, Bose, and Marshall, with no comprehensive firmware fixes available yet.

  • Sony WH-1000XM4/5/6, WF-1000XM3/4/5, LinkBuds S, ULT Wear, CH-720N, C500, C510-GFP, XB910N
  • Marshall ACTON III, MAJOR V, MINOR IV, MOTIF II, STANMORE III, WOBURN III
  • JBL Live Buds 3, Endurance Race 2
  • Jabra Elite 8 Active
  • Bose QuietComfort Earbuds
  • Beyerdynamic Amiron 300
  • Jlab Epic Air Sport ANC
  • Teufel Airy TWS 2
  • MoerLabs EchoBeatz
  • Xiaomi Redmi Buds 5 Pro
  • earisMax Bluetooth Auracast Sender

ERNW emphasizes that this is only a partial list.

Source

[–] [email protected] 1 points 5 hours ago

wf-1000XM3 connected, playing Cissy Strut

Guess I'm lucky to have broken the mics on mine by accidentally throwing them in the wash?

[–] [email protected] 17 points 1 day ago* (last edited 1 day ago) (1 children)

Sony WH-1000XM4/5/6

I don't have one of those, but they're pretty popular as headphones with good ANC.

Jlab Epic Air Sport ANC

I do have those, though.

[–] [email protected] 3 points 1 day ago* (last edited 1 day ago)

Yeah. I have the previous version of the WH which seems not affected, but I also have the WF 3 which unfortunately seems to be.

Many people have sony headphones with thise chips.

[–] OberonSwanson 6 points 1 day ago

Damn that's pretty big, hopefully they update and give a final list of affected devices. Not to mention, gotta pray the devices will see software updates to try and mitigate it.

[–] [email protected] 9 points 1 day ago

According to the article, headphones using a Bluetooth SoC manufactured by Airoha may be vulnerable. So, need to find if your headphones use their SoC.

[–] [email protected] 8 points 1 day ago

You will need to do some research on your headphones, I guess.