It’s strange to think about how complicit the public has become with this. You mean to tell me that 185 separate connections to other companies are required for me to… read an article?

You can get/make your own archive link by going to archive.ph and entering the article's URL.

Here's the link for this one: https://archive.ph/wUAQn

Instead of hacking Bluetooth, sounds more effective to be an "advertising partner".

You did WHAT with them?

They don't GO there....

I am the sweaty balls man and this happens often

Ive always hated phones without the 3.5mm and won't stop even if all phone manufacturers remove it

Not on flagships.

Sent from my Redmi Note 11S 5G.

GDPR. First time opening a European website? German ones like this are particularly transparent (by law, not choice).

US websites don't even ask, they just do it behind your back.

Well, if these devices required any sort of authentication (e.g. pairing) to free access to their ram and flash, we wouldn't be having this particular story..

A fine choice though.

Awwwwwwwwwwwwww YAH

I think BLE is only required for the initial compromise (extracting the pairing key). After that the attack can be performed over classic BT, and can impersonate either part (headphones or phone) to the other.
It's still very targeted and sophisticated, so no reason to panic unless you have reasons to think someone with the resources could target you.
Regarding the attacks, they go way beyond eavesdropping calls, since BT headphones usually have access to contacts and smart assistants, that you can use to extract a lot more information

Directional antennas exist and are very inexpensive

10-15 meters might be good enough to conduct the attack from a neighboring office or apartment, while actual eavesdropping is not so easy.

Honey i got to go there is a man outside our window with a lapton and an radio antenna "Ignore the man outside your window and just read off your credit card number

LOL at the big debate I read just yesterday about how better wireless headphones are, and how useless jacks on phones are nowadays...

Same. I can't find any Bluetooth headphones whose batteries don't die in 4 or 5 months anyway. Meanwhile my Moondrop wired headphones have been going strong for almost 3 years.

My old FM BT transmitter that let me connect to my car had a surprising range, bout about a 100ft in every direction which as I understand it they aren't supposed to be that strong. (Scosche brand from Best Buy)

Used to tune it to the popular country station and jam everyone around me from listening to that station, which made me happy. Couple times when there was a particularly loud or obnoxious driver...I definately didn't blast porn hub with my stereo off in my car..

Tangent.

One of my last concerts I went to was Meshuggah

Had a great time.

The flaws, discovered by German cybersecurity firm ERNW and first reported by Heise Online, affect dozens of headphone models from brands such as Sony, JBL, Bose, and Marshall, with no comprehensive firmware fixes available yet.

• Sony WH-1000XM4/5/6, WF-1000XM3/4/5, LinkBuds S, ULT Wear, CH-720N, C500, C510-GFP, XB910N
• Marshall ACTON III, MAJOR V, MINOR IV, MOTIF II, STANMORE III, WOBURN III
• JBL Live Buds 3, Endurance Race 2
• Jabra Elite 8 Active
• Bose QuietComfort Earbuds
• Beyerdynamic Amiron 300
• Jlab Epic Air Sport ANC
• Teufel Airy TWS 2
• MoerLabs EchoBeatz
• Xiaomi Redmi Buds 5 Pro
• earisMax Bluetooth Auracast Sender

ERNW emphasizes that this is only a partial list.

Source

According to the article, headphones using a Bluetooth SoC manufactured by Airoha may be vulnerable. So, need to find if your headphones use their SoC.

You will need to do some research on your headphones, I guess.

Thanks, I hate it. Vulnerable to your competitor red teaming it tho...

A speaker i have from bose is always on and "sleeping" and can be connected to from the phone no matter what i do, drains the fucking battery and when i want to use it finaly its dead.. wouldnt be surprised if some headphones worked the same..