Stealthily Access Your Android Phones - Bypass the Bluetooth Authentication

This technical presentation examines BlueRepli, a Bluetooth vulnerability in Android that enables stealthy access to phonebooks and messages. It explains the relevant Bluetooth profiles, authentication bypass methods, and a portable hardware implementation for testing the attack.

Syllabus

Intro
Shortterm Privacy Chaos
Phonebook Short Messages
Bluetooth Profile
The Bad Bluetooth
What can Bluetooth do
How to disguise Bluetooth capabilities
How to bypass the second dialogue
The two bypass methods are mutually exclusive
The devices using the Android system reached 100 million in March this year
Blue Raptor is a wonderful discovery
Hardware
Software
UI
Root Cache
Summary