2020/05/17 by Mira Weller, Jiska Classen, Fabian Ullrich +2 · 1 voice · 2 citations
Computer Science · Decision Sciences · #User Authentication and Security Systems #Bluetooth and Wireless Communication Technologies #Personal Information Management and User Behavior
paper · pdf · doi:10.1145/3395351.3399422
A Bluetooth finder is a small battery-powered device that can be attached to important items such as bags, keychains, or bikes. The finder maintains a Bluetooth connection with the user's phone, and the user is notified immediately on connection loss. We provide the first comprehensive security and privacy analysis of current commercial Bluetooth finders. Our analysis reveals several significant security vulnerabilities in those products concerning mobile applications and the corresponding backend services in the cloud. We also show that all analyzed cloud-based products leak more private data than required for their respective cloud services.