Bluetooth sniffers can expose gadget data and owner identity

Bluetooth devices constantly broadcast advertising packets that can reveal a device's name, manufacturer, firmware version and MAC address. Researchers have found flaws in Google Fast Pair and the BLE re-pairing process that let attackers impersonate devices and downgrade security.

• BLE advertising packets expose device name, vendor, firmware and MAC address
• Flaws in Google Fast Pair allowed hijacking of personal audio devices
• BLE re-pairing can be exploited to impersonate devices and downgrade security
• Legacy protocols like OBEX and MouseJack still leak data