Geeks2U Promise
We guarantee you'll love our fast, friendly service - or we'll refund your money.  
133,572 Happy Customers & Counting
Need tech support?
1300 769 448
Extended hours, 7 days a week
Home  /  geekspeak  /  Should BlueBorne have you feeling blue?

Should BlueBorne have you feeling blue?

Security used to be one of those factors that was hard-wired into any financial software product or generally security focused-application, but in recent years we’ve seen a massive growth in the number of exploits that attack other software vectors in order to gain control of, or access to a system.

The latest potentially troublesome vulnerability to be discovered has been dubbed “Blueborne”, because it’s a vulnerability that exploits weaknesses in older implementations of the Bluetooth standard to both attack vulnerable systems and spread itself. Because of the way it transmits over Bluetooth, a Blueborne attack could, in theory, spread simply by walking past another infected device with your own Bluetooth-capable device — for example a smartphone or tablet — which would then “accept” the attack itself, and become a new malware vector.

That’s a vulnerability with a potentially massive scope, because pretty much every smartphone and tablet, and most laptops and even some desktop PCs have inbuilt or add-on Bluetooth modules. The attack targets a common way that the standard uses to initiate communications, so unlike, for example, data transmission over Bluetooth such as file transfers or audio streaming, it’s already present before any user acceptance buttons or warnings would ever pop up on screen.

That sounds grim, and in theory it could allow an attacker to wander around, compromising machines at will simply by walking past them, but there are some silver linings to this particular malware story.

In the first place, the vulnerability was discovered by security researchers at Armis Labs, rather than malware authors. That’s important, because a known vulnerability is one that can be patched over, where an unknown exploit is one that’s not likely to be addressed. It’s the difference between knowing you’ve lost your keys, so the locks need to be changed, and not knowing that there’s somebody out there with a set of keys at all. As such, software patches can be written and some systems should be updated to block anyone trying to take advantage of the exploit. Which doesn’t mean it’s dead in the water, but it does blunt a lot of its potential effectiveness.

This should, by the way, serve as your timely reminder to apply all the available update and security patches to your desktops, laptops, tablets and smartphones, because it’s precisely this kind of problem that those patches can block, even if you don’t know that they’re doing so.

The second bit of good news relates precisely to those updates, because the most obvious vector for these kinds of exploits are smartphones. They’re usually all Bluetooth-enabled devices, they’re very mobile and as such they’re far more likely to wander into range of a potentially exploited system. If you’re running up-to-date iOS on an iPhone (iOS 10 at the time of writing, although it’ll be iOS 11 as of 19/20th of September), then you’re already secure. If your device is running iOS 9.3.5 or earlier, however, there may be an issue, and if a software upgrade isn’t available due to hardware age, disabling Bluetooth may be wise. On the Android side of the issue, if you’re using a device on Android 6.0 (“Nougat”) or Android 7.0 (“Marshmallow”) then the September security update deals with Blueborne entirely. However, the spread of that security update varies by Android hardware manufacturer. Hopefully the threat will convince some tardy manufacturers to speed the patching process, but for older hardware that can’t even handle Android 6.0, again there’s a possible threat.

For Windows users, as long as you’re running Windows Vista or better and you have applied the September security updates. Microsoft isn’t supplying security updates for earlier versions of Windows than that any more to speak of, so again, caution is advised. It’s not entirely clear whether the shared source code libraries of Mac systems are vulnerable or not, but you’re definitely advised to upgrade (which Apple does for free for qualifying systems) to at least macOS Sierra, which should be Blueborne-free.


Recent News

There’s really never been a time when we’ve been this connected, thanks to the wonders of the Internet. But it’s not all Zoom parties and engaging content – there’s a darker side to the online world and internet privacy is serious business. It’s not all doom and gloom though – you do have some control

There’s a lot of choice right now when it comes to streaming video services online. They’re all built on the same basic premise; you get access to a large library of content to stream for a month, typically (but not always) for around $10 per month. That kind of price can net you access to

In Australia, the vast majority of smartphones sold are tied either to Apple or Samsung. Everyone else in a brand sense runs a very distant third. Smartphones are very well established as a category, but they’re linked very closely to smart watches that pair with them. Again, the same kinds of trends emerge, with research

If you’re an Apple user, you might have already heard of a built-in feature designed to protect your device if you lose it. ‘Lost Mode’ safeguards your Apple products and can help you find your iPhone if you’ve lost or misplaced it. To help you secure your Apple devices, let’s explore what Lost Mode is

Coronavirus (COVID-19) Update

Learn about the precautions we are taking and our new contactless pick-up and remote service options. Read More
Get help setting up your home office or homework area today. Learn More