Conversation

Notices

1. Embed this notice
   whiteline (whiteline@shitposter.world)'s status on Sunday, 09-Mar-2025 06:27:29 JST whiteline
   so it turns out the ESP32 has a full-scale remote backdoor built into the bluetooth stack
   • dilbert 1 likes this.
   • Embed this notice
     dilbert 1 (sun@shitposter.world)'s status on Sunday, 09-Mar-2025 06:27:31 JST dilbert 1

     in reply to
     @whiteline is it verified
   • Embed this notice
     :blank: (i@declin.eu)'s status on Sunday, 09-Mar-2025 06:57:58 JST :blank:

     in reply to

     • dilbert 1
     @sun @whiteline if you have code execution on the chip, you can poke and prod the bits espressif isn't allowed to open source via left over debug HCI commands
     dilbert 1 likes this.
   • Embed this notice
     dilbert 1 (sun@shitposter.world)'s status on Sunday, 09-Mar-2025 06:58:05 JST dilbert 1

     in reply to

     • :blank:
     @i @whiteline so yes but plausible deniability
   • Embed this notice
     dilbert 1 (sun@shitposter.world)'s status on Sunday, 09-Mar-2025 07:03:08 JST dilbert 1

     in reply to

     • :blank:
     @i @whiteline ok I didn't understand what you said, it was grammatically confusing I'm sorry.
   • Embed this notice
     :blank: (i@declin.eu)'s status on Sunday, 09-Mar-2025 07:03:09 JST :blank:

     in reply to

     • dilbert 1
     @sun @whiteline is it a backdoor if you can only reach it from code you upload yourself?
   • Embed this notice
     whiteline (whiteline@shitposter.world)'s status on Sunday, 09-Mar-2025 19:11:14 JST whiteline

     in reply to

     • quality floof 🏳️‍🌈🦊
     • dilbert 1
     @flisk @sun ohhhhh, the way the article angled it they made it seem like it was externally available bluetooth commands :blobcatcomfy:
     dilbert 1 likes this.
   • Embed this notice
     quality floof 🏳️‍🌈🦊 (flisk@fops.cloud)'s status on Sunday, 09-Mar-2025 19:11:15 JST quality floof 🏳️‍🌈🦊

     in reply to
     @whiteline can you post a source? all i'm finding does not match that description (neither remote nor backdoor, just "you can control the chip if you have hardware access or already pwned the host device" which sounds completely normal to me)