Conversation

Notices

1. Embed this notice
   whiteline (whiteline@shitposter.world)'s status on Sunday, 09-Mar-2025 06:27:29 JST whiteline
   so it turns out the ESP32 has a full-scale remote backdoor built into the bluetooth stack
   • Fish of Rage likes this.
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Sunday, 09-Mar-2025 06:27:31 JST Fish of Rage

     in reply to
     @whiteline is it verified
   • Embed this notice
     :blank: (i@declin.eu)'s status on Sunday, 09-Mar-2025 06:57:58 JST :blank:

     in reply to

     • Fish of Rage
     @sun @whiteline if you have code execution on the chip, you can poke and prod the bits espressif isn't allowed to open source via left over debug HCI commands
     Fish of Rage likes this.
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Sunday, 09-Mar-2025 06:58:05 JST Fish of Rage

     in reply to

     • :blank:
     @i @whiteline so yes but plausible deniability
   • Embed this notice
     Fish of Rage (sun@shitposter.world)'s status on Sunday, 09-Mar-2025 07:03:08 JST Fish of Rage

     in reply to

     • :blank:
     @i @whiteline ok I didn't understand what you said, it was grammatically confusing I'm sorry.
   • Embed this notice
     :blank: (i@declin.eu)'s status on Sunday, 09-Mar-2025 07:03:09 JST :blank:

     in reply to

     • Fish of Rage
     @sun @whiteline is it a backdoor if you can only reach it from code you upload yourself?
   • Embed this notice
     whiteline (whiteline@shitposter.world)'s status on Sunday, 09-Mar-2025 19:11:14 JST whiteline

     in reply to

     • quality floof 🏳️‍🌈🦊
     • Fish of Rage
     @flisk @sun ohhhhh, the way the article angled it they made it seem like it was externally available bluetooth commands :blobcatcomfy:
     Fish of Rage likes this.
   • Embed this notice
     quality floof 🏳️‍🌈🦊 (flisk@fops.cloud)'s status on Sunday, 09-Mar-2025 19:11:15 JST quality floof 🏳️‍🌈🦊

     in reply to
     @whiteline can you post a source? all i'm finding does not match that description (neither remote nor backdoor, just "you can control the chip if you have hardware access or already pwned the host device" which sounds completely normal to me)