|| 🏠 Berlin| Pronouns | he/him [er/ihm] |
| searchable | yes |
Join me and @willnix tomorrow at #39c3 talking about Bluetooth headphone hacking and what consequences that might have. We will finally be able to disclose all technical details. We also have a few very cool live demos prepared to demonstrate the issue. Very excited to do the talk and to be back at CCC!
[Airoha](https://www.airoha.com/) is a vendor that, amongst other things, builds Bluetooth SoCs and offers reference designs and implementations incorporating these chips. They have become a large supplier in the Bluetooth audio space, especially ...
Your `pip` unwrapped 🎇
- you tried to install `requirements.txt` 18 times this year. Doing better than last year!
- of the packages you installed 67% started with py, 11% python, and 6% Py. You guessed wrong 85 times.
- your love for building source has no bounds, except maybe the 92 failed compiles
- you updated `requests` 18 times. Urllib is feeling lonely.
- the average time between updating `pip` was 97 days. But we warned you 338 times!
More technical details will follow soon. Especially details on how to check whether your device is affected.
We hope that vendors quickly release updates with the fixes that were provided by Airoha.
Yesterday at #Troopers25, @twillnix and I published some of our research on Bluetooth headphones and earbuds. We found that there is a large number of Airoha-based headphones that can be fully compromised via Bluetooth.
https://insinuator.net/2025/06/airoha-bluetooth-security-vulnerabilities/
ttdennis
1.3.6.1.4.1.61513
Eva Wolfangel
Insinuator