As a person with modest theoretical knowledge and low practical experience in the matter (read: this might be an utterly bullshit idea), I kind of want to make a “Bluetooth shotgun” that responds to any AWK packets with a slew of spoofed info.
If such a thing were possible, I would then make it also listen for responses, and log them with a geolocation. I would then spoof those responses every time an awk was received around that area. (This is because nonsense data can be filtered to reveal just the real responses - my device(s), but inaccurate real data would destroy the value of the surveillance.)
Editing to add - lots of considerations. I wouldn’t want to just attack random people’s home equipment that’s seeking to pair. Maybe it only blasts out a bunch of responses when it’s an undirected advertisement or the advertisement has a MAC that corresponds to spying companies,
Because I would love to see something like this exist, I went and found some prior art for doing arbitrary BTLE for you. Clankers seem to think SDR is necessary for the response-to-AWK bit because this is usually handled at the firmware/hardware level.
As a person with modest theoretical knowledge and low practical experience in the matter (read: this might be an utterly bullshit idea), I kind of want to make a “Bluetooth shotgun” that responds to any AWK packets with a slew of spoofed info.
If such a thing were possible, I would then make it also listen for responses, and log them with a geolocation. I would then spoof those responses every time an awk was received around that area. (This is because nonsense data can be filtered to reveal just the real responses - my device(s), but inaccurate real data would destroy the value of the surveillance.)
Editing to add - lots of considerations. I wouldn’t want to just attack random people’s home equipment that’s seeking to pair. Maybe it only blasts out a bunch of responses when it’s an undirected advertisement or the advertisement has a MAC that corresponds to spying companies,
https://github.com/JiaoXianjun/BTLE
https://github.com/migraine-sudo/BTLE-R
Because I would love to see something like this exist, I went and found some prior art for doing arbitrary BTLE for you. Clankers seem to think SDR is necessary for the response-to-AWK bit because this is usually handled at the firmware/hardware level.