As a person with modest theoretical knowledge and low practical experience in the matter (read: this might be an utterly bullshit idea), I kind of want to make a “Bluetooth shotgun” that responds to any AWK packets with a slew of spoofed info.
If such a thing were possible, I would then make it also listen for responses, and log them with a geolocation. I would then spoof those responses every time an awk was received around that area. (This is because nonsense data can be filtered to reveal just the real responses - my device(s), but inaccurate real data would destroy the value of the surveillance.)
Editing to add - lots of considerations. I wouldn’t want to just attack random people’s home equipment that’s seeking to pair. Maybe it only blasts out a bunch of responses when it’s an undirected advertisement or the advertisement has a MAC that corresponds to spying companies,
Because I would love to see something like this exist, I went and found some prior art for doing arbitrary BTLE for you. Clankers seem to think SDR is necessary for the response-to-AWK bit because this is usually handled at the firmware/hardware level.
As a person with modest theoretical knowledge and low practical experience in the matter (read: this might be an utterly bullshit idea), I kind of want to make a “Bluetooth shotgun” that responds to any AWK packets with a slew of spoofed info.
If such a thing were possible, I would then make it also listen for responses, and log them with a geolocation. I would then spoof those responses every time an awk was received around that area. (This is because nonsense data can be filtered to reveal just the real responses - my device(s), but inaccurate real data would destroy the value of the surveillance.)
Editing to add - lots of considerations. I wouldn’t want to just attack random people’s home equipment that’s seeking to pair. Maybe it only blasts out a bunch of responses when it’s an undirected advertisement or the advertisement has a MAC that corresponds to spying companies,
https://github.com/JiaoXianjun/BTLE
https://github.com/migraine-sudo/BTLE-R
Because I would love to see something like this exist, I went and found some prior art for doing arbitrary BTLE for you. Clankers seem to think SDR is necessary for the response-to-AWK bit because this is usually handled at the firmware/hardware level.
https://f-droid.org/packages/de.simon.dankelmann.bluetoothlespam
I do not know if it works. I couldn’t get any BT connection notifications to show up on any Android devices I have here.
Most likely you would stand out as “the person with all the Bluetooth stuff”.
Could still filter it down by addresses that show up at multiple places.
“it’s that car that’s 20 cars again”