The research team found that the attack has a 90% success rate and can pinpoint a device’s location within minutes. “While it is scary if your smart lock is hacked, it becomes far more horrifying if the attacker also knows its location,” said one of the researchers.

What makes the exploit even more concerning is that it doesn’t require physical access or administrator privileges on the target device – it can actually be executed remotely. In their experiments, the team successfully tracked a stationary computer with 10-foot accuracy and even reconstructed the exact flight path of a gaming console brought onboard an airplane.

The attack does require fairly hefty computing resources – the research team used hundreds of graphics processing units to quickly find matching cryptographic keys. However, they note that this could be achieved relatively inexpensively by renting GPUs, which has become a common practice in the crypto-mining community.

  • kitnaht@lemmy.world
    link
    fedilink
    arrow-up
    9
    ·
    13 hours ago

    Honestly, this sounds fucking awesome; and likely something they’re doing already.

    I’d love to be able to just register any bluetooth device to the find my network; I have a bluetooth 2FA key I’d love to keep track of.