983
Undocumented Commands Found In Bluetooth Chip Manufactured in China Used By a Billion Devices. (www.tarlogic.com)
submitted 1 day ago* (last edited 17 hours ago) by Tea@programming.dev to c/technology@lemmy.world
151 comments fedilink hide all child comments

Source Link Privacy.Privacy test result

https://themarkup.org/blacklight?url=https%3A%2F%2Fwww.tarlogic.com%2Fnews%2Fbackdoor-esp32-chip-infect-ot-devices%2F&device=mobile&location=us-ca&force=false

Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of mass-market IoT devices. Exploitation of this backdoor would allow hostile actors to conduct impersonation attacks and permanently infect sensitive devices such as mobile phones, computers, smart locks or medical equipment by bypassing code audit controls.

Update: The ESP32 "backdoor" that wasn't.

(page 3) 50 comments
sorted by: hot top controversial new old
[-] CosmoNova@lemmy.world 24 points 1 day ago

Not the first time a backdoor was found on Chinese made hardware and it won‘t be the last time. Decoupling can‘t happen quickly enough.

[-] GrizzlyBear@lemmy.world 8 points 1 day ago

I mean, most users here are browsing using a device with an AMD or Intel CPU, both with known backdoors. Not the first time a backdoor was found on American made hardware and it won't be the last.

load more comments (11 replies)
[-] mp3@lemmy.ca 18 points 1 day ago

One more reason to have actual open-source drivers instead of binary blobs..

[-] EndofLife@feddit.org 6 points 1 day ago* (last edited 1 day ago)

Jokes on them, I live in America when all that shit was already being done.

[-] SpaceNoodle@lemmy.world 9 points 1 day ago

Is this some hardware flaw, or just something in their standard BT stack?

[-] bedouin@infosec.pub 3 points 1 day ago

I was wondering the same thing. Wasn't clear on whether these backdoors are there on purpose or because of mistakes

[-] mystik@lemmy.world 5 points 1 day ago

I have a bunch of ESP32's that ... I can update and replace the firmware on, if i reset it the right way with a usb cable. the web site doesn't explain it any way how this is any worse than that...?

[-] embed_me@programming.dev 6 points 1 day ago

The website is also the guy trying to sell the solution so I'm just sceptical for now

[-] catloaf@lemm.ee 4 points 1 day ago

This can be done wirelessly, if the custom driver has been installed.

[-] BJHanssen@lemmy.world 4 points 1 day ago

Yeah one of my more… tech adventurous friends had the most insane series of security breaches (to out it mildly) potentially related to this and some other recent ridiculousness.

[-] sem 1 points 21 hours ago

What do you mean

load more comments (1 replies)
[-] 60d@lemmy.ca 3 points 1 day ago* (last edited 1 day ago)

The ESP32 chip, developed by Espressif Systems, is widely used in various IoT (Internet of Things), embedded systems, and consumer electronics due to its low power consumption, built-in Wi-Fi & Bluetooth, and high processing capability.

Devices That Use the ESP32 Chip

  1. Development Boards & Microcontrollers

ESP32 DevKit series (official Espressif boards)

M5Stack and M5Stick series

Adafruit HUZZAH32

SparkFun ESP32 Thing

LilyGO T-Series (T-Display, T-SIM, T-Watch, etc.)

WEMOS Lolin D32/D32 Pro

  1. Smart Home & IoT Devices

Sonoff Smart Switches and Plugs (e.g., Sonoff Mini R3, Sonoff S31)

Shelly Smart Relays (e.g., Shelly 1, Shelly 2.5)

Tuya-Based Smart Devices (many smart home products use Tuya firmware on ESP32)

Air quality monitors (e.g., AirGradient open-source air sensors)

IoT Sensor Hubs (various DIY and commercial solutions)

  1. Wearables & Portable Devices

TTGO T-Watch (ESP32-based smartwatch)

Heltec WiFi Kit Series (LoRa-enabled IoT devices)

Fitness trackers (some DIY and prototype models)

  1. Robotics & DIY Electronics

ESP32-CAM (ESP32-based camera module)

DIY drones & robots (used in hobbyist and educational robotics)

3D Printer controllers (e.g., ESP32-based Klipper controllers)

  1. Industrial & Commercial Products

ESP32-based vending machines (wireless payment systems)

Smart irrigation controllers

Energy monitoring devices (e.g., OpenEnergyMonitor)

Smart locks & security systems

  1. Audio & Multimedia Devices

ESP32-based web radios

DIY Bluetooth speakers

Smart light controllers with voice assistants

Why Is ESP32 Popular?

✔ Low-cost & powerful (dual-core, Wi-Fi, Bluetooth) ✔ Great for DIY & commercial IoT applications ✔ Strong developer community & open-source support ✔ Compatible with Arduino, MicroPython, ESP-IDF, etc.

[-] Intergalactic@lemmy.world 2 points 1 day ago

So, what is the probability of it affecting a lot of people?

load more comments
view more: ‹ prev next ›
this post was submitted on 08 Mar 2025
983 points (100.0% liked)

Technology

64937 readers
3797 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world