Be aware… you’re on air!

Smart Headphones

Bluetooth headphones often come with features that go far beyond listening to music. They are usually equipped with a microphone and can access various "smart" functions via your smartphone. Therefore, they can contain personal data or at least access it.

Main risks

Artboard 1

Diversion

The Bluetooth connection can be hijacked in various ways...

Diversion

The connected headphones have a Bluetooth connection and sometimes Wi-Fi.

Older versions of the Bluetooth protocol are particularly vulnerable to several types of attacks. Depending on the Bluetooth version, vulnerabilities may allow unauthorised pairing and access to certain data. In this case, a hacker with access to your Bluetooth headset could listen to conversations around you, but also calls you make over the phone when the headset is on, and even conversations with third parties.

NB: the latest Bluetooth generations (4 and 5) are much less vulnerable than the older ones, but recently cases of spoofing have been discovered using the Bluetooth Low Energy (BLE) protocol.
Artboard 4

Tracking

Big Brother can hide...

Tracking

The headphones are often equipped with microphones, sometimes even a GPS chip … enough to allow spies to listen to you and follow you.

Protection tips

Artboard 2

Network

Close the front door...

Network

To avoid any misappropriation or unauthorised listening to your Bluetooth headphones, it is better to adopt a few good reflexes.
• Use the Bluetooth protocol only if necessary, do not leave it activated without reason.
• Do not leave your equipment on visible mode.
• Reject any unexpected solicitation.
Artboard 10

Recognised manufacturers

« Clever Akafen »

Recognised manufacturers

To reduce risks, it is advisable to choose recognised products from reputable manufacturers. These manufacturers generally have the means to invest in the development of quality products.

If in doubt, prefer a purchase in a store from specialised sellers who can have them tested and give you technical advice.
Artboard 7

Regular updates

Patch, Patch, Patches…

Regular updates

One of the major issues is a common suspect in cybersecurity: failing to install software updates ("patches"). It is particularly important to use the patches provided by the suppliers. This is especially important for connected objects which are -by definition- permanently exposed to potential attacks.

When updates are available for the connected toy, they should be installed immediately. If there is an automated update feature, it should be enabled. Please note: with each update, modifications may be made to the structure of authorisations. Check permissions after each update and readjust if necessary.
Artboard 11

Device deactivation

Because an oversight can become a flaw…

Device deactivation

To avoid any data leakage or hijacking, care must be taken to deactivate headphones that are no longer in use.
Artboard 6

Contract

Dura lex sed lex…

Contract

As with any contract, careful reading is required. The general conditions of use can be long and complex, but they are not trivial because they legally bind their users.

Campaign material

If you want to educate those around you whether employees, teachers, pupils/students, citizens … you can use the promotional material according to your needs. Contact: info@secure-iot.lu