Skip to content

Zero-day: Bluetooth gap turns millions of headphones into listening stations

Technology
123 88 2
  • Not on flagships.

    Sent from my Redmi Note 11S 5G.

    You have a Redmi, you don't get an in here

  • Well, I can recommend the soundcore anker life A1 earbuds for swimming, and the soundcore sleep A20 for low profile earbuds that dont stick out of your ear. Went through atleast 4 sets (wired and wireless) of earbuds for each until settling on these.

    Just FYI, I would imagine anker have plenty of exploits but I appreiate the recommendations.

  • This really makes me hate that we don’t have headphone jack anymore

    Ive always hated phones without the 3.5mm and won't stop even if all phone manufacturers remove it

  • Ive always hated phones without the 3.5mm and won't stop even if all phone manufacturers remove it

    At least you can still get adapters for phones that don’t have it 🙂

  • What is that site asking me to agree to? No thanks

    US websites don't even ask, they just do it behind your back.

  • Same. I can't find any Bluetooth headphones whose batteries don't die in 4 or 5 months anyway. Meanwhile my Moondrop wired headphones have been going strong for almost 3 years.

    Got a a pair of sennheisers old enough to vote

  • At least you can still get adapters for phones that don’t have it 🙂

    Indeed, I don't really see the problem. Instead of a single use port you have a practically universal port. That's better, surely.

  • Indeed, I don't really see the problem. Instead of a single use port you have a practically universal port. That's better, surely.

    instead of

    Yeah but it was never a matter of "insTeAD Of," it's in addition to, meaning you get to use the same favourite set of headpdones you use with literally every other device while keeping the practically universal port free for other purposes at the same time!!!! 🤯🤯🤯
    Now isn't that wizard?

  • instead of

    Yeah but it was never a matter of "insTeAD Of," it's in addition to, meaning you get to use the same favourite set of headpdones you use with literally every other device while keeping the practically universal port free for other purposes at the same time!!!! 🤯🤯🤯
    Now isn't that wizard?

    You can still do that with an adapter though?

  • You can still do that with an adapter though?

    Now here's the amazing bit: imagine being able to do that without needing to carry an additional thing around.

  • Now here's the amazing bit: imagine being able to do that without needing to carry an additional thing around.

    I guess I'm used to it. Besides, imagine not using a cable at all--even better?

  • I guess I'm used to it. Besides, imagine not using a cable at all--even better?

    I can insert a cable faster into my phone than most Bluetooth headphones connect. Audio quality also tends to be better with wired headphones and uses less of the battery power. A lot of the times a dedicated single use port is much better than a jack of all trades port.

  • The flaws, discovered by German cybersecurity firm ERNW and first reported by Heise Online, affect dozens of headphone models from brands such as Sony, JBL, Bose, and Marshall, with no comprehensive firmware fixes available yet.

    • Sony WH-1000XM4/5/6, WF-1000XM3/4/5, LinkBuds S, ULT Wear, CH-720N, C500, C510-GFP, XB910N
    • Marshall ACTON III, MAJOR V, MINOR IV, MOTIF II, STANMORE III, WOBURN III
    • JBL Live Buds 3, Endurance Race 2
    • Jabra Elite 8 Active
    • Bose QuietComfort Earbuds
    • Beyerdynamic Amiron 300
    • Jlab Epic Air Sport ANC
    • Teufel Airy TWS 2
    • MoerLabs EchoBeatz
    • Xiaomi Redmi Buds 5 Pro
    • earisMax Bluetooth Auracast Sender

    ERNW emphasizes that this is only a partial list.

    Source

    wf-1000XM3 connected, playing Cissy Strut

    Guess I'm lucky to have broken the mics on mine by accidentally throwing them in the wash?

  • I can insert a cable faster into my phone than most Bluetooth headphones connect. Audio quality also tends to be better with wired headphones and uses less of the battery power. A lot of the times a dedicated single use port is much better than a jack of all trades port.

    3.5mm is by far the better option for literally every reason headphones are designed for

    the only argument is when exercising, some people prefer to use wireless for the kinda of workouts they do

  • I mean, there were legitimate technical issues with the standard, especially on smartphones, which is where they really got pushed out. Most other devices do have headphones jacks. If I get a laptop, it's probably got a headphones jack. Radios will have headphones jacks. Get a mixer, it's got a headphones jack. I don't think that the standard is going to vanish anytime soon in general.

    I like headphones jacks. I have a ton of 1/8" and 1/4" devices and headphones that I happily use. But they weren't doing it for no reason.

    • From what I've read, the big, driving one that drove them out on smartphones was that the jack just takes up a lot more physical space in the phone than USB-C or Bluetooth. I'd rather just have a thicker phone, but a lot of people don't, and if you're going all over the phone trying to figure out what to eject to buy more space, that's gonna be a big target. For people who do want a jack on smartphones, which invariably have USB-C, you can get a similar effect to having a headphones jack by just leaving a small USB-C audio interface with a headphones jack on the end of your headphones (one with a passthrough USB-C port if you also want to use a USB-C port for other things).

    • A second issue was that the standard didn't have a way to provide power (there was a now-dead extension from many years back that is now dead, IIRC for MD players, that let a small amount of power be provided with an extra ring). That didn't matter for a long time, as long as your device could put out a strong enough signal to drive headphones of whatever impedance you had. But ANC has started to become popular now, and you need power for ANC. This is really the first time I think that there's a solid reason to want to power headphones.

    • The connection got shorted when plugging things in and out, which could result in loud sound on the membrane.

    • USB-C is designed so that the springy tensioning stuff that's there to keep the connection solid is on the (cheap, easy to replace) cord rather than the (expensive, hard to replace) device; I understand from past reading that this was a major reason that micro-USB replaced mini-USB. Instead of your device wearing out, the cord wears out. Not as much of an issue for headphones as mini-USB, but I think that it's probably fair to say that it's desirable to have the tensioning on the cord side.

    • On USB-C, the right part breaks. One irritation I have with USB-C is that it is...kind of flimsy. Like, it doesn't require that much force pushing on a plug sideways to damage a plug. However --- and I don't know if this was a design goal for USB-C, though I suspect it was --- my experience has been that if that happens, it's the plug on the (cheap, easy to replace) cord that gets damaged, not the device. I have a television with a headphones jack that I destroyed by tripping over a headphones cord once, because the headphones jack was nice and durable and let me tear components inside the television off. I've damaged several USB-C cables, but I've never damaged the device they're connected to while doing so.

    On an interesting note, the standard is extremely old, probably one of the oldest data standards in general use today; the 1/4" mono standard was from phone switchboards in the 1800s.

    EDIT: Also, one other perk of using USB-C instead of a built-in headphones jack on a smartphone is that if the DAC on your phone sucks, going the USB-C-audio-interface route means that you can use a different DAC. Can't really change the internal DAC. I don't know about other people, but last phone I had that did have an audio jack would let through a "wub wub wub" sound when I was charging it on USB off my car's 12V cigarette lighter adapter --- dirty power, but USB power is often really dirty. Was really obnoxious when feeding my car's stereo via its AUX port. That's very much fixable by putting some filtering on the DAC's power supply, maybe needs a capacitor on the thing, but the phone manufacturer didn't do it, maybe to save space or money. That's not something that I can go fix. I eventually worked around it by getting a battery-powered Bluetooth receiver that had a 1/8" headphones jack, cutting the phone's DAC out of the equation. The phone's internal DAC worked fine when the phone wasn't charging, but I wanted to have the phone plugged in for navigation stuff when I was driving.

    What is ANC?

  • What is ANC?

    Active noise cancelling - noise cancelling that doesn't just rely on making a seal between your ears and the earbuds/headphones.

  • I’d rather just have a thicker phone, but a lot of people wouldn’t

    I think this is a case where the corporations were telling people what they wanted rather than people really asking for thinner phones. Same thing with bezels, I don't know anyone who asked for the screen to go all the way to the edge (or worse, curve around onto the sides). Apple and Samsung said 'this is what people want' when in fact it was what their marketing department wanted because they wouldn't be able to sell the iGalaxy N+1 if it was slightly thicker or heavier than the iGalaxy N.

    Fwiw, I want as much screen as possible. Why waste space?

  • Yeah. I have the previous version of the WH which seems not affected, but I also have the WF 3 which unfortunately seems to be.

    Many people have sony headphones with those chips.

    Yeah, ive got a pair of the WF 3 too, now ive gotta be watching this...

  • The Bluetooth chipset installed in popular models from major manufacturers is vulnerable. Hackers could use it to initiate calls and eavesdrop on devices.

    Source

    Imagine how much data could be collected from, say, a busy gym full of people with wireless headphones, or a hotel lobby

  • What is ANC?

    As @papertowels@mander.xyz said.

    Historically, if you were in a noisy environment, you could get closed-back, circumaural headphones --- headphones that fit around your ears and had a lot of sound-absorption padding --- to help soak up the sound. I still use decent non-ANC circumaural headphones at home.

    There are also some people who are more-willing to tolerate discomfort than I am who get in-ear buds, which block noise in their ear canal, and on top of that, fit ear protectors intended for industrial use, like 3M X5 Peltor ear protectors, which have even more passive sound absorption stuff than current circumaural headphones do, and are even larger.

    That sort of thing works well on higher frequency sound, but not as well on low-frequency stuff, like engine noise, large fans, stuff like that.

    ANC basically has microphones in your headphones, picks up on what sounds are showing up at your ear, and then tries to compute and play back a sound that produces destructive interference at your ear. That is, if you look at the sound waves, where the environmental sound is low pressure, it plays back high pressure signal, and when the environmental sound is high pressure, it plays back low pressure signal. It's not perfect, or it could make environmental sound totally inaudible. But high-end ANC headphones are pretty impressive these days. I have a pair of Sennheiser Momentum 4 headphones --- good, though not the best ANC out there in 2025, and I don't personally recommend these for other reasons --- and when they kick on, the headphones are designed to have the ANC fade in; same thing happens in reverse, fades out when you flip the ANC off. It sounds almost as if fans and the like around you are powering up and down when that happens, very eerie if you've never experienced it before. Even the sounds that it doesn't do so well on, like people talking, it significantly reduces in volume.

    And ANC does best with the other side of the spectrum, the side that passive sound absorption doesn't --- the low-frequency stuff, especially regular sounds like fans. So having both a lot of passive sound absorption and ANC on a given pair of headphones let the two work well together.

    People often use cell phones in noisy environments, with a lot of people around, and ANC makes it a lot easier to hear music or whatever without background sound interfering. I think that it's very likely that people will, long term, mostly wind up using headphones with ANC (short of moving to something more elaborate like a direct brain interface or something). It's not really all that important if you're in a quiet environment, and I don't bother using ANC headphones on my desktop at home. But if you're in random environments --- waiting a grocery store line, in a restaurant with music playing over the restaurant's speakers, on an airplane with the drone of the airplane engines, whatever --- it really helps to reduce that background sound. ANC isn't that new. I think that I remember it mostly being billed as useful for airplane engine noise back when, which they're a good fit for. But it's gotten considerably better over the years. For me, in 2025, good ANC is something that I really want to have for smartphone use.

    The problem is that in order to do ANC, you need at least a microphone, preferably an array, and somewhere you need to have a model of the sound transmission through the headphones and be running signal processing on the input sound to generate that output sound. In theory, you could do it on an attached computer if you had a fast data interface, but in practice, ANC-capable headphones are sold as self-contained units that handle all that themselves. So you gotta power the little computer in the headphones. That means that you probably have batteries and at least for full size headphones (rather than earbuds) you might as well stick a USB interface on them to charge them, even if the user is using Bluetooth for wireless connectivity. And if you've done that, it isn't much more circuitry to just let the headphones act as USB headphones, so in general, ANC headphones tend to also be USB-capable. My Momentum 4 headphones have all of Bluetooth, USB-C, and a traditional headphones interface, but...I just haven't really wound up using the headphones interface if I have the other options available on a given device. Might be convenient if I were using some device that only had headphones output. shrugs

  • 22 Stimmen
    4 Beiträge
    0 Aufrufe
    A
    Woah woah woah. Those billion dollar companies are investing in our town, that's why we are giving them the equivalent of millions of dollars a year for free. -s
  • The Death of the Student Essay—and the Future of Cognition

    Technology technology
    26
    1
    134 Stimmen
    26 Beiträge
    41 Aufrufe
    artisian@lemmy.worldA
    I would love to see the source on this one. It sounds fascinating.
  • How LLMs could be insider threats

    Technology technology
    12
    1
    105 Stimmen
    12 Beiträge
    16 Aufrufe
    patatahooligan@lemmy.worldP
    Of course they're not "three laws safe". They're black boxes that spit out text. We don't have enough understanding and control over how they work to force them to comply with the three laws of robotics, and the LLMs themselves do not have the reasoning capability or the consistency to enforce them even if we prompt them to.
  • Apple acquires RAC7, its first-ever video game studio

    Technology technology
    16
    1
    67 Stimmen
    16 Beiträge
    9 Aufrufe
    E
    I'm not questioning whether or not the game is good, just wondering why Apple would want to limit their customer base so much.
  • 99 Stimmen
    40 Beiträge
    13 Aufrufe
    A
    Lmfao I love this comment
  • 21 Stimmen
    6 Beiträge
    12 Aufrufe
    sentient_loom@sh.itjust.worksS
    I want to read his "Meaning of the City" because I just like City theory, but I keep postponing in case it's just Christian morality lessons. The anarchist Christian angle makes this sound more interesting.
  • 358 Stimmen
    113 Beiträge
    45 Aufrufe
    S
    The problem is the cost of each. Right now material is dirt cheap and energy prices are going up. And we are not good at long term planning.
  • AI cheating surge pushes schools into chaos

    Technology technology
    25
    45 Stimmen
    25 Beiträge
    17 Aufrufe
    C
    Sorry for the late reply, I had to sit and think on this one for a little bit. I think there are would be a few things going on when it comes to designing a course to teach critical thinking, nuances, and originality; and they each have their own requirements. For critical thinking: The main goal is to provide students with a toolbelt for solving various problems. Then instilling the habit of always asking "does this match the expected outcome? What was I expecting?". So usually courses will be setup so students learn about a tool, practice using the tool, then have a culminating assignment on using all the tools. Ideally, the problems students face at the end require multiple tools to solve. Nuance mainly naturally comes with exposure to the material from a professional - The way a mechanical engineer may describe building a desk will probably differ greatly compared to a fantasy author. You can also explain definitions and industry standards; but thats really dry. So I try to teach nuances via definitions by mixing in the weird nuances as much as possible with jokes. Then for originality; I've realized I dont actually look for an original idea; but something creative. In a classroom setting, you're usually learning new things about a subject so a student's knowledge of that space is usually very limited. Thus, an idea that they've never heard about may be original to them, but common for an industry expert. For teaching originality creativity, I usually provide time to be creative & think, and provide open ended questions as prompts to explore ideas. My courses that require originality usually have it as a part of the culminating assignment at the end where they can apply their knowledge. I'll also add in time where students can come to me with preliminary ideas and I can provide feedback on whether or not it passes the creative threshold. Not all ideas are original, but I sometimes give a bit of slack if its creative enough. The amount of course overhauling to get around AI really depends on the material being taught. For example, in programming - you teach critical thinking by always testing your code, even with parameters that don't make sense. For example: Try to add 123 + "skibbidy", and see what the program does.