尽管现代蓝牙技术已内置身份验证、加密及防止未授权访问的安全机制，澳大利亚网络安全中心（ACSC）仍建议在非使用状态下将蓝牙功能关闭 1。这一官方建议旨在应对日常使用中保持蓝牙开启所带来的风险 1。
随着智能设备生态的扩展，安全性不仅取决于手机，还依赖于所连接外设的软件更新与权限管理 1。例如，Android 12及以上版本要求应用请求附近蓝牙设备的连接权限 1。然而，外部设备的脆弱性依然存在：2023年9月的一项独立测试发现，某些在澳大利亚销售的廉价智能眼镜可通过蓝牙无密码访问 1。针对这一安全隐患，澳大利亚隐私专员已对涉及该智能眼镜应用的某中国公司展开调查 1。
Despite modern Bluetooth protocols incorporating authentication, encryption, and protections against unauthorized access, the Australian Cyber Security Centre (ACSC) advises users to disable the feature when it is not actively in use 1. This recommendation aims to eliminate potential attack surfaces that may persist even with built-in security measures 1.
The risk extends beyond smartphones to the broader ecosystem of connected peripherals, such as smart glasses, where security depends heavily on software updates and permission management 1. An independent test conducted in September 2023 revealed that certain low-cost smart glasses sold in Australia could be accessed via Bluetooth without a password 1. In response to these vulnerabilities, the Australian Privacy Commissioner has launched an investigation into a Chinese company associated with the application linked to those devices 1. Furthermore, Android 12 and subsequent versions mandate that applications explicitly request permission to connect to nearby Bluetooth devices, adding another layer of control for user privacy 1.
评论
还没有评论，欢迎留下第一条。