Hacker News new | ask | show | jobs
by freehunter 2377 days ago
Yes, but when should you decide to take action on that belief? At what point should people go out of their way to prevent an attack that may never happen? It's possible to steal passwords by listening to someone typing on a keyboard and reconstructing the key presses based on the sound. Should everyone stop using keyboard? Stop using passwords and stop using every service that requires a password?

In the security world we develop a risk matrix. This compares the likelihood of a threat compared to the consequences of that in order to determine how concerned you should be. Someone breaking into your car to steal things based on tracking the Bluetooth signal seems a lot less likely than someone breaking into your car because they can see your backpack laying on the back seat, but the consequences are exactly the same. So since thieves seeing your bag and deciding to break into your car is more likely, the natural course of action is to stop leaving your bags in a place that's visible to thieves. If someone then tears open your trunk to steal your bag, then you can worry about Bluetooth.

This article provides absolutely zero proof that Bluetooth was involved in this break-in, so why should anyone rush to the conclusion that Bluetooth was responsible for it? It's not an impulse or a prejudice, one is objectively more right than the other.

Blaming Bluetooth is begging the question when the backpack was visible through the window.

1 comments

A person could assign enough risk to a proof-of-concept existing that the difference between a true and a false report of it in the wild seems rather small and unimportant.

https://en.wikipedia.org/wiki/Truthiness