this post was submitted on 16 Jan 2026
426 points (98.9% liked)

Technology

78880 readers
2776 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Flaws in how 17 models of headphones and speakers use Google’s one-tap Fast Pair Bluetooth protocol have left devices open to eavesdroppers and stalkers.

Link to see devices impacted: https://whisperpair.eu/

top 50 comments
sorted by: hot top controversial new old
[–] fort_burp@feddit.nl 42 points 3 days ago (5 children)

GOOGLE DESIGNED THE wireless protocol known as Fast Pair to optimize for ultra-convenient connections: It lets users connect their Bluetooth gadgets with Android and ChromeOS devices in a single tap.

Bluetooth pairing is not a difficult process, imagine creating a whole new attack vector for that. And of course security was an afterthought. Capitalism is amazing for wasting resources and getting bad results for it.

[–] Auth@lemmy.world 2 points 2 days ago* (last edited 2 days ago) (1 children)

A lot of people genuinely find Fast Pair to be a big improvement over traditional Bluetooth pairing. So why is it such a bad idea for a company to design a protocol that solves the problem? I dont see that as wasting resources at all. Also Bluetooth pairing has had its own share of vulnerabilities over the years this issue isnt really unique to Fast Pair.

[–] fort_burp@feddit.nl 3 points 2 days ago

To each their own, no doubt. Personally I'm just in awe at how modern tech actually makes people tech-illiterate, and seemingly at a faster clip each year. Throw in an additional attack surface and that just makes it, for me, net minus. There are social and political implications to being tech-illiterate and tech-dependent (especially dependent on foreign and/or rogue states), which is another minus in my book.

[–] zarenki@lemmy.ml 5 points 2 days ago (1 children)

I think it's far more common for devices to get pairing wrong than to get it right.

Just a few of the very common issues I've seen in various devices:

  • TVs that are constantly in discoverable mode, even when the screen is off. Just in case the owner loses their remote and wants to pair a new one without reaching behind the TV to press a button. No way of avoiding this except disabling Bluetooth entirely, which makes the stock remote lose either partial or all functionality. Pairing requests also interrupt whatever you're watching.
  • Audio devices that have a very short delay after turning on and waiting for any already-paired devices to connect before switching over to a pairing mode instead. So short that a smartphone in a low-power state (e.g. because you haven't unlocked it for a few minutes) might not connect in time. Most if not all of the bluetooth-to-3.5mm receivers intended for older cars seem to share this problem.
  • Pairing codes are extremely underused in general, even among input devices. Most things seem to just pair with whoever sends a request first unconditionally.
[–] ragebutt@lemmy.dbzer0.com 2 points 2 days ago (1 children)

On this note: if you root your webos tv there’s an app to truly disable Bluetooth, assuming you don’t use it. Imagine my surprise when one day my tv turned on with a request to allow my neighbors phone to connect to it? Modern convenience. I’m sure my neighbor just fat fingered the device list while trying to connect something else but the fact that it was even an option is absurd

load more comments (1 replies)
[–] dance_ninja@lemmy.world 5 points 3 days ago* (last edited 3 days ago)

I'd agree security needs more attention when developing protocols and products, and I'd also consider Bluetooth simple. That being said, I know plenty of folks that don't like the Bluetooth pairing process, especially those without a technical background.

Fast Pair is really convenient, and I'd say it can open the door for a lot of new experiences, but I do wish the developers put more effort into their TARA.

load more comments (2 replies)
[–] bridgeenjoyer@sh.itjust.works 102 points 3 days ago (6 children)

My wired headphones dont have this issue, likely sound far better, require no batteries, and are user serviceable.

Guys, we peaked in 2012 (potentially earlier) as a race technologically, stop trying to create new grifts for billionaires.

[–] sefra1@lemmy.zip 18 points 3 days ago* (last edited 3 days ago) (6 children)

I want to agree, I used to hate wireless headphones, until I realised that wired don't last long if I wear them anywhere outside my desk.

The cable keeps getting caught in door handles, accidentally stepped when I need to crouch and then snapped when I get up or the plug simply gives up from being constantly bent inside the pocket.

I'm a person who can use a soldering but that doesn't make repair much easier, phones don't usually like the 3.5mm jacks available in the market, opening and closing whatever plastic thing covers the contacts or the back of the drivers often break after a third time opening it.

The cables themselves start to breakdown and that time I ordered a whole replacement cable off eBay the phone lost all bass (probably high impedance).

Another issue is that modern phones output a very quiet signal that doesn't get loud enough even when plugged the HD25.

In end wireless headphones solve this problem, I still use wired headphones on my desk. But for mobile use wireless it is.

[–] coronach@lemmy.sdf.org 4 points 2 days ago

Indeed. I have had to replace my studio headphones multiple times because I broke them that way. My earbuds are great for travel - much smaller and easy to walk around with.

[–] definitemaybe@lemmy.ca 5 points 2 days ago (1 children)

I'm almost exactly in the same boat, except even at my desk I want wireless. I often turn my camera off and get up to make coffee or go pee in big meetings. It's great. Even when I'm presenting things, it's usually only at a specific time, and I can still talk when I'm away from my desk (flip-to-mute microphones are great.)

I have several sets of wired headphones I used to love. I'd buy several sets at once so I already had a replacement when they inevitably broke But I literally can't remember the last time I used a pair of wired headphones. I only miss 3.5mm on my phone for plugging into my car's aux port.

[–] Fiery@lemmy.dbzer0.com 4 points 2 days ago

Wires are annoying as hell, and a proper desktop wireless headphone will have basically no loss in quality as they have a base station and are not using Bluetooth.

Same with the mouse, for things like gaming latency can be an issue, but a proper one isn't using Bluetooth either so no issues on that end (or at least the difference is lower than my skill issue, which causes me to lose games)

load more comments (4 replies)
[–] Prox@lemmy.world 34 points 3 days ago (1 children)

We all laughed at the time, but The Matrix was right - civilization peaked in 1999.

[–] vacuumflower@lemmy.sdf.org 6 points 3 days ago (2 children)

Talking about computers, definitely yes, functionally. The socially important problems got solutions, imperfect, but replaceable ones.

We had publishing to all the world via Usenet and Web, file exchange with all the world via plenty of FTP servers, way to find those files and published pages via search engines (those real ones, which just indexed file attributes and page contents), our social identities were ICQ numbers and email addresses, our way to repost stuff was sending a link, our way to rate and discover good things was web directories made by people.

For evaluating something on the Web a vote is simply not a universal unit. Every vote is a different person. So upvotes and downvotes lead to numbers being important for ratings on something, which means that the least useful things get the biggest ratings. Because everything useful is offensive to someone.

The only downside that environment had was insufficient easiness of making a webpage, hosting a website, hosting something else.

If I were imagining a solution, it would look like an all-in-one suite like Hotline, but based on how the Web was then, including an intuitive editor (something more like QuarkXPress) for pages and with hosting and mirroring being transparent. A p2p system with cryptographic identities, but manual choice of hosting something. With a p2p contact directory, but many trees of trust inside that directory, where one tree of trust is like one email provider or one xmpp server for identities, that you subscribe to. With "domains" (sort of) being done similarly to that contact directory. With good old Kademlia for finding contacts, domains, groups and separate pages, posts or files. And other than good old Kademlia, possibly some kind of interchangeable client-server things, like storage areas and trackers and relays, to help with offline messaging and NAT's.

OK, my thought floated away, intuitive management of anything creative in that system is honestly the main flaw of how it was in year 1999. I even wonder if that "agentic AI" they are talking about has a place in such an application suite.

load more comments (2 replies)
[–] hector@lemmy.today 9 points 3 days ago (9 children)

You can hardly find wired headphones now. When you do they are junk. I want a sturdy headphone where they did not save every penny making the wire near microscopic, cheap joints, etc.

Paying more does not mean it is quality either.

[–] bridgeenjoyer@sh.itjust.works 7 points 2 days ago

Beyer dt 770. Very tough.

My mains are those, grado rs2, and senn hd595. Some sony md7506 but I hate the sound on them.

[–] kent_eh@lemmy.ca 7 points 3 days ago

You can hardly find wired headphones now. When you do they are junk. I want a sturdy headphone

Shop where the musicians shop.

[–] BarneyPiccolo@lemmy.today 6 points 3 days ago

Recording musicians use them for monitoring. Bluetooth has too much latency when you are trying to keep your groove in the pocket.

I'm finding lots of great 10-15 yo used recording gear/tech that was originally $200+, going for cheap, like less than $50, because it doesn't have Bluetooth, which you don't want with recording gear anyway.

[–] abfm90@lemmy.world 6 points 3 days ago

Just see mondrop chu c2 for 20$ destroying 150$ Bluetooth earphones.

[–] lenz@lemmy.ml 5 points 3 days ago* (last edited 3 days ago) (1 children)

Go to where the audiophiles are. There are plenty of headphones and IEMs (earbuds) under $50 (and even $25) that sound fantastic and sound better than $200 dollar options out there. My favs that I actually tried are the MOONDROP Chu 2 $23, Koss KSC75 $20, and the Sennheiser HD 600 (which I got on eBay for like $250). Check out the audiophile subreddit, there are plenty of people who have made ranking lists.

[–] bridgeenjoyer@sh.itjust.works 5 points 2 days ago

Yeah if youre buying headphones on Amazon or Walmart, you'll get shit.

I refuse to shop at either of those places for anything really. Wish others would be brave enough to do so as well and stop giving billionaires money for no reason.

[–] RaccoonBall@lemmy.ca 5 points 3 days ago (4 children)

What's your budget? over ears or earbuds? if over ears open back or sealed?

load more comments (4 replies)
[–] supersquirrel@sopuli.xyz 4 points 2 days ago* (last edited 2 days ago)

The Sony XM3 and other headphones in the series are a great option since you don't have to choose, they have a headphone jack so you can go wired if you want.

Same thing with Shure Aonic 50s.

load more comments (2 replies)
[–] aceshigh@lemmy.world 14 points 3 days ago (3 children)

I love not having to worry about charging my headphones. I had wireless for years but I went back to wired.

load more comments (3 replies)
[–] anon_8675309@lemmy.world 7 points 3 days ago

“But that wire…”

  • some techno gusher probably.
load more comments (1 replies)
[–] Truscape@lemmy.blahaj.zone 120 points 4 days ago* (last edited 4 days ago) (5 children)

Placing a bet now: under 10% of vulnerable units will be patched within a year's time.

[–] TheMinions@lemmy.dbzer0.com 69 points 3 days ago (1 children)
[–] ramble81@lemmy.zip 24 points 3 days ago (1 children)

I mean 0.1% is still technically under 10%

[–] TheMinions@lemmy.dbzer0.com 13 points 3 days ago

Ah. I should really figure out how to read. Whoops.

[–] JensSpahnpasta@feddit.org 19 points 3 days ago

I am certain that my AliExpress headphones will get updates in the next few weeks!

load more comments (3 replies)
[–] HakunaHafada@lemmy.dbzer0.com 94 points 3 days ago (3 children)

Laughs in the archaic technology of the 3.5mm audio jack

[–] dance_ninja@lemmy.world 16 points 3 days ago (8 children)

All the more reason to use my IEMs... At least when I'm not flying.

load more comments (8 replies)
load more comments (2 replies)
[–] aramis87@fedia.io 42 points 3 days ago (7 children)

security researchers [...] are revealing a collection of vulnerabilities they found in 17 audio accessories that use Google’s Fast Pair protocol and are sold by 10 different companies: Sony, Jabra, JBL, Marshall, Xiaomi, Nothing, OnePlus, Soundcore, Logitech, and Google itself.

load more comments (7 replies)
[–] Bluegrass_Addict@lemmy.ca 27 points 3 days ago (1 children)
[–] Asfalttikyntaja@sopuli.xyz 12 points 3 days ago (1 children)
[–] fort_burp@feddit.nl 7 points 3 days ago

6.3 mm

and huge muscles from lugging that thing around

[–] einkorn@feddit.org 34 points 4 days ago (1 children)
load more comments (1 replies)
[–] Professorozone@lemmy.world 3 points 2 days ago* (last edited 2 days ago) (3 children)

Did anyone else get a "page not found" error when trying to see the list of affected headphones?

Edit: spelling.

[–] paris@lemmy.blahaj.zone 3 points 2 days ago (1 children)
load more comments (1 replies)
load more comments (2 replies)
[–] ExLisper@lemmy.curiana.net 5 points 2 days ago

Meh. So realistic attack would be that you know someone you want to track has one of those 17 models (which is hard to tell by just looking at the headphones) and never paired it with Android and he carries them everywhere. You force-pair and now you can track them. It's pretty silly as a random attack because why would you track a random person. It's silly to use it to record conversations because from 15 m there are easier methods to do it. I would say the risk that this will be used to actually track/record someone is low.

load more comments
view more: next ›