Consider blocklisting Qualcomm CSR firmware update service

WebBluetoothCG / registries

A collection of registries, for use in the Web Bluetooth spec

Apache License 2.0

30 stars 16 forks source link

Consider blocklisting Qualcomm CSR firmware update service #20

Open pdjstone opened 7 years ago

pdjstone commented 7 years ago

The service UUID is 00001016-d102-11e1-9b23-00025b00a5a5

The only information I could find on that service is here: https://www.csrsupport.com/download/49800/CS-327746-RP-1-Training%20and%20Tutorials%20-%20CSR%20Over-the-Air-Update.pdf

The protocol seems to do challenge-response with a shared key, rather than properly signing the firmware.

beaufortfrancois commented 7 years ago

Thank you @pdjstone! I believe we should blacklist Qualcomm (CSR) OTA Update service.

@jyasskin WDYT? See PR at #21

beaufortfrancois commented 7 years ago

@pdjstone On an unrelated note, can you tell us more about https://github.com/pdjstone/cloudpets-web-bluetooth/issues/1?

scheib commented 7 years ago

I've reached out to Qualcomm staff and am anticipating a response here.

jyasskin commented 7 years ago

Blacklisting an update service that's only secured with symmetric keys sounds good to me. Sorry for missing this. Let's give Qualcomm until the 14th (1 week from @scheib's message) to respond?