Pairing Risks
Legacy pairing, Just Works, MITM during pairing — literacy without third-party exploits.
Visual · t15_pairing_risks
Pairing binds devices — weak modes fail. Original Cyberlium.
If pairing is rushed, the link is trusted before you verified who answered.
Bluetooth pairing exchanges keys using modes from Legacy Pairing to Secure Connections. 'Just Works' offers no MITM protection — fine for low-risk lab speaker, dangerous for keyboards on untrusted benches. BLE LE Secure Connections improves cryptography. Cyberlium teaches when to refuse pairing in public and how defenders inventory paired devices — no Bluesnarf or BlueBorne cookbooks against third parties.
1. Pairing modes
Legacy vs Secure Simple Pairing vs LE Secure Connections — know names and MITM flags.
Just Works = no MITM protection during pairing.
Command guide
Try these commands — Pairing modes
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Bluetooth security — https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/ NIST BT guide — https://www.nist.gov/publications/guide-bluetooth-security
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install bluez
macOS: Use System Settings > Bluetooth
Windows: Use Windows Bluetooth settings / WSL limited
═══ LINUX / macOS ═══
Command — copy this
bluetoothctl show 2>/dev/null | grep -E 'Powered|Discoverable|Pairable' || bluetoothctl show 2>/dev/null bluetoothctl devices 2>/dev/null | head -10 || echo 'List YOUR paired devices only'
Primary tools to practice this lesson: bluetoothctl. Reference sites: Bluetooth security (https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/); NIST BT guide (https://www.nist.gov/publications/guide-bluetooth-security). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Human factors
Accept pairing prompts only when you initiated on YOUR device.
Reject surprise pairing dialogs in public spaces.
3. Defender view
MDM can restrict Bluetooth profiles; asset tags on authorized peripherals.
Monitor anomalous pairing on corporate laptops — not exploit strangers.
4. What you ship: pairing risk summary
Just Works MITM note + public pairing refusal + defender inventory idea.
5. What you record before the next lesson
Pairing risk paragraph.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Accept random pairing requests to 'test Bluesnarf.'
- Right: Pairing risks named. Next: your devices only.
Mission: pairing risk notes
1) Define Just Works MITM gap. 2) Write public pairing refusal rule. 3) Name one defender control.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “LE Secure Connections vs Legacy?”
APPLY: Just Works pairing:
APPLY: True or False: Bluesnarf strangers is in scope.
APPLY: Surprise pairing prompt: