Bluetooth and Personal Protection Device Security Analysis by Duo Labs


Duo Labs analyzed the Bluetooth security of several different personal protection devices (“panic buttons”) used for personal safety, and by protesters, human rights workers, and others as a way to discreetly alert friends and family that they’re in danger.

Senior Security Researcher Mark Loveless (@Mark here in the community) examined how Bluetooth scanning and pairing can lead to device identification, and how one product could be subject to a denial of service attack that could disable it.

Check out our blog post for a full technical overview, product comparison chart, vulnerability disclosure timeline, and example real-world scenarios in which people could be affected by these security issues here: