Duo Labs analyzed the Bluetooth security of several different personal protection devices (“panic buttons”) used for personal safety, and by protesters, human rights workers, and others as a way to discreetly alert friends and family that they’re in danger.
Senior Security Researcher Mark Loveless (@Mark here in the community) examined how Bluetooth scanning and pairing can lead to device identification, and how one product could be subject to a denial of service attack that could disable it.
Check out our blog post for a full technical overview, product comparison chart, vulnerability disclosure timeline, and example real-world scenarios in which people could be affected by these security issues here: https://duo.com/blog/bluetooth-and-personal-protection-device-security-analysis
