View article

In this demo we present BISON, a novel attack on Bluetooth’s broadcast isochronous streams (BISes), and demonstrate it on off-the-shelf hardware. BISON exploits the plaintext metadata used for stream synchronization as well as the vague specification of the Broadcast_Code exchange to take over ongoing BISes and manipulate their content. We showcase the feasibility of BISON by hijacking a broadcast audio stream envisaged to be deployed in public venues.