cross-posted from: https://infosec.pub/post/47299437

United flight 236 from Newark to Palma de Mallorca on Saturday night was forced to turn around just an hour after takeoff due to security concerns around a Bluetooth signal. Multiple Redditors claimed to be on the flight and reported that the crew repeatedly requested passengers to turn off their Bluetooth. According to one poster, […]

  • Lupus108@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    13
    ·
    12 hours ago

    Slightly off topic - I work at a music festival as a stage tech sometimes. One time on this small festival, in the middle of the night, I was enjoying a after work beer and a bartender came up to me and asked ‘you’re the sound guy right? We have trouble connecting with the Bluetooth speaker in the bar.’ - not really my expertise but I’ll have a look, sure.

    It was only because we were standing next to each other checking the Bluetooth devices on our phones and it was on different spots in the list on the respective phone that I realized that the device was named ‘not connected’.

  • 𝕸𝖔𝖘𝖘@infosec.pub
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    2
    ·
    1 day ago

    I read this on another outlet, and they had the audacity to blame United for “yet another incident”. This isn’t United’s fault. When you name your bt device “bomb” and the flight attendants ask several times to turn off Bluetooth, turn the damn thing off. Don’t be a shitwanker, and keep it on. I swear. People are such assholes everywhere.

    • Someone8765210932@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      12 hours ago

      Often (cheap) Bluetooth devices can’t be renamed, can they?

      Besides apparently there are even speakers that are named “bomb” straight from the factory. Both this speaker here, that some say is the one the teenager used and even a hama speaker with the default Bluetooth name “Hama bomb 3.0”.

      Sorry, but when someone can even buy speakers named bomb from a reputable company, you can’t really blame some teenager. Supposedly (according to what I read) the speakers weren’t in the carry-on and turned themselves on accidentally. Even a stupid teenager who wanted to do this as a prank probably would have gotten cold feet the moment the announcement came and shut the device off if they could, so I don’t think it is impossible to have happened this way.

      • 𝕸𝖔𝖘𝖘@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        ·
        58 minutes ago

        The attendants asked for the device to be turned off. Cheap bt devices may not be able to be renamed, but they can be turned off. But if they were in the carryon and turned themselves on, and it was a mistake, it’s absolutely forgivable.

  • Lovable Sidekick@lemmy.world
    link
    fedilink
    English
    arrow-up
    35
    ·
    1 day ago

    friendly reminder that what you think is a clever WiFi or Bluetooth name probably isn’t

    Nonsense, Your Honor. As evidence I present Promised LAN, Nacho Wifi, and Hurts When IP.

    • MangoCats@feddit.it
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      1
      ·
      1 day ago

      I like the use of the phrase “forced to turn around.” They chose to turn around because somebody had a string of letters on their bluetooth name that they didn’t feel comfortable with. WTF would they do with a passenger in a Che Guevara T shirt?

  • Aceticon@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    38
    ·
    2 days ago

    I suspect the personality profiles of people with who would make the joke of calling their bluetooth device “bomb” and people who would blow up an airplane full of people is almost diametrically opposite.

    • ipkpjersi@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      edit-2
      12 hours ago

      You’d think so, but they don’t realize that.

      I like how they think turning it around would even change anything??? Like, just dumb.

    • GalacticGrapefruit@lemmy.world
      link
      fedilink
      English
      arrow-up
      21
      ·
      edit-2
      1 day ago

      My mother used to have a Bluetooth speaker in our car that she took with her. It wasn’t deliberately shaped that way, but with the silhouette, the color, and the volume it produced, we ended up dubbing it ‘the hand grenade’.

      After the hand grenade finally broke, my mother got a nice JVC speaker, a long cylinder. It was promptly named ‘the pipe bomb’.

      For context, my mother is the most bland, inoffensive Midwest Christian white lady you will ever meet. She has an unusual sense of humor that comes out in the strangest ways. She laughed her ass off all the way through the FNAF games because she thought the animatronics were funny.

      I think the TSA just hates people with a personality, period.

      • Lovable Sidekick@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        edit-2
        1 day ago

        One time a TSA guy started to open my wife’s carry-on, which she had packed VERY tightly. She said, “Careful, it might explode.” This got a raised eyebrow.

      • Aceticon@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 day ago

        I like to believe that people with quirky senses of humour see the various social conventions and other broadly treated as “this is the way things are done” patterns of behavior in human societies with a different perspective so often see the silly side of many such things (hence the quirky sense of humour), making them significantly less likely to simply submit to arbitrary orders from those in positions of authority than the average person.

        People that don’t just meekly comply are more disliked by “little dictators” - people in positions were they have a little bit of power which they use to push others around to satisfying petty personal needs to feel powerful.

      • Snailpick42@lemmus.org
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        3
        ·
        1 day ago

        Christians are rather offensive people. Especially the ones that force religion and their laws on people.

  • murvel@feddit.nu
    link
    fedilink
    English
    arrow-up
    130
    ·
    2 days ago

    Multiple Redditors claimed to be on the flight

    The real reason for the turn-around

  • Kay Ohtie@pawb.social
    link
    fedilink
    English
    arrow-up
    26
    ·
    2 days ago

    The real reason is because some jackass turned their Bluetooth speaker on during a flight.

  • 8oow3291d@feddit.dk
    link
    fedilink
    English
    arrow-up
    40
    arrow-down
    1
    ·
    2 days ago

    That is one of the most bizarre articles I have ever read. Why in the world are we not allowed to know what the “four letter word” is?

    • Admetus@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      71
      ·
      2 days ago

      I mean, a 12 year old is more likely than not to name a cylindrical boombox a ‘bomb’ and forget about it. Hopefully a sincere apology will suffice instead of a ban or criminal charges.

      • KoboldCoterie@pawb.social
        link
        fedilink
        English
        arrow-up
        79
        ·
        2 days ago

        According to discussion about this elsewhere, there’s a bluetooth speaker model named ‘Bomb’ that defaults to that name, whose website, humorously, has been rate limited due to I’m sure more traffic than they’ve ever had in its entire existence.

            • wonderingwanderer@sopuli.xyz
              link
              fedilink
              English
              arrow-up
              6
              arrow-down
              11
              ·
              1 day ago

              I don’t know, I think airlines should have a responsibility to address potential bomb threats on their commercial flights but that might just be me…

                • imetators@lemmy.dbzer0.com
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  ·
                  14 hours ago

                  I think a simple rule of “Better safe than sorry” applies here. It is as if a robber comes with a plastic gun that looks like a real one. Nobody wants to figure out if it is real or not.

                • wonderingwanderer@sopuli.xyz
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  arrow-down
                  4
                  ·
                  1 day ago

                  Not saying that’s logical, but it’s something the airlines have to act on. They have policies in place that they need to follow, and even if it’s a finer comb than it needs to be it’s better than having no policy at all.

                  People forget how many skyjackings there were in the 80s and 90s when they say airport security is worthless. Like “How many incidents have they prevented?” “Only all the ones that didn’t happen…”

      • Cethin@lemmy.zip
        link
        fedilink
        English
        arrow-up
        21
        ·
        2 days ago

        Honestly, I don’t see any way this could result in criminal charges. It’s a Bluetooth name, not someone actually threatening with a weapon. It’s like walking around with a fake gun. You can’t be charged with anything without actual intent to deceive people, and good luck proving that.

        At most, this is a civil charge. The airline might try to get some money out of this person.

        • kunaltyagi@programming.dev
          link
          fedilink
          English
          arrow-up
          13
          ·
          2 days ago

          Poor chap. Chances are the person was flying economy. No way that person can give enough to recoup even the lawyer fees for the airline

          • Cethin@lemmy.zip
            link
            fedilink
            English
            arrow-up
            4
            ·
            2 days ago

            Yep. They might still try it to punish them/set an example. They’re not getting enough out of it to be worth it though, so odds are nothing happens.

        • quick_snail@feddit.nl
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 day ago

          I think it depends on the color of your skin.

          Many kids with fake guns have been executed for this, because their skin is black

        • Atomic@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          5
          ·
          2 days ago

          It could absolutely result in a criminal charge. If it results in a criminal conviction or not is another question.

          But any prosecutor could make the argument that it’s a terroristic threat.

        • chocrates@piefed.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 days ago

          You can still be prosecuted for things you didn’t intend, the laws are usually less harsh. Manslaughter vs Murder for instance. I have no idea if a speaker whose name auto sets to bomb is illegal though. Seems dumb if it were

        • fizzle@quokk.au
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          2 days ago

          Naming a Bluetooth device “bomb” could absolutely be intentionally disruptive or threatening.

          Im not saying thats provable beyond reasonable doubt in this case.

  • AllNewTypeFace@leminal.space
    link
    fedilink
    English
    arrow-up
    35
    ·
    2 days ago

    If you named a Bluetooth speaker “Just an ordinary Bluetooth speaker, nothing to see here”, would that be seen as an implied terrorist threat?

    • ChunkMcHorkle@lemmy.world
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      1
      ·
      2 days ago

      Try naming it “Fuck ICE” and see what happens . . . or don’t, because for whatever reason the special snowflakes of that criminal org get really pissy when members of the public offer them honest and heartfelt feedback.

  • tidderuuf@lemmy.world
    link
    fedilink
    English
    arrow-up
    79
    ·
    edit-2
    2 days ago

    Just changed my phone’s Bluetooth name to “Not A Bomb”. Hopefully no one is confused by it.

  • bstix@feddit.dk
    link
    fedilink
    English
    arrow-up
    30
    ·
    2 days ago

    I guess you need to rename all your Bluetooth bombs before flying now. Thanks Obama.

    • Midnight Wolf@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      2 days ago

      link

      So what I’m getting from this, is that you should use a VPN if you’re using the airports wifi.

      Like today’s sponsor…

        • teyrnon@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 day ago

          How so? I know many of the vpns sell your information, what if you have a trustworthy vpn, are you suggesting the traffic is compromised at levels before and after the vpn? I mean I know it is to some degree I just don’t know exactly.

          • Possibly linux@lemmy.zip
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            1 day ago

            Your traffic is already encrypted with https so yes, the “compromise” here is after the VPN.

            I put compromise in quotes since in reality the system is working as designed. You need to use a end to end encrypted messaging app like Signal if you want your communications to stay private.

            • skibidi@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              ·
              1 day ago

              Your traffic is encrypted, but it is still possible to see what sites you are visiting without a VPN.

              With a VPN, all your traffic will just be to the VPN server, and any logs of the sites you visit will sit with the VPN operator.

              • Possibly linux@lemmy.zip
                link
                fedilink
                English
                arrow-up
                2
                ·
                edit-2
                11 hours ago

                This is mostly true but I’ll add in some additional info.

                Both QUIC and ECH make it harder to easily track what sites are being visited. Not all websites support these but maybe some day they will be standard.

                None of this applies to messaging as the messages are being stored on a server unencrypted in most cases.

            • teyrnon@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              1
              ·
              edit-2
              1 day ago

              Thank you for the response I value this information.

              For the record, I suspect signal has a back door for the US government.

              • Possibly linux@lemmy.zip
                link
                fedilink
                English
                arrow-up
                3
                ·
                edit-2
                1 day ago

                I can say with a very high degree of confidence that Signal does not have a backdoor. What’s far more likely is that you are a victim of a misinformation campaign. In reality there are many organizations that would prefer you that you use something that isn’t end to end encrypted.

                That’s not to say that Signal is flawless as it does have some known weaknesses. The issue is that people tend to fall back to not using encrypted messaging at all which is much worse.

                • teyrnon@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  1 day ago

                  My mistrust is not based in anything new, just in a decades old knowledge that everything is compromised. Everything.