What is the security risk of enabling Bluetooth discoverability in "visible to all" mode on a mobile device in a public place?
- A.B) Bluetooth discoverability allows remote code execution without any pairing step; simply being discoverable is sufficient for an attacker to compromise the device.
- B.A) A device in "visible to all" discoverability mode broadcasts its Bluetooth device name and class in response to inquiry scans from any nearby device; this allows device enumeration (identifying the device model and user name often included in the device name) and enables targeted pairing attempts. Social engineering attacks can then try to establish unwanted connections.
- C.C) Modern Android and iOS devices never broadcast Bluetooth device names; only the MAC address is discoverable, making device enumeration impossible.
- D.D) Bluetooth discoverability is a security concern only for Bluetooth Classic; BLE advertising is not affected by the discoverability setting.
Why B is correct