
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
com.github.hypfvieh:bluez-dbus-parent
Advanced tools
Java native bluetooth library which uses bluez via dbus (linux only)
bluetooth library for linux OSes using DBus and bluez.
This project was inspired by tinyb, but does not require any wrapper library as it is based on a newer version of dbus-java which uses jnr-unixsocket.
This library has been tested with Ubuntu 22.04 (AMD64) and bluez library 5.64.
The different versions of bluez-dbus are using different versions of dbus-java which requires modern Java versions. Here is a list of which bluez-dbus versions uses which dbus-java and the required Java version to use.
| bluez-java Version | dbus-java Version | minimum Java Version |
|---|---|---|
| 0.0.x | 2.7.x | Java 1.7 |
| 0.1.x | 3.x | Java 1.8 |
| 0.2.x | 4.3.x | Java 11 |
| 0.3.x | 5.x | Java 17 |
When using the library directly, you have to add at least one dbus-java transport to your project as well.
There are different transports available. For usage with DBus you usually need a UnixSocket providing transport.
| Transport | Usage |
|---|---|
| dbus-java-transport-jnr-unixsocket | Use this if you need filedescriptor support as well (see below) |
| dbus-java-transport-junixsocket | Alternative if you don't want to use jnr (beta support in dbus-java 4.x), supports filedescriptor without additional libraries. |
| dbus-java-transport-native-unixsocket | Use Java native implementation for UnixSockets. Needs at least Java 16, does not support filedescriptor at all. |
| dbus-java-transport-tcp | TCP implementation, only needed when your DBusDaemon is configured to use TCP as well as/instead of UnixSockets. |
If you use the OSGi bundle, you don't have to add anything. The OSGi bundle will use jnr-unixsocket transport as default in bluez-dbus version 0.2.x. It will be changed to junixsocket-transport in bluez-dbus 0.3.x.
If you want to use filedescriptor passing in any bluez method, you have to add Robert Middleton's dbus-java-nativefd library to your project if you are using jnr-unixsocket-transport. The library can be found here:
<dependency>
<groupId>com.rm5248</groupId>
<artifactId>dbus-java-nativefd</artifactId>
<version>2.0</version>
</dependency>
If you use the native-transport, you cannot use filedescriptor's because Java native implementation of UnixSockets only has a limited functionality. For most cases this implementation should be fine. In some special cases like filedescriptors it isn't good enough.
Starting from bluez-java 0.3.x, dbus-java 5.x is used which has proper support for junixsocket. JUnixsocket is another implementation for UnixSockets like jnr-unixsockets but with a richer feature set out of the box. It supports filedescriptors without the need of additional libraries.
sudo apt-get install libdbus-1-dev libudev-dev libical-dev libreadline-dev checkinstall libglib2.0-devtar xfvJ bluez-5.50.tar.xz./configure --prefix=/usr --libexecdir=/usr/lib --enable-manpagessudo checkinstallNew bluez library), press enter and then CTRL+Dbluez-obexd, bluez-cups, bluez-hcidump, bluez-btsco, bluez-toolssudo dpkg -i bluez_5.50-1_amd64.debDeviceManager #PR67, thanks to joerg1985setLazyScan to enable/disable re-querying of GATT services from already known devices when scanningFAQs
Java native bluetooth library which uses bluez via dbus (linux only)
We found that com.github.hypfvieh:bluez-dbus-parent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.