Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
com.github.ivbaranov:rxbluetooth
Advanced tools
Android reactive bluetooth library. Basically, RxBluetooth is just wrapper around android BluetoothAdapter, so first of all the Bluetooth developer guide should be read.
RxBluetooth is in early-stage. There is a lot of missing stuff. Feel free to contribute.
Declare permissions:
<uses-permission android:name="android.permission.BLUETOOTH" />
<uses-permission android:name="android.permission.BLUETOOTH_ADMIN" />
// If you intend to run on devices with android 6.0+ you also need to declare:
<uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
Create RxBluetooth
instance.
RxBluetooth rxBluetooth = new RxBluetooth(this); // `this` is a context
For android 6.0+ you need location permision.
if (ContextCompat.checkSelfPermission(this, android.Manifest.permission.ACCESS_FINE_LOCATION) != PackageManager.PERMISSION_GRANTED) {
ActivityCompat.requestPermissions(this, new String[]{android.Manifest.permission.ACCESS_FINE_LOCATION}, PERMISSION_REQUEST_COARSE_LOCATION);
}
// And catch the result like this:
@Override
public void onRequestPermissionsResult(int requestCode, @NonNull String[] permissions, @NonNull int[] grantResults) {
super.onRequestPermissionsResult(requestCode, permissions, grantResults);
if (requestCode == PERMISSION_REQUEST_COARSE_LOCATION) {
for (String permission : permissions) {
if (android.Manifest.permission.ACCESS_FINE_LOCATION.equals(permission)) {
// Do stuff if permission granted
}
}
}
}
Check that bluetooth is available and enabled:
// check if bluetooth is supported on your hardware
if (!rxBluetooth.isBluetoothAvailable()) {
// handle the lack of bluetooth support
} else {
// check if bluetooth is currently enabled and ready for use
if (!rxBluetooth.isBluetoothEnabled()) {
// to enable bluetooth via startActivityForResult()
rxBluetooth.enableBluetooth(this, REQUEST_ENABLE_BT);
} else {
// you are ready
}
}
Have fun.
Make sure you are unsubscribing and stopping discovery in OnDestroy()
:
if (rxBluetooth != null) {
rxBluetooth.cancelDiscovery();
}
unsubscribe(rxBluetoothSubscription);
rxBluetooth.observeDevices()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.subscribe(new Action1<BluetoothDevice>() {
@Override public void call(BluetoothDevice bluetoothDevice) {
//
}
});
// Use 00001101-0000-1000-8000-00805F9B34FB for SPP service
// (ex. Arduino) or use your own generated UUID.
UUID uuid = UUID.fromString("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx");
rxBluetooth.observeConnectDevice(bluetoothDevice, uuid)
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.io())
.subscribe(new Action1<BluetoothSocket>() {
@Override public void call(BluetoothSocket socket) {
// Connected to the device, do anything with the socket
}
}, new Action1<Throwable>() {
@Override public void call(Throwable throwable) {
// Error occured
}
});
To observe just ACTION_DISCOVERY_STARTED
:
rxBluetooth.observeDiscovery()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.filter(Action.isEqualTo(BluetoothAdapter.ACTION_DISCOVERY_STARTED))
.subscribe(new Action1<String>() {
@Override public void call(String action) {
//
}
});
To observe both ACTION_DISCOVERY_STARTED
and ACTION_DISCOVERY_FINISHED
:
rxBluetooth.observeDiscovery()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.filter(Action.isEqualTo(BluetoothAdapter.ACTION_DISCOVERY_STARTED, BluetoothAdapter.ACTION_DISCOVERY_FINISHED))
.subscribe(new Action1<String>() {
@Override public void call(String action) {
//
}
});
rxBluetooth.observeBluetoothState()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.filter(Action.isEqualTo(BluetoothAdapter.STATE_ON))
.subscribe(new Action1<Integer>() {
@Override public void call(Integer integer) {
//
}
});
You can observe single or multiple states:
BluetoothAdapter.STATE_OFF
BluetoothAdapter.STATE_TURNING_ON
BluetoothAdapter.STATE_ON
BluetoothAdapter.STATE_TURNING_OFF
rxBluetooth.observeScanMode()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.filter(Action.isEqualTo(BluetoothAdapter.SCAN_MODE_CONNECTABLE_DISCOVERABLE))
.subscribe(new Action1<Integer>() {
@Override public void call(Integer integer) {
//
}
});
You can observe single or multiple scan modes:
BluetoothAdapter.SCAN_MODE_NONE
BluetoothAdapter.SCAN_MODE_CONNECTABLE
BluetoothAdapter.SCAN_MODE_CONNECTABLE_DISCOVERABLE
rxBluetooth.observeBluetoothProfile(myProfile)
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.subscribe(new Action1<ServiceEvent>() {
@Override public void call(ServiceEvent serviceEvent) {
switch (serviceEvent.getState()) {
case CONNECTED:
BluetoothProfile bluetoothProfile = serviceEvent.getBluetoothProfile();
List<BluetoothDevice> devices = bluetoothProfile.getConnectedDevices();
for ( final BluetoothDevice dev : devices ) {
//..
}
break;
case DISCONNECTED:
//serviceEvent.getBluetoothProfile() returns null
break;
}
}
});
myProfile
can be one of BluetoothProfile.HEALTH
, BluetoothProfile.HEADSET
, BluetoothProfile.A2DP
, BluetoothProfile.GATT
or BluetoothProfile.GATT_SERVER
Clients should close profile proxy when they are no longer using the proxy obtained from observeBluetoothProfile
:
rxBluetooth.closeProfileProxy(int profile, BluetoothProfile proxy);
To observe the current device state, you can receive the ConnectionStateEvent
which provides the state, previous state, and BluetoothDevice
.
rxBluetooth.observeConnectionState()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.subscribe(new Action1<ConnectionStateEvent>() {
@Override public void call(ConnectionStateEvent event) {
switch (event.getState()) {
case BluetoothAdapter.STATE_DISCONNECTED:
// device disconnected
break;
case BluetoothAdapter.STATE_CONNECTING:
// device connecting
break;
case BluetoothAdapter.STATE_CONNECTED:
// device connected
break;
case BluetoothAdapter.STATE_DISCONNECTING:
// device disconnecting
break;
}
}
});
Possible states are:
BluetoothAdapter.STATE_DISCONNECTED
BluetoothAdapter.STATE_CONNECTING
BluetoothAdapter.STATE_CONNECTED
BluetoothAdapter.STATE_DISCONNECTING
To observe the bond state of devices, you can receive the BondStateEvent
which provides the state, previous state, and BluetoothDevice
.
rxBluetooth.observeBondState()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.subscribe(new Action1<BondStateEvent>() {
@Override public void call(BondStateEvent event) {
switch (event.getState()) {
case BluetoothDevice.BOND_NONE:
// device unbonded
break;
case BluetoothDevice.BOND_BONDING:
// device bonding
break;
case BluetoothDevice.BOND_BONDED:
// device bonded
break;
}
}
});
Possible states are:
BluetoothDevice.BOND_NONE
BluetoothDevice.BOND_BONDING
BluetoothDevice.BOND_BONDED
After creating a connection to the device, you can use BluetoothConnection
class to read and write with its socket.
BluetoothConnection bluetoothConnection = new BluetoothConnection(bluetoothSocket);
// Observe every byte received
bluetoothConnection.observeByteStream()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.io())
.subscribe(new Action1<Byte>() {
@Override public void call(Byte aByte) {
// This will be called every single byte received
}
}, new Action1<Throwable>() {
@Override public void call(Throwable throwable) {
// Error occured
}
});
// Or just observe string
bluetoothConnection.observeStringStream()
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.io())
.subscribe(new Action1<String>() {
@Override public void call(String string) {
// This will be called every string received
}
}, new Action1<Throwable>() {
@Override public void call(Throwable throwable) {
// Error occured
}
});
bluetoothConnection.send("Hello"); // String
bluetoothConnection.send("There".getBytes()); // Array of bytes
rxBluetooth.observeAclEvent() //
.observeOn(AndroidSchedulers.mainThread())
.subscribeOn(Schedulers.computation())
.subscribe(new Action1<AclEvent>() {
@Override public void call(AclEvent aclEvent) {
switch (aclEvent.getAction()) {
case BluetoothDevice.ACTION_ACL_CONNECTED:
//...
break;
case BluetoothDevice.ACTION_ACL_DISCONNECT_REQUESTED:
//...
break;
case BluetoothDevice.ACTION_ACL_DISCONNECTED:
//...
break;
}
}
});
compile 'com.github.ivbaranov:rxbluetooth:0.1.6'
Snapshots of the development version are available in Sonatype's snapshots
repository.
Make sure you use SquareAndroid code style. (https://github.com/square/java-code-styles)
Create a branch for each feature.
Ivan Baranov
Copyright 2015 Ivan Baranov
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
FAQs
Android reactive bluetooth
We found that com.github.ivbaranov:rxbluetooth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.