Bose QuietComfort Ultra Headphones
From Wiki-IoT
Classification
| Bose QuietComfort Ultra Headphones | |
|---|---|
| Classification | |
| Grade | C |
| Calculator version | 1 |
| Classification date | 2025-10-20 |
| Information | |
| Name | Bose QuietComfort Ultra Headphones |
| Brand by Parent | Bose by Bose Corporation |
| Generation | Ultra |
| Model(s) | 045243 |
| Release date | 2023-09-16 |
| Type/Category | Over-ear Noise Cancelling Headphones |
| Website | [1] |
| Status | In sale |
| More | |
| Dimensions | 20.3 x 17.8 x 8.9 cm |
| Mass | 252g |
| Operating system | Not applicable (hardware device) |
| Companion App | Bose Music App |
| CPU | Not Applicable (Device-specific chips for audio processing and noise cancellation) |
| GPU | Not Applicable |
| Memory | Not Specified by Manufacturer |
| Storage | Not Applicable |
| Battery | Rechargeable lithium-ion |
| Power | USB-C charging |
| Charging | Wired: USB-C Wireless: Qi wireless charging (on the charging case) |
| Display | Not Applicable |
| Camera | Not Applicable |
| Sound | Drivers: Custom-designed proprietary drivers Active Noise Cancellation: Yes (Bose ImmersionAudio, Bose Aware Mode) Spatial Audio: Yes (with head-tracking via Bose ImmersionAudio) |
| Connectivity | Bluetooth: Version 5.3 Wired: 3.5mm audio jack (with included cable) Microphones: Multiple microphones for noise cancellation and voice pickup |
| Device | |||
|---|---|---|---|
| Criterion | Value | Proof(s) | Comment |
| Known hardware tampering | Rare | [2] | 作为音频外设，硬件高度集成，无公开的硬件篡改案例。其价值主要在于声学性能，而非数据窃取。 |
| Known vulnerabilities | Rare | [3] | Bose 通过 Bose Music App 提供固件更新以修复潜在漏洞。由于功能相对专一（音频处理），攻击面较小，公开漏洞罕见。 |
| Prior attacks | Rare | [4] | 暂无针对此型号耳机的公开攻击案例。安全研究主要集中在智能音箱等具有持续收音功能的产品上。 |
| Updatability | Very common | [5] | 提供固件更新，但更新频率较低，通常用于功能增强或修复重大bug，安全补丁更新不频繁。 |
| Category score | 2 | ||
| System | |||
|---|---|---|---|
| Criterion | Value | Proof(s) | Comment |
| Authentication with other systems | Full | [6] | 通过蓝牙与设备配对，通过 Bose Music App 进行设备管理和设置。认证过程为标准蓝牙配对，无高级系统集成。 |
| Communications | Encrypted with up-to-date encryption | [7] | 使用蓝牙标准的安全配对和加密协议（如AES）保护音频流和控制信号传输。 |
| Storage | No encryption | [N/A (Product Documentation)] | 设备本身不存储用户个人数据（如音频文件），仅存储配置文件和固件，由制造商加密。 |
| Category score | 2 | ||
| User Authentication | |||
|---|---|---|---|
| Criterion | Value | Proof(s) | Comment |
| Account management | Absent | [8] | 使用 Bose Music App 需要创建 Bose 账户，用于保存个性化设置和产品注册，但设备本身无账户概念。 |
| Authentication | Basic | [9] | 设备本身无用户身份验证功能。连接安全性依赖于蓝牙配对过程，任何成功配对的设备均可控制它。 |
| Brute-force protection | Absent | [N/A (Inherent to Bluetooth standard)] | 蓝牙配对过程无暴力破解保护机制，但需要在物理距离内操作，降低了远程攻击风险。 |
| Event logging | Partial logging | [N/A] | 设备无记录用户操作或连接事件的功能。 |
| Passwords | Default/Common/Easy to guess | [N/A] | 设备本身不使用密码进行认证。安全依赖于蓝牙配对。Bose 账户密码策略遵循其网站通用要求，但与耳机本地操作无关。 |
| Category score | 3 | ||
| Grade | C |
|---|
