back to article Fender's 'smart' guitar amp has no Bluetooth pairing controls

Guitar amp manufacturer Fender's recently-introduced Mustang GT 100 guitar amplifier can be made to play whatever audio an attacker fancies, security researchers have discovered. The amp allows Bluetooth connections, but without pairing security. Anyone within range could therefore "stream arbitrary audio to it and hijack your …

Page:

  1. Anonymous South African Coward Bronze badge
    Trollface

    lol, rickrolling sound like a good thing

    1. Andrew Newstead

      Forget Rickrolling the artist, do the stadium!

    2. djstardust

      Right ....

      Where's my Cheeky Girls greatest hits CD .....

      Failing that Daphne & Celeste or Lolly will do instead :)

      1. Mike Moyle

        Re: Right ....

        Go for the nuclear option: Mary Schneider, "Yodeling the Classics".

        https://www.youtube.com/watch?v=awp3-7EVM0Q

        1. Danny 14

          Re: Right ....

          i think aome slipknot at the local glen miller recital would do.

  2. Mystic Megabyte
    FAIL

    "We don’t consider these to be vulnerabilities particularly, more abuse of features for unintended consequences," Pen Test Partners' Ken Munro told El Reg.

    It might be a vulnerability if someone turns it up to 11 and blasts pink noise through it. Damage to speakers, amp or eardrums is a possibility.

    1. Hans Neeson-Bumpsadese Silver badge

      It might be a vulnerability if someone turns it up to 11 and blasts pink noise through it. Damage to speakers, amp or eardrums is a possibility.

      Damage to ears possibly, damage to amp or speakers no. It's a combo amp, and the speaker is rated to be able to handle the output from the power amp stage. No matter how high you turn up the volume you can't damage the amplifier itself.

      1. JimmyPage Silver badge
        Stop

        RE: the speaker is rated to be able to handle the output from the power amp

        Er .... I wouldn't want to test that standing behind it, as a pilot once said.

        That sentence is missing a "Should", and I can well believe that some combo amps have been built down to a price and someone said "100W speaker ?, No one will notice if we use a 50W."

        Especially as some guitarists might think the resultant distortion is "pretty groovy".

        1. CrazyOldCatMan Silver badge

          Re: RE: the speaker is rated to be able to handle the output from the power amp

          guitarists might think the resultant distortion is "pretty groovy"

          It's when they start getting out the razor blades that you need to start worrying..

        2. Anonymous Coward
          Anonymous Coward

          Re: RE: the speaker is rated to be able to handle the output from the power amp

          "100W speaker ?, No one will notice if we use a 50W."

          Long ago, in a far off planet, a band called deep purple had some blown loudspeakers.

          They put them all in a couple of 4x12s and the Roadies Red-Star trained them back to Jim Marshalls

          My acquaintance, a young engineer there. was. after a peculiar phone call, asked to come and pick them up from the station.

          Not only had they been re stencilled with 'Fu**ing Marshall Sh*t' but on arrival removing the rear covers revealed that the roadies had used them as portable toilets.

          IN the magazine 'studio sound', a hot guitarist was asked why he rans is loudspeaker cabinets without grilles or grille cloth. Was it perhaps to get some special sound ?

          Nah mate" he retorted "Its so I can kick the **** out of them when the cones go, and stop them buzzing".

          I can assure you that even cloth eared rock musicians can tell when a loudspeaker has blown.

      2. Anonymous Coward
        Anonymous Coward

        @Hans Neeson-Bumpsadese: "It's a combo amp, and the speaker is rated to be able to handle the output from the power amp stage. No matter how high you turn up the volume you can't damage the amplifier itself."

        Not true. The amplifier and speaker will have been specced up to handle fluctuating signals. Push it hard enough and for long enough and both the amplifier and speaker can be damaged.

        Fender are claiming this as the first "wifi" amp, but Line 6 actually beat them to that with their Amplifi range.

        1. Anonymous Coward
          Anonymous Coward

          The amplifier and speaker will have been specced up to handle fluctuating signals.

          I have designed guitar amplifiers,. You have not., They are specced to handle full power full distortion continuously

          Typically 50W amps will have 60-80W loudspeakers.

          My Marshall 50W (2x EL34) has a Celestion G75 installed

      3. Anonymous Coward
        Anonymous Coward

        "No matter how high you turn up the volume you can't damage the amplifier itself."

        Sadly not true. Many modern guitar amps are designed in such a way that they blow up if the user fails to regard the spec with enough scepticism and tries to use full power for any length of time. It's a consequence of design by marketers and beancounters.

        Ironically, valve amplifiers of 40 or 50 years ago were much more robust in this regard. (I've been an amp repair tech for 45+ years and have seen a lot of blown up amplifiers).

        1. simonb_london

          "Many modern guitar amps are designed in such a way that they blow up if the user fails to regard the spec with enough scepticism and tries to use full power for any length of time."

          If the amp is run at full power then the output devices become more like switches than resistors and actually become less hot than they would running, say, at 2/3 power. Feel sorry for the speaker though....

      4. Andytug

        Nope, clipping can destroy speakers and amps even at less power...

        In a lot of ways it's safer to have an amp rated higher than your speakers rather than the other way round . The lower powered amp will start to "clip" the tops off the waveform as it runs out of headroom, which is not good for the speakers at all. Or your ears!

    2. MyffyW Silver badge

      I don't consider a 1/4" guitar cable that much of an impediment, whereas a Bluetooth-doo-dah simply feels like my day job intruding into my leisure time. To be honest, the interplay of guitar straps and foundation-wear was just one more reason why playing the guitar seemed so liberating.

      Maybe it's time to accept I'm an analogue girl in a digital dystopia.

      1. Laura Kerr
        Thumb Up

        Sounds like me. I suffer from GAS as much as the next bassist, but most of my toys - amps, effects pedals and whatnot - are decidedly analogue, are tied together with electric string and have controls you either twist or stamp on to make a noise.

        In a weak moment, I bought a Boss digital mini-studio, and I find it a royal pain in the arse. Admittedly, the looping, speed control and recording functions are very good, but I really dislike breaking the rhythm to fiddle about with menus.

        Anyway, that's Fender off my shopping list. I prefer Eden kit, anyway.

      2. ibmalone

        I haven't used this one, but the bluetooth on similar amps is for using them to play sound sources like backing tracks, you still use a cable for the guitar.

    3. 's water music

      It might be a vulnerability if someone turns it up to 11 and blasts pink noise through it

      I think a brown note might be more of a concern

    4. Korev Silver badge
      Coat

      It might be a vulnerability if someone turns it up to 11 and blasts pink noise through it

      Well, she does make an awful racket

    5. CrazyOldCatMan Silver badge
      Coat

      and blasts pink noise through it. Damage to speakers, amp or eardrums is a possibility.

      I didn't think her music was *that* bad..

      Yes, yes, leaving now. Mine's the one with the band patches on for bands nobody else seems to have heard of..

      1. BongoJoe
        Windows

        Mine's the one with the band patches on for bands nobody else seems to have heard of..

        Band patches? How very late seventies and eighties is that?

        We used to hand embroider the names and logos onto our denim jackets. Do you know how long it took me to hand embroider the cover from Rainbow Rising onto mine? And then some whippersnapper comes along with a jacket that his mum has sewn a Saxon patch onto.

        Pah!

        (old fogie icon ------> )

  3. Anonymous Coward
    Facepalm

    "abuse of features for unintended consequences,"

    Sound like : "It's a feature... not a bug..."

    1. Tom 7

      Re: "abuse of features for unintended consequences,"

      Has Fender employed an MBA? Its that kind of 'all the buzzwords and fuck the engineering' approach.

      1. Killfalcon Silver badge

        Re: "abuse of features for unintended consequences,"

        It's the Pen testers quoted as saying it's not a vulnerability. They seem to want to distinguish between "leaks private data/permits bank fraud" from "can make the screen go fuzzy/change the font".

        It's probably a good idea to avoid sensationalism that makes people disregard pen-test reports, and if this is the distinction to draw, I can't say it's a bad one.

    2. Simon Harris

      Re: "abuse of features for unintended consequences,"

      Sounds like the same 'feature' that lets my neighbours take over (accidentally, I'm sure!) our LG soundbar with their Bulgarian music without needing a pairing code. Worse, as soon as the soundbar sees a Bluetooth connection, it switches input mode automatically away from a wired input, as if Bluetooth is the most important thing in the world!

      1. Ken Moorhouse Silver badge

        Re: my neighbours take over our LG soundbar with their Bulgarian music

        Are you sure it's not Andy Irvine's influence on that Planxty stuff you like?

        1. Anonymous Coward
          Anonymous Coward

          Re: my neighbours take over our LG soundbar with their Bulgarian music

          This must be the first Andy Irvine / Planxty ref on El Reg.

          Mine's the one with the Well Below The Valley in the pocket ...

          1. jake Silver badge

            Re: my neighbours take over our LG soundbar with their Bulgarian music

            Nope. Planxty was referenced here on 24 Sept. 2014.Sadly, it was an AC that posted.

          2. Ken Moorhouse Silver badge
            Pint

            Re: This must be the first Andy Irvine / Planxty ref on El Reg.

            In addition to Jake's observation, have a bonus....

            https://www.youtube.com/watch?v=DehychgRSDk

      2. Anonymous Coward
        Anonymous Coward

        Re: "abuse of features for unintended consequences,"

        Where do you live? I want to live next to you

  4. rmason

    First person

    First person to stream a self-help audiobook at an angry "britain first" type rally wins.

    If you can call a handful of angry sad bastards a "rally"

  5. Anonymous Coward
    Anonymous Coward

    I wonder if it's also vulnerable to a buffer overflow attack? It could be expecting a few kilobytes but get a gig.

    1. Hans Neeson-Bumpsadese Silver badge

      I think all data gets routed through the tour bus

      1. CrazyOldCatMan Silver badge

        I think all data gets routed through the tour bus

        I don't think that "data" is how you spell "drugs"..

    2. Tom 7

      Buffy overflow shirely

      for the old canucks out there.

      1. jake Silver badge

        Re: Buffy overflow shirely

        I think we should delay this line of reasoning. Anyone have any feedback?

        1. Tom 7

          Re: Buffy overflow shirely

          Perhaps some fuzzy logic could harden up the data.

          1. Korev Silver badge
            Coat

            Re: Buffy overflow shirely

            You're just stringing us along here, can you try to Marshall some order please it's all looking too distorted...

  6. A K Stiles
    Joke

    Maybe they need to transpose it to a different key?

  7. Steve K
    Coat

    Pairing

    If you had pairing it might lead to Fender lock-in - there are always strings attached somewhere.

    1. fidodogbreath

      Re: Pairing

      there are always strings attached somewhere

      Typically, those are attached to the guitar.

  8. Tom 7

    I will not hear a word said against Fender

    since I just found out my old Fender valve amp is worth over £3k!

    And it will be worth a lot more now all the new shit has gone shit!

    1. Mage Silver badge
      Windows

      Re: I will not hear a word said against Fender

      All this "smart" garbage needs to stop.

      3.5mm & 1/4 jacks. Canon plugs.

      Real knobs, not apps, up/down buttons or rotary encoders (unless absolute grey code).

      1. King Jack
        FAIL

        Re: I will not hear a word said against Fender

        You forget about the flimsy USB connector. Why they didn't use the heavy duty B connector used on professional gear is unknown. I guess that they wanted to make shit that will break easily, steering you to buy a real amp. (by another manufacturer).

        1. James Hughes 1

          Re: I will not hear a word said against Fender

          Recently found out my '86 Jap made Squire Fender Strat is worth £700! So Yay! for Fender, even the cheaper ones!

          On the other hand my Marshall valve amp has never really worked properly. Must buy some new valves.

          1. John 104

            Re: I will not hear a word said against Fender

            @James Huges

            Have you picked up any new Fender guitars? Even their super expensive kit just feels cheap. Frets are poorly filed, action is crap, sound is crap. Its all just a huge marketing machine for wanna be rock stars to buy in to. As soon as they came out with fake road worn guitars, that was the end for me. The Japanese stuff is well made and worth the cash if you can get a decent one.

            As for gimmic Amps. No thanks. Why would you want to play anything other than guitar through your guitar amp? The speaker isn't designed to play voices or deep bass, or whatever else isn't guitar. Or, at least, it shouldn't be.

            I'll stick to my mid 80s Warmoth Boogie Body and my Orange Micro Dark in its custom cabinet with my nice sounding Eminence RamRod. Sounds fantastic, no pedals needed.

        2. Stoneshop

          Re: I will not hear a word said against Fender

          Why they didn't use the heavy duty B connector used on professional gear is unknown.

          And even those are pretty crappy.

          For real roadie-resistant connectors Neutrik has USB, RJ45 and several other not-known-for-their-durability computer connectors, housed in their signature XLR shells. With matching chassis parts, of course.

        3. Anonymous Coward
          Anonymous Coward

          Re: I will not hear a word said against Fender

          "Why they didn't use the heavy duty B connector used on professional gear is unknown."

          Because this is hobbyist gear? As a working musician I'd consider the use of equipment like this for a professional gig to be quite foolish.

      2. Anonymous Coward
        Anonymous Coward

        Re: I will not hear a word said against Fender

        Bah, modern rubbish. Gut strings and friction tensioners for the win!

Page:

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like