Bluetooth Can Be Cracked!


Nothing is completely safe today. Adobe has recently released a patch for a security hole in different graphical software, so why should Bluetooth be safe?

... and Bluetooth isn't safe off course! ;)

Two researchers of the Tel Aviv University School of Electrical Engineering Systems say they have discovered a technique for taking control of Bluetooth-enabled mobile phones. After you've established a connection with an other cell phone, the attacker can easily make calls with your phone. If there is a Bluetooth connection with a PC, the hacker can even transfer data between his Bluetooth device / cell phone and the hacked computer. Bluetooth can be very dangerous as you can see! Even when the handsets have security features switched on, your cell phone isn't save at all!

Avishai Wool, senior lecturer and Yaniv Shaked, graduate student and both researchers of the Tel Aviv University School of Electrical Engineering Systems have published recently a paper about three methods for forcing a repeat of the pairing process, "Cracking the Bluetooth PIN" ( http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/ ). In this paper, a passive attack is described, in which an attacker can find the PIN used during the pairing process. The eye-opening conclusion of these two researchers: "Our results show that using algebraic optimizations, the most common Bluetooth PIN can be cracked within less than 0.06-0.3 seconds. If two Bluetooth devices perform pairing in a hostile area, they are vulnerable to this attack."

A Belgian Master student is making a fresh attempt to keep a list with Bluetooth security links on http://student.vub.ac.be/~sijansse/2e%20lic/BT/welcome.html.

Ollie Whitehousen security researcher of @stake, a digital security consulting firm ( http://www.atstake.com ) has written in October 2003 a paper that "examines methods of assessing the security of Bluetooth devices in relation to the protocol's design and implementation flaws" ( http://www.atstake.com/research/reports/acrobat/atstake_war_nibbling.pdf ).

In general, the most critical point is the 'pairing' - connection procedure of two Bluetooth devices. When a Bluetooth device asks you to re-enter the PIN number for re-pairing, once the two devices are re-connected, the hacker can now easily crack the PIN code.

Links:

- http://www.atstake.com/research/reports/acrobat/atstake_war_nibbling.pdf

- http://student.vub.ac.be/~sijansse/2e%20lic/BT/

- http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/

For feedback on this article, please visit http://wallies.info/blog/item/145/index.html

Walter V. is a self-employed internet entrepreneur and founder-webmaster of several websites, including
wallies.info :: A snappy blog about snappy blue things :: blog | wiki | forum | links - http://wallies.info
mblo.gs :: A snappy moblog community - http://mblo.gs







Related News



Windows Mobile Devices with no Hardware Buttons - Mobility Site

Windows Mobile Devices with no Hardware Buttons
Mobility Site, AL -Oct 11, 2008
Knowing the limitations of Windows Mobile, I wonder how good the user experience can get without having some of the traditional hard buttons. ...

Ligonier Hardware reborn as antiques store with cool living space ... - Pittsburgh Post Gazette

Pittsburgh Post Gazette

Ligonier Hardware reborn as antiques store with cool living space ...
Pittsburgh Post Gazette, PA -Oct 10, 2008
Those qualities, and her can-do husband, Andy, helped the couple transform the old Ligonier Hardware store into a distinctive antique shop with a ...

The Financial Crisis Hits the Retail Stores - TIME

The Gazette (Montreal)

The Financial Crisis Hits the Retail Stores
TIME -Oct 10, 2008
Owners of independent hardware stores say the market pressure might actually be working in their favor. "When you're buying $1000 worth of things it's worth ...
Financial crisis moves from Wall St. to the mallNorthwest Herald
all 921 news articles


From this Vista, it looks like same old Microsoft - Newsday

From this Vista, it looks like same old Microsoft
Newsday, NY -15 hours ago
Does anyone seriously expect MIS departments to invest in conversion costs and new hardware, a Vista requirement, in the middle of a recession? ...
Walter Mossberg: There's really no reason to use 64-bit ExplorerArizona Daily Star
all 2 news articles

Outcome analysis following removal of locking plate fixation of ... - 7thSpace Interactive (press release)

Outcome analysis following removal of locking plate fixation of ...
7thSpace Interactive (press release), NY -4 hours ago
Though, distinct hardware related complaints after fracture union are reported. Information concerning the outcome after removal of hardware from the ...

Six money-saving secrets to help stretch your tech budget - ZDNet

ZDNet

Six money-saving secrets to help stretch your tech budget
ZDNet -5 hours ago
You might be tempted to impose a freeze on all new purchases of hardware and software, but that draconian strategy only works for so long. ...

Dawsonville Hardware October Bargains - Dawson Times

Dawsonville Hardware October Bargains
Dawson Times, GA -8 hours ago
Step into Dawsonville Hardware on the square in October for these bargains of the month. Dawsonville Hardware carries a large selection of hardware...

IMTEC introduces new hardware and software - NDT.net

NDT.net

IMTEC introduces new hardware and software
NDT.net, Germany -1 hour ago
IMTEC, a 3M Company, has announced the Iluma Sprite, a low cost, small footprint CT (computed tomography) system designed with a new level of ease of use ...

The week in hardware: DX 11, Nehalem, and AMD - Ars Technica

The week in hardware: DX 11, Nehalem, and AMD
Ars Technica, MA -Oct 11, 2008
... aren't LGA771-flavored and hopefully a platform that won't run $600, but only Intel knows for now. Stay tuned to Kit for all your gadget and hardware news.

Japanese Hardware: 360 Lead Narrows Over PS3 - Gamasutra

Boston Globe

Japanese Hardware: 360 Lead Narrows Over PS3
Gamasutra, CA -Oct 10, 2008
Although software sales were relatively healthy, this week has seen some of the lowest overall hardware sales this year. As both PSP and Nintendo DS await ...
Japanese Sales Data: Media Create hardware sales for 29/9 – 05/10EL33TONLINE
Japan Hardware Sales ResultsKezins
Xbox 360 beats PS3 for fourth week in JapanPunch Jump
CVG Online - Stuff.co.nz
all 657 news articles