Author Topic: Bluetooth Security  (Read 3443 times)

keef

  • Full Member
  • ***
  • Posts: 129
    • View Profile
Bluetooth Security
« on: February 17, 2007, 10:03:25 am »
Hi

 iwas using a socket bluetooth card and fig labs software to connect to my phone.
I scanned for suitable sources and found my phone  and one other source ( blue man group or something.

I chose my phone connection and connected to this

When i got home i checked the obex inbox and found a 300kb file in there from blue man group (video)  

just surprised as to how this had got there as i  had not connected to the network and had not 'paired' any connection.


bit worrying really.


keef

Da_Blitz

  • Hero Member
  • *****
  • Posts: 1579
    • View Profile
    • http://www.pocketnix.org
Bluetooth Security
« Reply #1 on: February 17, 2007, 01:28:19 pm »
aparentlly there are some buletooth bilboards around

might want to tighten up the security so that obex needs authentication and pairing with a key, if it dosent need a key then anyone can set up the pairing without your involment afaik
Personal Blog
Code
Twitter

Gemini Order: #95 (roughly)
Current Device: Samsung Chromebook Gen 3
Current Arm Devices Count: ~30
Looking to acquire: Cavium Thunder X2 Hardware

speculatrix

  • Administrator
  • Hero Member
  • *****
  • Posts: 3707
    • View Profile
Bluetooth Security
« Reply #2 on: February 17, 2007, 03:25:16 pm »
check your /etc/bluetooth/hcid.conf for the encryption and authentication settings.
Gemini 4G/Wi-Fi owner, formerly zaurus C3100 and 860 owner; also owner of an HTC Doubleshot, a Zaurus-like phone.