Author Topic: Bluetooth No Longer Secure  (Read 3838 times)

speculatrix

  • Administrator
  • Hero Member
  • *****
  • Posts: 3706
    • View Profile
Bluetooth No Longer Secure
« on: June 08, 2005, 04:18:28 pm »
http://www.theregister.co.uk/2005/06/08/bl...th_mobo_attack/

basically, if there's an active bluetooth connection, you'd trigger a re-pairing key exchange and snoop the key exchange, and can crack the key very quickly.

sigh. so, basically, it's now 802.11 with WPA or nothing... not that I think any of my neighbours have got the know-how to sniff and break into my bluetooth link...

well, I never resolved my bluetooth problems, so I've got to get the wpa_supplicant working now :-/
Gemini 4G/Wi-Fi owner, formerly zaurus C3100 and 860 owner; also owner of an HTC Doubleshot, a Zaurus-like phone.

azalin

  • Newbie
  • *
  • Posts: 33
    • View Profile
Bluetooth No Longer Secure
« Reply #1 on: June 09, 2005, 10:33:00 am »
Quote
http://www.theregister.co.uk/2005/06/08/bl...th_mobo_attack/

basically, if there's an active bluetooth connection, you'd trigger a re-pairing key exchange and snoop the key exchange, and can crack the key very quickly.

sigh. so, basically, it's now 802.11 with WPA or nothing... not that I think any of my neighbours have got the know-how to sniff and break into my bluetooth link...

well, I never resolved my bluetooth problems, so I've got to get the wpa_supplicant working now :-/
[div align=\"right\"][{POST_SNAPBACK}][/a][/div]

Found the entire article at:
[a href=\"http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/]http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/[/url]

bluedevils

  • Hero Member
  • *****
  • Posts: 1284
    • View Profile
    • http://
Bluetooth No Longer Secure
« Reply #2 on: June 09, 2005, 10:50:17 am »
I never considered bluetooth secure to begin with.  I never consider it for permanent connections.  I only turn it on for quick file transfers or for the headset of my phone.  I also presume that anyone can listen in when I'm on the phone anyways.
I'm now an iphone user and use my zaurii as serial terminals, perl and shell scripting and when I need 640x480 screens

sl-c3100/pda cacko 1.23 | sl-6000l/needs battery | sl-c760/server pdaxrom rc12 | Former sl-5500/tkcrom owner (sister's birthday gift)

tumnus

  • Hero Member
  • *****
  • Posts: 1176
    • View Profile
    • http://www.cpinkney.org.uk
Bluetooth No Longer Secure
« Reply #3 on: June 11, 2005, 07:17:24 pm »
Not that IR connections are at all secure, but considering the very short range of IR and class 3 BT devices (most phones and CF cards), someone would have to be practically on top of you to even start snooping.
# Search the Zaurus Howtos ## Search the Zaurus FAQs ## Find Z software at ELSI #
--------------------
UK SL5500 with Sharp ROM 3.13, SL5600 with Sharp ROM 1.32 - SuSE 9.0 Pro, Windows XP Home
Qualendar for Calendar and Todo
Socket Bluetooth CF Card (Rev F), Kingmax 512MB MMC Card, Palm Tungsten T Stylus,
Pretec CF->Smartmedia Adapter, Semsons Universal Battery Extender

Rev.Tigger

  • Newbie
  • *
  • Posts: 48
    • View Profile
    • http://
Bluetooth No Longer Secure
« Reply #4 on: June 22, 2005, 05:42:39 am »
Quote
Not that IR connections are at all secure, but considering the very short range of IR and class 3 BT devices (most phones and CF cards), someone would have to be practically on top of you to even start snooping.
[div align=\"right\"][{POST_SNAPBACK}][/a][/div]


Not any more :/ ,   have you seen the bluetooth sniper rifle?  

[a href=\"http://www.tomsnetworking.com/Sections-article106.php]http://www.tomsnetworking.com/Sections-article106.php[/url]