Bluetooth Security continues to be in the news and on the minds of bothe users and hackers.
Some Bluetooth Hacking Tools Articles:
Cryptonomicon.Net - BlueTooth Hacking For Fun and Profit
BlueTooth Hacking For Fun and Profit
WiFi wardriving tools have now advanced to the point where it is less a sign of techno-machismo and more a sign of social maladjustment to actually go out and wardrive in your neighborhood. So what's a young wireless data enthusiast to do? Software Defined Radio is a good suggestion, but you're limited to the frequencies you can use without relatively expensive equipment. Another recommendation might be investigating the security characteristics of your BlueTooth enabled device.
Bluejacking became a relatively popular sport last year. According to the Bluejackq with a Q site, Bluejacking is the sending unsuspecting Bluetooth device owners unsolicited message for fun.
Bluejacking works because many people leave their phone in the "visible" state.
+++++++++++++++++++++++++++++++
Bluetooth phone hacking tools 'spreading quickly' - silicon.com
Bluetooth phone hacking tools 'spreading quickly'
February 17 2004
by Munir Kotadia
MP calls for manufacturers to fix the problem
An MP has called for mobile phone manufacturers to make a greater effort and fix the Bluetooth security problems in their handsets after a researcher revealed that software tools enabling a 'bluesnarf' attack are widely available on the internet.
Bluesnarfing is a method of hacking into a Bluetooth-enabled mobile phone and copying its entire contact book, calendar or anything else stored in the phone's memory. Nokia and Sony Ericsson have admitted some of their handsets are vulnerable
+++++++++++++++++++++++++++++++
SecurityFocus HOME News: Security Researchers Nibble at Bluetooth
Security Researchers Nibble at Bluetooth
By Kevin Poulsen, SecurityFocus Jun 18 2003 8:59AM
On Tuesday the organization responsible for the Bluetooth wireless standard unveiled version 1.2 of its official spec at the Bluetooth World Congress in Amsterdam. But for real evidence that that the technology is finally gaining acceptance turn to the conference program for this summer's DefCon hacker convention, or the front page of the Packetstorm security tools site. After years of neglect, security researchers are beginning to gently sink their teeth into the technology.
+++++++++++++++++++++++++++++++
A.L.Digital : The Bunker : Press
Serious flaws in bluetooth security lead to disclosure of personal data
Summary
In November 2003, Adam Laurie of A.L. Digital Ltd. discovered that there are serious flaws in the authentication and/or data transfer mechanisms on some bluetooth enabled devices. Specifically, three vulnerabilities have been found:
Firstly, confidential data can be obtained, anonymously, and without the owner's knowledge or consent, from some bluetooth enabled mobile phones. This data includes, at least, the entire phonebook and calendar, and the phone's IMEI.
Secondly, it has been found that the complete memory contents of some mobile phones can be accessed by a previously trusted ("paired") device that has since been removed from the trusted list. This data includes not only the phonebook and calendar, but media files such as pictures and text messages. In essence, the entire device can be "backed up" to an attacker's own system.
+++++++++++++++++++++++++++++++
Some Bluetooth Hacking Tools Articles:
Cryptonomicon.Net - BlueTooth Hacking For Fun and Profit
BlueTooth Hacking For Fun and Profit
WiFi wardriving tools have now advanced to the point where it is less a sign of techno-machismo and more a sign of social maladjustment to actually go out and wardrive in your neighborhood. So what's a young wireless data enthusiast to do? Software Defined Radio is a good suggestion, but you're limited to the frequencies you can use without relatively expensive equipment. Another recommendation might be investigating the security characteristics of your BlueTooth enabled device.
Bluejacking became a relatively popular sport last year. According to the Bluejackq with a Q site, Bluejacking is the sending unsuspecting Bluetooth device owners unsolicited message for fun.
Bluejacking works because many people leave their phone in the "visible" state.
+++++++++++++++++++++++++++++++
Bluetooth phone hacking tools 'spreading quickly' - silicon.com
Bluetooth phone hacking tools 'spreading quickly'
February 17 2004
by Munir Kotadia
MP calls for manufacturers to fix the problem
An MP has called for mobile phone manufacturers to make a greater effort and fix the Bluetooth security problems in their handsets after a researcher revealed that software tools enabling a 'bluesnarf' attack are widely available on the internet.
Bluesnarfing is a method of hacking into a Bluetooth-enabled mobile phone and copying its entire contact book, calendar or anything else stored in the phone's memory. Nokia and Sony Ericsson have admitted some of their handsets are vulnerable
+++++++++++++++++++++++++++++++
SecurityFocus HOME News: Security Researchers Nibble at Bluetooth
Security Researchers Nibble at Bluetooth
By Kevin Poulsen, SecurityFocus Jun 18 2003 8:59AM
On Tuesday the organization responsible for the Bluetooth wireless standard unveiled version 1.2 of its official spec at the Bluetooth World Congress in Amsterdam. But for real evidence that that the technology is finally gaining acceptance turn to the conference program for this summer's DefCon hacker convention, or the front page of the Packetstorm security tools site. After years of neglect, security researchers are beginning to gently sink their teeth into the technology.
+++++++++++++++++++++++++++++++
A.L.Digital : The Bunker : Press
Serious flaws in bluetooth security lead to disclosure of personal data
Summary
In November 2003, Adam Laurie of A.L. Digital Ltd. discovered that there are serious flaws in the authentication and/or data transfer mechanisms on some bluetooth enabled devices. Specifically, three vulnerabilities have been found:
Firstly, confidential data can be obtained, anonymously, and without the owner's knowledge or consent, from some bluetooth enabled mobile phones. This data includes, at least, the entire phonebook and calendar, and the phone's IMEI.
Secondly, it has been found that the complete memory contents of some mobile phones can be accessed by a previously trusted ("paired") device that has since been removed from the trusted list. This data includes not only the phonebook and calendar, but media files such as pictures and text messages. In essence, the entire device can be "backed up" to an attacker's own system.
+++++++++++++++++++++++++++++++
