Bluetooth Can Be Cracked!

Nothing is completely safe today. Adobe has recently released a patch for a security hole in different graphical software, so why should Bluetooth be safe?

... and Bluetooth isn't safe off course! ;)

Two researchers of the Tel Aviv University School of Electrical Engineering Systems say they have discovered a technique for taking control of Bluetooth-enabled mobile phones. After you've established a connection with an other cell phone, the attacker can easily make calls with your phone. If there is a Bluetooth connection with a PC, the hacker can even transfer data between his Bluetooth device / cell phone and the hacked computer. Bluetooth can be very dangerous as you can see! Even when the handsets have security features switched on, your cell phone isn't save at all!

Avishai Wool, senior lecturer and Yaniv Shaked, graduate student and both researchers of the Tel Aviv University School of Electrical Engineering Systems have published recently a paper about three methods for forcing a repeat of the pairing process, "Cracking the Bluetooth PIN" ( http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/ ). In this paper, a passive attack is described, in which an attacker can find the PIN used during the pairing process. The eye-opening conclusion of these two researchers: "Our results show that using algebraic optimizations, the most common Bluetooth PIN can be cracked within less than 0.06-0.3 seconds. If two Bluetooth devices perform pairing in a hostile area, they are vulnerable to this attack."

A Belgian Master student is making a fresh attempt to keep a list with Bluetooth security links on http://student.vub.ac.be/~sijansse/2e%20lic/BT/welcome.html.

Ollie Whitehousen security researcher of @stake, a digital security consulting firm ( http://www.atstake.com ) has written in October 2003 a paper that "examines methods of assessing the security of Bluetooth devices in relation to the protocol's design and implementation flaws" ( http://www.atstake.com/research/reports/acrobat/atstake_war_nibbling.pdf ).

In general, the most critical point is the 'pairing' - connection procedure of two Bluetooth devices. When a Bluetooth device asks you to re-enter the PIN number for re-pairing, once the two devices are re-connected, the hacker can now easily crack the PIN code.

Links:

- http://www.atstake.com/research/reports/acrobat/atstake_war_nibbling.pdf

- http://student.vub.ac.be/~sijansse/2e%20lic/BT/

- http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/

For feedback on this article, please visit http://wallies.info/blog/item/145/index.html

Walter V. is a self-employed internet entrepreneur and founder-webmaster of several websites, including
wallies.info :: A snappy blog about snappy blue things :: blog | wiki | forum | links - http://wallies.info
mblo.gs :: A snappy moblog community - http://mblo.gs

In The News:


Google News
Updated : Fri, 10 Oct 2008 17:49:09 GMT

UPDATE 1-Bush says US moving quickly to solve market crisis - Forbes


Canada.com
UPDATE 1-Bush says US moving quickly to solve market crisis
Forbes - 1 hour ago
WASHINGTON, Oct 10 (Reuters) - President George W. Bush said on Friday the US government was moving aggressively to address the financial markets crisis, but he acknowledged that anxiety was feeding on itself as stocks continued to plunge.
Bush appeals for confidence CNNMoney.com
Bush Says Markets Must Remain Calm Despite Challenges Washington Post
Reuters - The Associated Press - TheStreet.com - CNN
all 1,456 news articles

Publ.Date : Fri, 10 Oct 2008 16:33:45 GMT

NATO agrees on Afghan drug role for military - The Associated Press


Boston Globe
NATO agrees on Afghan drug role for military
The Associated Press - 1 hour ago
BUDAPEST, Hungary (AP) - NATO defense ministers Friday authorized their troops in Afghanistan to attack drug barons blamed for pumping up to US$100 million (euro74 million) a year into the coffers of resurgent Taliban fighters.
NATO Joins Drug War in Afghanistan Voice of America
NATO to Hit Drug Trade in Afghanistan New York Times
AFP - Bloomberg - International Herald Tribune - Times Online
all 1,309 news articles

Publ.Date : Fri, 10 Oct 2008 16:11:48 GMT

A Cautious Approach to Gardasil Shot - U.S. News & World Report


Canada.com
A Cautious Approach to Gardasil Shot
U.S. News & World Report - 34 minutes ago
News today cheering the fact that 1 in 4 teen girls has received the Gardasil vaccine sounds to me like some serious spin from the Centers for Disease Control and Prevention, the government agency pushing girls as young as 9 to get the shot.
Cancer Vaccine Used by 25% of Girls 13 to 17 New York Times
Quarter of adolescent US girls received HPV vaccine Reuters
WebMD - dBTechno - Wall Street Journal - eFluxMedia
all 463 news articles

Publ.Date : Fri, 10 Oct 2008 17:14:13 GMT

Coleman calls off negative ads - Minneapolis Star Tribune


MinnPost.com
Coleman calls off negative ads
Minneapolis Star Tribune - 24 minutes ago
By Patricia Lopez, Star Tribune ...and it has nothing at all to do with several outlets (including one of Franken's ads) letting us know that a Coleman ad that wants us to … read more see Franken looking out of control/angry, is actually video of ...
Coleman: I'll remove negative ads and urge others to do same Pioneer Press
Coleman says he'll pull negative ads to focus on economy Minnesota Public Radio
KAALtv.com - The Hill - The Associated Press - OpEdNews
all 460 news articles

Publ.Date : Fri, 10 Oct 2008 17:25:04 GMT

Help Support Breast Cancer Awareness With Lifespring Health - MarketWatch


ChattahBox
Help Support Breast Cancer Awareness With Lifespring Health
MarketWatch - 1 hour ago
Lifespring Health will be Donating $5 to the Susan G. Komen Foundation Each Time you Shop Online This Month SUNNYVALE, Calif., Oct 10, 2008 /PRNewswire via COMTEX/ -- October is breast cancer awareness month!
Go "Passionately Pink for the Cure" on Oct. 17 Atlantic News Telegraph
Panera Bread to sell pink bagels Times Herald-Record
SkinInc.com - BurlingtonFreePress.com - Chambersburg Public Opinion - Penn State Worthington Scranton
all 68 news articles

Publ.Date : Fri, 10 Oct 2008 16:05:31 GMT

Eagles' Westbrook out for Sunday's game - Sports Network


Sports-Odds.com
Eagles' Westbrook out for Sunday's game
Sports Network - 28 minutes ago
Philadelphia, PA (Sports Network) - Philadelphia Eagles running back Brian Westbrook will not play on Sunday at San Francisco. Westbrook, who has been hampered by a sprained ankle he suffered in the Week 3 victory over Pittsburgh, fractured his ribs in ...
Brian Westbrook: Ruled Out Rotowire
Les Bowen: Eagles vs. 49ers: The pick Philadelphia Daily News
WILM News Radio - NFL News - Kansas City Star - The Associated Press
all 642 news articles

Publ.Date : Fri, 10 Oct 2008 17:20:18 GMT

States probe possible voter registration fraud - Chicago Tribune


ABC News
States probe possible voter registration fraud
Chicago Tribune - 1 hour ago
Questions about possible cases of fraudulent voter registrations were being raised this week as officials in several states investigated hundreds of questionable or duplicate registration forms submitted by an advocacy group.
Carnahan statement on ACORN registration mess Kansas City Star
Republicans try to tie Obama to vote fraud cases Boston Globe
ABC News - Pittsburgh Tribune-Review - Inter Press Service - MyFox Tampa Bay
all 1,193 news articles

Publ.Date : Fri, 10 Oct 2008 16:48:10 GMT

RSS Feed Reader
Increase Website Traffic


PARLOT::Ebooks, Scripts, Websites, and more...

Adsense websites

Alternatives to Tape Backup

You may ask, isn't tape an anachronism in the age... Read More

Obsolete Is A Dirty Word (Intel Pentium 64 Bit Microchip)

Get ready everyone, home computers are about to set new... Read More

Getting The Proper Laptop Screen Size

Are you sick of viewing everything on that small screen... Read More

USB Drive Popularity

So many people have small USB drives today, but what... Read More

Special Events Recording in DVD Players Age

The proliferation of portable DVD players has dramatically changed the... Read More

Just The Fax, M?am

For years, I smugly prided myself as a non-fax machine... Read More

Would You Like An Extended Warranty With That?

Should you buy an extended warranty with your laptop? You... Read More

Small Computers

Today, small form factor computers demolish the myth that bigger... Read More

How To Troubleshoot DVD Drives Fast

You really enjoy those dvd movies and games and the... Read More

Top Three Factors to Consider While Choosing a Data Center for Your Business

Data Centers are the core of the Internet. The computer... Read More

Using System Restore to Save Yourself from Formatting Your Hard Drive

It is the most annoying thing when one day you... Read More

HIPPA Goes Mobile and Wireless for Hospitals and First Responders

It appears we need to further streamline health care and... Read More

Wireless Networking, Part 2: Setup and Security

The first installment in this two-part series of Tech Tips... Read More

Discover Everything About Wholesale Bar Code Reader And Software!

It is a given fact that buying wholesale would make... Read More

Wireless Networking, Part 1: Capabilities and Hardware

Wireless Networking, Part 1: Capabilities and HardwareThese days it isn't... Read More

Nvidia Geforce 7800 GTX Review

Nvidia has done it again, with it's newest video card,... Read More

The Newest Thing in Lighting - LED Lighting and What It Can Do

The other day my son said to me, what else... Read More

Preventing Tape Drive Failure

Contrary to popular belief, tape drives are generally robust and... Read More

Setting up a Network -- Wired or Wireless?

To Wire or Not to Wire Wireless networks... Read More

How To Choose A Computer Case

Things to Consider When Choosing a Computer CaseIn the past,... Read More

Expansion Cards Part 1: (of a 3 part series)

PCIThe expansion slots available on motherboards allow for a variety... Read More

Lock Workstation Fast

When you work in an office, it's important to lock... Read More

To Upgrade or Not?

To upgrade or not? That is the question. At least,... Read More

RAID Disk Recovery

RAID is short for Redundant Array of Independent (or Inexpensive)... Read More

TiVo: An Introduction for the Few Who Dont Know Yet

TiVo will change your life... for the better. Plain and... Read More