Michael turner wrote:
> On Tue, 05 Oct 2004 05:52:50 +0200, (>'.'<) wrote:
>
>
>>YES IT CAN
>>
>>Especialy with cell phones it is very easy to hack the phone using the
>>bluetooth connection of a lap top
>>All it needs is a linux opperating system and a programma such as btscanner.
>
>
> Which is a BT sniffing program.
>
>
>>I have seen a item off this today on a consumer programme warning people how
>>easy it is to download ALL data from there phone to that lap top.
>
>
> Bluesnarfing:
> http://searchmobilecomputing.techtar...952393,00.html
>
>
>>And after sending a general SMS to all cell phones with bluetooth that where
>>on the square.
>
>
> SMSs are NOT sent via Bluetooth.
>
> They where talking about 'Bluejacking', which is just the silly prank of
> sending a stupid message as a phone-book entry or business-card to a
> *discoverable* BT device.
>
>
>>4 people showed up to ask what was going on with there phone only to here it
>>had been HACKED.
>
>
> Wrong...
>
> 'HACKED' is NOT the same as receiving a phone-book entry or business card
> via BT.
>
>
>>Even politicians have no clue because they where the second group to
>>fall victim to this guy and after hearing there list off appointments
>>from a total stranger they turned off there phone and bought a new phone
>>WITHOUT bluetooth.
>>
>>Bluetooth is nice but it is so easy to hack.
>
>
> Easy: Just make sure your BT device is set as 'undiscoverable'.
>
>
>>O and once you have hacked a bluetooth phone you also use that persons
>>phone to spy on them because it has a microphone and a transmitter.
>
>
> BWAHAHAHAHAHAHA.
>
>
>>Easy
>>to see if that guy is with his wife or secret girlfriend. And placing a
>>call with the STOLEN IMEI code is from this point easy and the phone no
>>longer has to be in bluetooth range to be hacked.
>
>
> And just what has the IMEI code go to do with BT ? Absolutely nothing.
>
>
>>So if you have a bluetooth phone be very very carefull or I will hack
>>it. LOL
>
>
> Yeh right!
>
This response is mostly correct however leaving on Bluetooth but turning *off*
"discoverable" only stops bluejacking.
Some Bluetooth cracker programs just brute force the MAC address of the device.
For the great unwashed,ignorant,media junkies out there, i'll explain.
If you have bluetooth turned on, then devices can connect (page) to your's (and vise versa).
To connect you need (at the least) the Hardcoded MAC style address. BDADDR
This number comes from the Ethernet address space and is unique to every BT device.
To find out the BDADDR, there exists in bluetooth an inquiry protocol. This is a set of radio states
and a set of messages to facilitate finding out or "discovering" the potential other-end's BDADDR.
You can turn off "discovery" to stop passers by and other bluejacking motherfuckers
connecting to your device. but if bluetooth is still enabled and the BDADDR is known
then a connection can still be made. (think pairing)
Cracker programs just go all the way through the address space of the available BDADDRs and try to make a
connection to each address (one of which will be your's) and make a connection (if it's in range).
However this is just a network layer link and relatively unimportant info can be retrieved.
The data link layer connection comes higher up the stack where things like
authentication and authorization happen with passkeys and pairing etc.
Hacking Bluetooth therefore basically means hacking "An implementation of" bluetooth and not the idea/concept of
bluetooth itself (ie undetected but specified flaws).
It's this kind of stupid media sensationalism that causes ignorant shits to hinder the marketing and vis-a-vis
development of perfectly usable technology which talented engineers spend great amounts of time and effort on.
next you'll be saying "but I get miles better data rate from wireless LAN"
gits
Rob
Can a bluetooth phone be hacked or not
Linear Mode
