Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Bluetooth security discussed: war-nibbling
Posted on 10-Oct-2003 17:28. | Tags Filed under: News.


Bluetooth security discussed: war-nibbling
@Stake published a paper (in two parts) on Bluetooth security. The author, Ollie Whitehouse, is also the developer of RedFang, a brute force attack tool exploiting known design characteristics (note that RedFang works on a range of MAC addresses, therefore the attacker has to know this information beforehand).

In this paper the author introduces the concept of "war-nibbling", very similar to war-driving, but applied to PAN (Personal Area Network) devices with short range.

Although most Bluetooth devices have a 10m range and communications are impacted by obstacles like doors and walls, new devices allow up to 100m range, creating conditions for anonymous connections (if in public, of course). In the first document the author explains how the security mechanisms implemented in the protocol work, and how users can set basic configuration items to prevent unwanted connections.

An interesting concept is the so called "Sweet-tooth", a Bluetooth Honeypot. Although still in development, the tool promisses some interesting features to trap eventual attackers to a Bluetooth enabled device.

Even with short range, Bluetooth attackers can use these communications to access services, like DUN (dial up) via a mobile phone, or piggyback into someone's else broadband network if there's a Bluetooth LAN Access Point open and vulnerable (some BT LAP have a non-PIN requirement as default setting).

If you're just interested in knowing more about this technology, or work with security in an environment where this is being deployed, it's an interesting reading.


More information: http://www.atstake.com/research/reports/#blue...
Download: http://www.atstake.com/research/tools/info_ga...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

Good riddance to Obama and his drones. Pakistani villagers will be saying the same.
Created by amiga500, last reply by Rikkitic on 23-Jan-2017 08:57 (114 replies)
Pages... 6 7 8


The President Of The USA: Donald Trump
Created by TimA, last reply by MikeB4 on 23-Jan-2017 09:14 (1878 replies)
Pages... 124 125 126


Headphones recommendations?
Created by rayonline, last reply by joker97 on 22-Jan-2017 22:33 (16 replies)
Pages... 2


Xtra email no longer receives on Outlook 2003 / Outlook 2011 for MAC
Created by lNomNoml, last reply by hio77 on 22-Jan-2017 13:40 (45 replies)
Pages... 2 3


New Ford Mustang or Holden Commodore or alternatives
Created by MikeB4, last reply by driller2000 on 21-Jan-2017 12:39 (63 replies)
Pages... 3 4 5


Spec check on laptop for GoPro editing please
Created by martyyn, last reply by richms on 20-Jan-2017 17:23 (13 replies)

New Unlimited Fixed Broadband
Created by LivingSkinny, last reply by noroad on 19-Jan-2017 11:14 (55 replies)
Pages... 2 3 4


$1160 for a car battery??!!
Created by jonathan18, last reply by TinyTim on 23-Jan-2017 09:04 (63 replies)
Pages... 3 4 5