Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Bluetooth security discussed: war-nibbling
Posted on 10-Oct-2003 17:28 | Filed under: News

Bluetooth security discussed: war-nibbling
@Stake published a paper (in two parts) on Bluetooth security. The author, Ollie Whitehouse, is also the developer of RedFang, a brute force attack tool exploiting known design characteristics (note that RedFang works on a range of MAC addresses, therefore the attacker has to know this information beforehand).

In this paper the author introduces the concept of "war-nibbling", very similar to war-driving, but applied to PAN (Personal Area Network) devices with short range.

Although most Bluetooth devices have a 10m range and communications are impacted by obstacles like doors and walls, new devices allow up to 100m range, creating conditions for anonymous connections (if in public, of course). In the first document the author explains how the security mechanisms implemented in the protocol work, and how users can set basic configuration items to prevent unwanted connections.

An interesting concept is the so called "Sweet-tooth", a Bluetooth Honeypot. Although still in development, the tool promisses some interesting features to trap eventual attackers to a Bluetooth enabled device.

Even with short range, Bluetooth attackers can use these communications to access services, like DUN (dial up) via a mobile phone, or piggyback into someone's else broadband network if there's a Bluetooth LAN Access Point open and vulnerable (some BT LAP have a non-PIN requirement as default setting).

If you're just interested in knowing more about this technology, or work with security in an environment where this is being deployed, it's an interesting reading.


More information: http://www.atstake.com/research/reports/#blue...
Download: http://www.atstake.com/research/tools/info_ga...
Trending now »

Hot discussions in our forums right now:

NZ Government Incentives Coming Soon For Buyers of Electric Vehicles!
Created by frednz, last reply by debo on 26-Sep-2018 17:17 (141 replies)
Pages... 8 9 10


Sony WH-1000XM3B Wireless Headphones $460 @ Noel Leeming (20-30% off TV and Audio until Oct 2nd)
Created by WolfChop, last reply by SpartanVXL on 26-Sep-2018 16:22 (21 replies)
Pages... 2


Do Travel Agents still provide benefits
Created by dclegg, last reply by richrdh18 on 25-Sep-2018 13:04 (33 replies)
Pages... 2 3


Internet keeps dropping
Created by Rambaldi, last reply by Snackos on 26-Sep-2018 16:33 (14 replies)

The Apple Watch Series 4, iPhone XS, XS Max and XR discussion and owners thread
Created by JEDENZED, last reply by Aaroona on 26-Sep-2018 18:41 (339 replies)
Pages... 21 22 23


Sharesies vs InvestNow vs SuperLife vs something else?
Created by CrashAndBurn, last reply by Item on 26-Sep-2018 15:18 (12 replies)

New Zealand housing market (particularly Auckland)
Created by quickymart, last reply by quickymart on 24-Sep-2018 19:22 (297 replies)
Pages... 18 19 20


Sky want Spark to block content they have the right to
Created by quickymart, last reply by vexxxboy on 26-Sep-2018 19:07 (11 replies)