[beardednose]

New Crack Bites Bluetooth Security
By Larry Loeb
June 7, 2005

Opinion: Larry Loeb looks at an exploit that could allow rogue devices to hijack Bluetooth sessions, and reaffirms his distaste for the protocol.

I've never liked Bluetooth devices. They have always seemed finicky to me, especially the process where they "pair" with each other in order to communicate.

It may well be that this dislike stemmed from a review I tried to do a few years ago on a Bluetooth headset for mobile phones.

I spent many hours trying to get a phone and the headset to talk to each other, only to find that the phone was running an earlier version of the Bluetooth standard than the headset was using.

It was enormously frustrating to me, because there was no indication in the entire process of why the failure was occurring. It just didn't work.

So, learning about a new and inventive way to totally crack the protocol's security brought a small, thin smile of revenge to my lips as I recalled the frustration of that past review.

Read the rest at http://www.eweek.com...,1825463,00.asp

-----------------
BN says:
According to a different source, the new Maytag Neptune washer and dryers are bluetooth enabled...when you open the washer, the dryer wakes up. Even comes with an ethernet port! So now an attacker can shrink your delicate clothes at will!

Also, I heard more vehicles are bluetooth. Instead of plugging the diagnostics into the port below the steering wheel, the mechanic just pulls out his "teeth" and reads the computer codes from your vehicle.

[aapje]

beardednose, on Jun 13 2005, 12:44 PM, said:

I spent many hours trying to get a phone and the headset to talk to each other, only to find that the phone was running an earlier version of the Bluetooth standard than the headset was using.

It was enormously frustrating to me, because there was no indication in the entire process of why the failure was occurring. It just didn't work.

or you could read the manual, idiot.

[belgther]

One thing that I didn't understand: Why does Larry Loeb, or whatever, publicize his revenge or evil aim? Is there a sense to do it? And what happens if he succeeds cracking Bluetooth totally? What will he get?

Quote

According to a different source, the new Maytag Neptune washer and dryers are bluetooth enabled...when you open the washer, the dryer wakes up. Even comes with an ethernet port! So now an attacker can shrink your delicate clothes at will!

I would prefer using a manually controlled washer and dryer, such a machine can be started/stopped remotely, but it doesn't put your clothes/sort them automatically at a remote bluetooth command.
Seems like these protocols are being used to "steal" our money legally and give the so-called comfort, which is nothing but laziness, imho.

[raging_bull]

This is bullshit!

Bleutooh is made to be easy and ast.. not to be secuire.. If you want secuir take wlan.. But factory's are devolping products with bleutooth and after then saying it is not secuir..

Why then take bleutooth? Use that protocol that is the best for ya product.. Man i hate this bullshit.. :P

[myth]

It seems I have been blessed with good luck with my bluetooth devices. I dont have a large amount, but used most often in bluetooth GPS.

Bluetooth's vulnerabilities are all too impracticle, even with a Class-A Bluetooth Adaptor, leave BT alone, just enable it when you need it....