[Spookie]

This new toool is called The Car Whisperer and allows people equipped with a Linux Laptop and a directional antenna to inject audio to, and record audio from bypassing cars that have an unconnected Bluetooth handsfree unit running. Since many manufacturers use a standard passkey which often is the only authentication that is needed to connect.

This tool allows to interact with other drivers when traveling or maybe used in order to talk to that pushy Audi driver right behind you ;) . It also allows to eavesdrop conversations in the inside of the car by accessing the microphone.

Since the attacker's laptop is fully trusted once it has a valid link key, the laptop could be used in order to access all the services offered on the hands-free unit. Often, phonebooks are stored in these units. I am quite certain that there will be more issues with the security of these systems due to the use of standard passkeys.

See the images from the initial Car Whisperer Experiments in the album.

Trifinite Blog

Car Whisperer

[AdmiralB]

well i hope theres a windows version LOL
i think it would be intresting for the car co.s to know this :)
they will have a hard time repairing so many cars out there

[Pro21]

lol yep very lol party time if you have a bluetooth device :)
Not my case :@

[binclintonusa]

The Car Whisperer and allows people equipped with a Linux Laptop and a directional antenna to inject audio to.This is very good. :P


pret auto

[meathive]

http://www.w3bbo.com/forums/You-Are-Fucktard_Cock_Monkey.jpg

[packet]

Sounds like I'm not the only one totally sick of "LOL", and if I was a mod I'd probably give a warn about "thanks" or "this is good" without any additional content.

In any case I'm writing up some bluetooth content for our wireless hacking class, nice to have another example to use of what we could hack into, might be hard to bring a car into the classroom.