Global Security Watch > New hack cracks 'secure' Bluetooth devices
[InfoSec News Blog] Whitehouse showed in 2004 that a hacker could arrive at this link key without knowing the PIN using a piece of equipment called a Bluetooth sniffer. This can record the exchanged messages being used to derive the link key and feed the recordings to software that knows the Bluetooth algorithms and can cycle through all 10,000 possibilities of the PIN.
Some related posts from Technorati and Google.
[Infoworld.com] Bluetooth vulnerability discovered | InfoWorld | News | 2005-06-06 ...: The technique is a practical implementation of a technique described by Ollie Whitehouse of security firm @Stake last year, which allows an attacker with specialized equipment to connect to a Bluetooth handset without authorization. Once the connection is established, the attacker could make calls on the target's handset, siphon off data, or listen in on data transfers between the device and, for example, a PC.
[Techworld.com] Techworld.com - Bluetooth crack gets serious: The technique is a practical implementation of a technique described by Ollie Whitehouse of security firm @Stake last year, which allows an attacker with specialised eqiupment to connect to a Bluetooth handset without authorisation. Once the connection is established, the attacker could make calls on the target's handset, siphon off data or listen in on data transfers between the device and, for example, a PC.
Reflected tags on Technorati: Blog, Protection, Internship, Global Security Watch