Esato Mobile
General discussions : General : bluejacking and now bluesnarfing
> New Topic
> Reply
< Esato Forum Index > General discussions > General > bluejacking and now bluesnarfing Bookmark topic
Page <  12345678910>

Ronnie Biggs Posts: 29

Sony Ericsson advises users to turn off Bluetooth

Sony Ericsson has joined Nokia in admitting that its Bluetooth
phones could be vulnerable to a 'snarfing' attack, meaning
that a hacker can access data even if the phone is not paired
with another Bluetooth device

http://newsletters.zdnetuk.cneteu.net/t/2580/882734/1042/0/

--
Posted: 2004-02-13 11:09:14
Edit : Quote

Jowi Posts: > 500

q?

on our phones, even if the is on but its not on discoverable, others may not detect it?
--
Posted: 2004-02-13 12:21:06
Edit : Quote

djpowelly Posts: > 500

Just a small idea....

If i have my on, I hold my phone in my hand, to BJack! When a connection is made, the little blue light on my T68i goes mad, meaning something is happening. And also, there is a little data transfer icon on the screen. So it could be detectable, just not that well....

Just my 2 pence!

_________________
One of the only Black T68i's and waiting on a P800!!

[ This Message was edited by: djpowelly on 2004-02-13 11:55 ]

[ This Message was edited by: djpowelly on 2004-02-13 11:55 ]
--
Posted: 2004-02-13 12:53:50
Edit : Quote

gelfen Posts: > 500

taken from ZDNet Australia

Bluesnarfing tools 'spreading quickly'

By Munir Kotadia, ZDNet UK
17 February 2004 Add your opinion

An MP has called for mobile phone manufacturers to make a greater effort and fix the Bluetooth security problems in their handsets after a researcher revealed that software tools enabling a bluesnarf attack are widely available on the Internet.

Bluesnarfing is a method of hacking into a Bluetooth-enabled mobile phone and copying its entire contact book, calendar or anything else stored in the phone's memory. Nokia and Sony Ericsson have admitted some of their handsets are vulnerable and although Sony Ericsson has made an effort to fix the problem, Nokia said the problem is not serious enough to warrant repairing.

Mark Rowe, consultant at security company Pentest, told ZDNet UK that the number of people that know how to perform the attack is quickly increasing and tools that enable the attack are widely available online. "We have been contacted by a number of security researchers that have worked out how to do it themselves without any help from us," Rowe said. "We were concerned when the information was previously published and we were told you need special tools. But in reality, anybody who looked into it in any depth would quickly work out how the attack is possible."

Rowe urged the media not to publicise which tools are used in attacks because this "would make it really easy for somebody to work out what to do". A Web search revealed hundreds of sites distributing the tools.

According to Rowe, the problem lies in how manufacturers implemented the object exchange (OBEX) protocol, which is a common method used by mobile devices to exchange information. "It was a deliberate design decision not to include authentication -- that allows people to [easily] send business cards to each other," he said. But the companies had overlooked that this implementation would also mean files could be transferred back and forth without permission, he said.

Tom Watson, Labour MP for West Bromwich East and a Bluetooth-phone user, told ZDNet UK he is concerned about the privacy of consumers and hopes that mobile phone manufacturers will do more to help fix the problem. "Once again consumers have to bear the brunt of technological failure," he said. "This offers profound threats to people's privacy. The least the sector can do is put matters right," he said.

Rowe advises anyone with a Bluetooth handset to keep it in hidden mode or even better, switch Bluetooth off: "If devices are hidden they are very difficult to find. There are techniques to find hidden devices, but it is a brute-force method that would take a lot of time. If they are not in hidden mode, you can find their address by simply asking," he said.
--
Posted: 2004-02-17 06:11:21
Edit : Quote

gyrro Posts: 1

Nokia gave an official statement regarding Bluesnarfing problem. They believe it's not important .

http://www.mb.com.ph/TECH200402243153.html
--
Posted: 2004-02-24 09:13:24
Edit : Quote

asadrizvi7 Posts: 13

can anyone tell me how actually bluesnarfing is done with T630?everyone seems to be discussing thats its possible not no one has mentioned here how to do it?
--
Posted: 2004-03-08 14:08:44
Edit : Quote

znights Posts: 70

what i heard bluesnarf can only be done via PC/Laptop and a special program. dont think it can be done via cellphone to cell phone.
--
Posted: 2004-03-11 11:34:22
Edit : Quote

joshimar Posts: 1

Have just joined this forum purely to post this to rdnymllnsktr - whoever you are - perhaps you should change your signature from GET YOUR FACTS STRAIGHT BEFORE YOU START POSTING CRAP THAT IS WRONG!!! to
ACTUALLY I'M STUPID

"Dude, are you dumb? Nokia's are the EASIEST TO BLUEJACK!!! Nokia's don't have an option to keep the bluetooth on, but not visible. Nokia's can be bluejacked the easiest!"

Nokia's do have an option to keep bluetooth on but set themselves as invisible

AND

"But how do you tell if a laptop has built-in bluetooth?"

I haven't laughed so much in ages.


--
Posted: 2004-03-12 14:39:38
Edit : Quote

dmb2000uk Posts: 43

You can only bluesnarf within 10m so if ure on the move its no problem. If ur on a train turn bluetooth off!

DMB
--
Posted: 2004-03-12 15:09:46
Edit : Quote

kimcheeboi Posts: > 500

@joshimar-no YOURE the idiot...

1. You're so immature you joined a forum because you saw something you didn't like and wanted to attack the person who posted it.
2. Nokias are the easiest to bluejack because you can't turn the bluetooth off. After you send a contact, the phone remains on the bluetooth "send to" menu and you can continue to send contacts.
3. Please, since you're the expert, tell us how you can tell if a laptop has bluetooth.
--
Posted: 2004-04-02 20:45:27
Edit : Quote
Page <  12345678910>

New Topic   Reply
Forum Index

Esato home