The Bluetooth Blues
Apr 1, 2007 12:00 PM
BLUESNARFING
Hackers gain access to mobile phone data without alerting the phone's user of the connection made to the device. With the victim nearby, hackers use specialized software to hack into his or her phonebook, images, calendar and the IMEI, or International Mobile Equipment Identity, the device identifier.
BLUEBUGGING
Hackers use the same software to initiate phone calls, send and receive text messages, read and write phonebook contacts, eavesdrop on phone conversations, and connect to the Internet.
BLUEJACKING
Hackers send wireless “business cards” anonymously. Though not involving the removal or alteration of any data from the device, the business cards often include a “clever” or “flirtatious” — or otherwise inappropriate — message rather than a typical name and phone number. Hackers look for the receiving phone to “ping,” or the user to react. Then they send another, more personal, message to the device.
WHAT TO DO
Bluetooth officials say hackers must be within 10 meters of a device in order to make a connection. To protect from these hackers, the company recommends setting the Bluetooth device to “non-discoverable” mode. Users can also visit their service provider and request a software patch to fix the vulnerability. Not every Bluetooth-enabled phone is susceptible to hacking. Cell phone manufacturers are now beginning to release phones and devices that already include the software patch to protect against these hacking methods. Nokia and Sony Ericsson are two examples.
For More Information. Visit Bluetooth.com/learn/security.
Want to use this article? Click here for options!
© 2012 Penton Media Inc.
Today's New Product
Privaris Biometric Verification SoftwareIn support of the Privaris family of personal identity verification tokens for secure physical and IT access, an updated version of its plusID Manager Version 2.0 software extends the capabilities and convenience to administer and enroll biometric tokens. The software offers multi-client support, import and export functionality, more extensive reporting features and a key server for a more convenient method of securing tokens to the issuing organization. |
advertisement
This month in Access Control
- Targeting The Customer
- Electronic Pedigrees
- One Hero Among Many
- Who? What? When? Where? Why?
- More from September's issue
Latest Jobs
advertisement





