Full Disclosure mailing list archives

Re: Serious flaws in bluetooth security lead to disclosure of personal data


From: Andreas Steinmetz <ast () domdv de>
Date: Fri, 14 Nov 2003 00:31:51 +0100

Pentest Security Advisories wrote:

Fixes.
======

1) Only enable Bluetooth when absolutely necessary.

2) Place the device in non-discoverable mode. While this does not correct
   the fault, it is harder to find the target device. There can be problems
   with this, some Nokia devices fail will to connect properly when hidden.


Hint: After powering on or enabling bluetooth on the 6310i put the phone in discoverable mode, connect the required devices and after that put the phone in non-discoverable mode. At least the HDW-2 heatset will then be able to connect while the 6310i is in non-discoverable mode.

--
Andreas Steinmetz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: