Re: Bluetooth Security

[xyberpix <xyberpix () xyberpix com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I know that a lot of companies that sell wireless 802.11 sensors for  
IDS/IPS purposes are now including Bluetooth into these as well, so  
you may be able to buy a few sensors to set up around your building/ 
s, and set them up in IPS mode, and just block all Bluetooth traffic.


HTH

xyberpix

Blog: http://blogs.securiteam.com



On 25 Jan 2006, at 22:41, ROB DIXON wrote:

> Hello everyone,
>
> New guy here.
>
>
> My concern is Bluetooth security.
>
> My company is looking to purchase phones for everyone.
>
> Since most cell phone companies wont admit there is a problem, I am  
> not finding alot of info on counter measures for bluetooth hacking  
> in any form. Other than the obvious, have it turned off by default. ;)
>
> My question is:
>
>
> Are their "specific" bluetooth security features I should look for?
>
> I plan to ask for phones with the feature disabled by default.
>
> How far can I go with it?
>
>
>
> Thanks,
>
>
> New Guy
>
>
> Robert L. Dixon,  CSO
> CHFI A+
> Netware/GroupWise Administrator
> State of West Virginia's
> Office of Techonology
> Infrastructure Applications
> Telephone: (304)-558-5472 ex.4225
> Cellphone: (304)-549-2068
> Email:rdixon () workforcewv org
>
> ---------------------------------------------------------------------- 
> -----
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting  
> experience.
> Tailor your education to your own professional goals with degree
> customizations including Emergency Management, Business Continuity  
> Planning,
> Computer Emergency Response Teams, and Digital Investigations.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------- 
> -----

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFD3MWV2VKEoIQBZwkRAm/1AJ9uS9AyjE7l4OAq2WjB/D9HbTFB9QCePKcp
3I4Q4Z1EQphGfGe7qFQMfKE=
=kc0m
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------