Bluetooth Security
By Daniel Miessler on June 5th, 2005: Tagged as General
I’ve always had a very uneasy feeling about Bluetooth security, and it seems my instincts have been validated. According to this article, a new technique exists that allows an attacker to force “secured” Bluetooth devices to re-pair with each other. During the pairing process the security can be compromised by allowing the attacker to pair with the victim’s system.
This is why I’ve always kept my Bluetooth disabled on my desktop system. I’ve had a bad feeling about this technology for some reason. I suppose a lot of the reason was a healthy distrust of security in new technology, but part of it felt more primal than that. I just knew there were major problems with this particular functionality; the notion of having my system sitting there with an unproven air daemon on my box was highly unsettling.
Oh, well, hopefully they’ll get the bugs worked out and Bluetooth will end up being halfway secure. It’s got a lot to offer, so I look forward to seeing it become more prolific.
