also @ TechSpot: 'Supercapacitor' could fully charge your phone in less than 30 seconds

Car audio Bluetooth hijack

By Derek Sooman

On August 2, 2005, 6:09 PM

The ability to inject or record audio signals from passing cars running insecure Bluetooth hands-free units was demonstrated by the Trifinite group during a Bluetooth Security talk at last week's What the Hack hacker festival in The Netherlands. Many car manufacturers use standard Bluetooth passkeys such as "0000" or "1234" which are easy to guess. Once a connection has been successfully made, it is possible to interact with other drivers or eavesdrop on conversations from inside other cars by accessing the microphone. This appears to be the tip of the iceberg, with even more mischief being possible.

"Since the attacker's laptop is fully trusted once it has a valid link key, the laptop could be used in order to access all the services offered on the hands-free unit. Often, phone books are stored in these units. I am quite certain that there will be more issues with the security of these systems due to the use of standard pass keys," Trifinite notes.

No tags on this story

User Comments: 2

Got something to say? Post a comment
  1. Ha Ha hahahaha. WTF were they thinking?? Bluetooth <> Security
  2. It would be fun to mess with some of these people. Tell them that you are the voice of god

Recently commented stories

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.