|
Bluetooth wireless products, like any computer software, can be vulnerable to attacks, but under most conditions are safe and secure. Both Bluetooth and WiFi move data via radio frequencies. Bluetooth, however, does not rely on the exchange of IP addresses as in the case of WiFi, and avoids interaction with several network protocols. WiFi's steady data stream makes it more vulnerable to third-party interception in contrast to Bluetooth's periodic pinging between two peripherals. Bluetooth users who keep their devices current with the most recent firmware, patches, and fixes and who know how to deactivate Bluetooth radio are less likely to have security problems. In tests undertaken whereby testers aimed to think like a hacker, testers found that hacking was more difficult when dealing with the most up-to-date products. Testers launched their attacks using a Hewlett Packard iPaq and an MPC TransPort X3100 notebook against an older model Nokia 3650 cell phone and a current Sony Ericsson P910a smart phone. They also used Bluetooth hacking tools RedFang and BlueSniffer. It was fairly simple to launch a denial-of-service (DOS) attack on the Nokia 3650, but this type of security breach does not lead to the stealing of data. When trying to access contents, called a bluesnarf, or gain control of the Nokia, called a bluebug, they were unable to gain access. However, in attempting to bluejack, which means sending unwanted data to a particular device, it was easy to accomplish this against the 3650 device and run down its battery. However, it was much more difficult to attack the Sony Ericsson P910a, the more current device, and only the bluejacking attack was successful. In a bluejacking case the hacker must be within ten meters of a target, so the easiest remedy is for a user to walk away. In the end, Bluetooth is not perfect, but common sense and up-to-date devices will keep users from being targeted by hackers.
|