RSSHere's a short video in which Joshua Wright demonstrates how a Bluetooth headset can be hijacked, allowing audio to be captured or sent to the device:
Few users realize that Bluetooth headsets can be exploited granting a remote attacker the ability to record and inject audio through the headset while the device is not in an active call. SANS Institute author and senior instructor Joshua Wright demonstrates.
All that is necessary is knowing the device address, which can be easily sniffed, and the secret pin, which defaults to 0000. The headset audio is tapped while not in a call, so any room conversation the headset's mic can pick up can potentially be listened to remotely.
thanks for the video, it is very good information.
Reply to this comment
LAME!
Reply to this comment
holy crap, that dude is a freaking sissy
Reply to this comment
holy crap, that sissy just listened to you having phone sex with your gay boyfriend
Reply to this comment
Nicely done, well presented.
Reply to this comment
, Yeah I have a wireless blootooth headset, and its great. i think they started selling like 30% more the last year., I also posted it on my blog with extra coments,www.opentopix.com/topic/gadgets/bluetooth-wireless-headsets-boom
Reply to this comment
All 3 of my bluetooth headsets will only pair when it is put in a special "pair mode" (typically by holding the power button for 10 seconds or more).
I'd be interested if this attack will work on devices with this "feature".
Reply to this comment
umm, I call BS for a few reasons.
1) The pin is used to associate two devices (the handshake) not for ongoing communication.
2) Once the headset has been associated to the device, it cannot be re-associated to another device while the first device is still active. So I would have to turn my phone off.
3) Even though you may be able to send a signal with that super nifty antenna, you most likely will not be able to receive the signal back unless they have a similar antenna.
You're more at risk with the FBI being able to remotely activate your mic.
Reply to this comment
Brown University Baby!
Reply to this comment
wow, brown university...
Reply to this comment
did he get her number
Reply to this comment
ghey is the correct terminology, kidmidnight.
Reply to this comment
Didnt even watch the video because it sounds so retarded.
Reply to this comment
very good blog :)
Reply to this comment
lame
Reply to this comment
This guy is more annoying and effeminate than me !
Reply to this comment
Recently,we have tailored the unique wow gold
Reply to this comment
ignore the other comments. good presentation. good info. those who think that this is lame are skr1pt k1dd1ez who just want it point-n-click so they can use it...
Reply to this comment