| Author |
bluejacking and now bluesnarfing |
701
Joined: Nov 26, 2002
Posts: > 500
From: Romania
PM, WWW
|
I really think u r over-reacting to this.Like MLK said, if they want my contacts they can ask for it, i have nuthin' against donating them.In my country the more ppl call, the more free minutes u get from ur operator, so i'd give 'em my number 1st:D
It's a "fixable" error and it's likely that others errors will appear with time  Just cool it..
" They say i'm sick; they`re right, it's called 'Terminal Boredom!' " Follow me on twitter.com/bogramaRead my Symbian UIQ 3.0 reviews at Juvo's |
|
|
ts_666
Joined: Feb 21, 2002
Posts: 301
From: SWEDEN (actually UK now)
PM |
they say its possible to access your gprs connection thru bluetooth, even if its not paired.... if u got the right tools, which have yet to see the light of day.... don't get worked up, a phone is a phone, if somebody somehow manages to crash it via bluetooth just go and get it fixed, its not like you have your lifes' work saved on it like you might have on your pc... i'm off to bed, its been a long day  |
bionrg
Joined: Dec 16, 2003
Posts: 118
From: NL
PM |
just like viniezza posted, do read http://bluestumbler.org/
the most disturbing fact is that many people dont even know what bluetooth-pairing means, or what eventuall hazards can rise from having paired your phone to another one.... in a 'security way' of speaking.
btw. yes Nokia is the easiest to jack, heheheheh 
trust me
[ This Message was edited by: bionrg on 2004-02-11 00:06 ] |
rdnymllnsktr
Joined: Feb 04, 2004
Posts: > 500
From: California, but now in Plano,
PM, WWW
|
Read this story. Poor Nokia users. Oh well.
MyPhoneExplorer is the new FMA!  http://www.fjsoft.at/en/downloads.php |
themarques
Joined: Jan 26, 2003
Posts: > 500
From: London, Tokyo,
PM |
Ok guys I tried this out today on my way home....I was on train back from work and wipped out my PowerBook to see if anyone had BT enabled.....and well you guessed 3 phones found. So I I proceeded to the BT menu in the powerbook, those that are familiar will realises it will only give you 2 options SEND FILE OR BROWSE DEVICE. I proceeded to browse device and the phone in mention was an SE T610. It connected without asking me to pair the phones and I proceeded to see the Sub Directories..... my memory is a bit vague now but it was MY PICTURES, MY SOUNDS AND something else...nothing really important. I then selected a picture this person had in the phone and DELETED IT. KNOW BEFORE YOU ALL THINK I AM EVIL...I THEN SENT THE PIC BACK TO HIS OR HER PHONE, and this time it ask for confirmation for the pic to be sent.!!!!!!
So conclusion I guess yes there is some harm that can be done (if you cherish your pic's and sounds) and not much I could see that could be done to damage the phone or use the GPRS.
So I say dont worry to much but dont turn to much of a blind eye on this... |
392MHz
Joined: Aug 01, 2002
Posts: 126
From: Hungary
PM |
this last post is a complete bullshit...
you can't even discover a T610 without the owners contribution to set it discoverable...
discoverability lasts for 3 minutes and of course you also need spec. sw.
read this again more carefully  ))
http://bluestumbler.org/
[ This Message was edited by: 392MHz on 2004-02-11 22:36 ]
[ This Message was edited by: 392MHz on 2004-02-11 22:52 ] |
50Cent
Joined: Nov 08, 2003
Posts: > 500
From: ...whatever psycho!!!
PM |
JUST TURN UR BLUETOOTH OFF!!!
Trusted Trader: 50Cent (+6, -0)
|
havok011101
Joined: Feb 12, 2004
Posts: 2
From: Townsville, Queensland, Austra
PM |
It was kind of inevitable. I'm sure if i can browse from my computer, someones gonna work out how to do it from a phone nearby!
This message was posted from a T610 |
wrecked_porsche
Joined: Jul 01, 2002
Posts: > 500
From: I'm not telling u !
PM, WWW
|
OMG !! Panic attack !! 
I have a bluetooth Laptop, bluetooth Palm Tungsten T3 PDA and a bluetooth phone !! I'm most worried about my T3 !!  The Phone and laptop i dont care too much for reasons already stated in this thread but my T3 ... 
Never argue with an idiot. They will drag you down to their level and beat you with experience.  I  Nokia N95 8GB and N82 |
energetic
Joined: Jan 13, 2003
Posts: > 500
From: Athens, Greece, Europe, Earth,
PM, WWW
|
The following came through my e-mail.
From: PANDA SPAIN >
Subject: Oxygen3 24h-365d [Vulnerabilities in Nokia phones - 02/12/04]
TO :
"It takes two to speak the truth-one to speak and another to hear."
Henry David Thoreau (1817-62); US philosopher.
- Vulnerabilities in Nokia phones -
Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com)
Madrid, February 12 2004 - According to Security Corporation -at
http://www.security-corporation.com/articles-20040209-005.html -
vulnerabilities have been detected which could affect the functionality of
Nokia 6310i phones.
The security problems affecting this particular model stem from Bluetooth
and infra red connectivity. Both of these methods support the Object
Exchange (OBEX) protocol to transfer data to and from the telephone. By
using invalid OBEX messages, it is possible to provoke denial of services
which would cause the telephone to reset. Anyone in range of the phone could
launch the attack.
Nokia has confirmed that the vulnerability affect its 6310i phones. It is
also possible however that other similar Nokia devices could be affected by
malformed OBEX packets.
NOTE: The address above may not show up on your screen as a single line.
This would prevent you from using the link to access the web page. If this
happens, just use the 'cut' and 'paste' options to join the pieces of the
URL.
------------------------------------------------------------
The 5 viruses most frequently detected by Panda ActiveScan, Panda Software's
free online scanner: 1) Mydoom.A; 2)Downloader.L; 3)Bugbear.B; 4)Parite.B;
5)Klez.I.
------------------------------------------------------------
To unsubscribe from Oxygen3 24h-365d, please visit:
http://www.pandasoftware.com/unsubscribe.asp
To contact with Panda Software, please visit:
http://www.pandasoftware.com/about/contact/
------------------------------------------------------------
|
Ronnie Biggs
Joined: Sep 08, 2003
Posts: 29
From: ... over yon hills and far awa
PM |
Sony Ericsson advises users to turn off Bluetooth
Sony Ericsson has joined Nokia in admitting that its Bluetooth
phones could be vulnerable to a 'snarfing' attack, meaning
that a hacker can access data even if the phone is not paired
with another Bluetooth device
http://newsletters.zdnetuk.cneteu.net/t/2580/882734/1042/0/
|
Jowi
Joined: Feb 21, 2002
Posts: > 500
From: Pilipinas
PM, WWW
|
q?
on our  phones, even if the  is on but its not on discoverable, others may not detect it? |
djpowelly
Joined: Jun 07, 2003
Posts: > 500
From: The UK!
PM |
Just a small idea....
If i have my on, I hold my phone in my hand, to BJack! When a connection is made, the little blue light on my T68i goes mad, meaning something is happening. And also, there is a little data transfer icon on the screen. So it could be detectable, just not that well....
Just my 2 pence!
_________________
One of the only Black T68i's and waiting on a P800!!
[ This Message was edited by: djpowelly on 2004-02-13 11:55 ]
[ This Message was edited by: djpowelly on 2004-02-13 11:55 ] |
gelfen
Joined: Nov 22, 2003
Posts: > 500
From: Melbourne, Australia
PM |
taken from ZDNet Australia
Bluesnarfing tools 'spreading quickly'
By Munir Kotadia, ZDNet UK
17 February 2004 Add your opinion
An MP has called for mobile phone manufacturers to make a greater effort and fix the Bluetooth security problems in their handsets after a researcher revealed that software tools enabling a bluesnarf attack are widely available on the Internet.
Bluesnarfing is a method of hacking into a Bluetooth-enabled mobile phone and copying its entire contact book, calendar or anything else stored in the phone's memory. Nokia and Sony Ericsson have admitted some of their handsets are vulnerable and although Sony Ericsson has made an effort to fix the problem, Nokia said the problem is not serious enough to warrant repairing.
Mark Rowe, consultant at security company Pentest, told ZDNet UK that the number of people that know how to perform the attack is quickly increasing and tools that enable the attack are widely available online. "We have been contacted by a number of security researchers that have worked out how to do it themselves without any help from us," Rowe said. "We were concerned when the information was previously published and we were told you need special tools. But in reality, anybody who looked into it in any depth would quickly work out how the attack is possible."
Rowe urged the media not to publicise which tools are used in attacks because this "would make it really easy for somebody to work out what to do". A Web search revealed hundreds of sites distributing the tools.
According to Rowe, the problem lies in how manufacturers implemented the object exchange (OBEX) protocol, which is a common method used by mobile devices to exchange information. "It was a deliberate design decision not to include authentication -- that allows people to [easily] send business cards to each other," he said. But the companies had overlooked that this implementation would also mean files could be transferred back and forth without permission, he said.
Tom Watson, Labour MP for West Bromwich East and a Bluetooth-phone user, told ZDNet UK he is concerned about the privacy of consumers and hopes that mobile phone manufacturers will do more to help fix the problem. "Once again consumers have to bear the brunt of technological failure," he said. "This offers profound threats to people's privacy. The least the sector can do is put matters right," he said.
Rowe advises anyone with a Bluetooth handset to keep it in hidden mode or even better, switch Bluetooth off: "If devices are hidden they are very difficult to find. There are techniques to find hidden devices, but it is a brute-force method that would take a lot of time. If they are not in hidden mode, you can find their address by simply asking," he said.
|
gyrro
Joined: Feb 24, 2004
Posts: 1
PM, WWW
|
Nokia gave an official statement regarding Bluesnarfing problem. They believe it's not important .
http://www.mb.com.ph/TECH200402243153.html |
|
|
Posted: 2004-02-10 22:32
Nokia N95 8GB and N82
