Ever been bluejacked?
Author
Discussion

philthy

Original Poster:

4,697 posts

263 months

Tuesday 1st February 2005
quotequote all
A while back I was reading about bluejacking. The article was written by some pimply faced yoof, who had great fun messaging people. I decided to see if there was anything in it myself. Armed with my new nokia 6600, I did a quick search (was in Plovdiv airport Bulgaria at the time), and was surprised to see at least twenty other phones in range. Having tried unsuccessfully to send anyone anything, I was suddenly asked "do you want to accept an incoming message from badman". I clicked yes. The message I recieved, was a video called (XXX)Hamburger. Anyone else ever seen it? I was cracked up laughing. I didn't manage to find out who'd sent it either.
Anyone else ever tried bluejacking ? I'll be trying again, as soon as I get chance.

Phil

Podie

46,647 posts

298 months

Tuesday 1st February 2005
quotequote all
Very easy to do with the right equipment.

In a risk study we used a laptop, and using a command line we were able to get people's calendars and address books, complete with numbers.

BliarOut

72,863 posts

262 months

Tuesday 1st February 2005
quotequote all
Whoops, my phone has been in tart mode for a few days Glad you reminded me!

philthy

Original Poster:

4,697 posts

263 months

Tuesday 1st February 2005
quotequote all
BliarOut said:
Whoops, my phone has been in tart mode for a few days Glad you reminded me!


"tart mode"

Not heard that before

Phil

nicecupoftea

25,537 posts

274 months

Tuesday 1st February 2005
quotequote all
There's a program for the P900 with all sorts of useful utilities, and it also does bluejacking. It's pretty basic though, just broadcasts a message. I've done it a couple of times on the train for a laugh, but got bored.

I leave my bt on as I have a bt headset, but I switch "discoverable" off - does this mean that I can't be bluejacked?

Podie, is that true about info being pulled off like that? Is there that little security built into BT? How do the cretins who designed the protocol get away with that!?

I have also heard that there is a bluetooth virus doing the rounds.

Edited : Ah yes :

http://securityresponse.symantec.com/avcenter/venc/data/epoc.cabir.html

>> Edited by nicecupoftea on Tuesday 1st February 15:20

Tyre Smoke

23,018 posts

284 months

Tuesday 1st February 2005
quotequote all
'Scuse my ignorance, but what is this 'bluejacking?' obviously something to do with bluetooth, but what?

Plotloss

67,280 posts

293 months

Tuesday 1st February 2005
quotequote all
Tyre Smoke said:
'Scuse my ignorance, but what is this 'bluejacking?' obviously something to do with bluetooth, but what?


Unsolicited bluetooth messaging.

Think of it as bluespam...

Podie

46,647 posts

298 months

Tuesday 1st February 2005
quotequote all
Tyre Smoke said:
'Scuse my ignorance, but what is this 'bluejacking?' obviously something to do with bluetooth, but what?


Bluejacking is basically hijacking via bluetooth...


nicecupoftea said:

I leave my bt on as I have a bt headset, but I switch "discoverable" off - does this mean that I can't be bluejacked?


Basically, yes.



nicecupoftea said:

Podie, is that true about info being pulled off like that? Is there that little security built into BT? How do the cretins who designed the protocol get away with that!?

Yep. Not exactly difficult if you know how. BT is a wireless protocol, and the issue was that initially BT was set to ON at all times, and would accept anything coming it's way. However, now you are pretty much protected by partnerships whereby you put in a code on both devices to ensure you consent to information transfer.

nicecupoftea said:

I have also heard that there is a bluetooth virus doing the rounds.

Yep, but you have to accept it. Usualy web / e-mail rules apply… if you don't know what it is, don't accept it.

Mr E

22,718 posts

282 months

Tuesday 1st February 2005
quotequote all
BliarOut said:
Whoops, my phone has been in tart mode for a few days Glad you reminded me!


PMSL. I'll call it that in future

AiD1

110 posts

258 months

Tuesday 1st February 2005
quotequote all
If you sit in on one of the lectures at my uni you will find after about 5 minutes in everyone has started sending various vids or clips around.

And i have seen the (xxx)hamburger video! I downloaded it from www.skinnyfatman.com. You have to register and can only download three vid's a day though. The hamburger video is under xxx video along with a few other amusing ones!

philthy

Original Poster:

4,697 posts

263 months

Tuesday 1st February 2005
quotequote all
Thanks for the link AiD1, I'm off to get some ammo.

Phil

pug406

3,636 posts

276 months

Tuesday 1st February 2005
quotequote all
On the same subject but a bit of an aside, went to Werrington in Peterborough today and had my Ipaq WiFi switched on. The amount of unsecure WiFi connections I found was unreal. Decided to stop and browsed PH from my car. Why o why do people not turn the security on?

philthy

Original Poster:

4,697 posts

263 months

Tuesday 1st February 2005
quotequote all
pug406 said:
On the same subject but a bit of an aside, went to Werrington in Peterborough today and had my Ipaq WiFi switched on. The amount of unsecure WiFi connections I found was unreal. Decided to stop and browsed PH from my car. Why o why do people not turn the security on?


Try using a laptop, and netstumbler get it here
As you say, amazing how insecure some people leave their connections.

Phil

BliarOut

72,863 posts

262 months

Tuesday 1st February 2005
quotequote all
pug406 said:
On the same subject but a bit of an aside, went to Werrington in Peterborough today and had my Ipaq WiFi switched on. The amount of unsecure WiFi connections I found was unreal. Decided to stop and browsed PH from my car. Why o why do people not turn the security on?


Oi, get orf my bandwidth

MilnerR

8,273 posts

281 months

Tuesday 1st February 2005
quotequote all
pug406 said:
On the same subject but a bit of an aside, went to Werrington in Peterborough today and had my Ipaq WiFi switched on. The amount of unsecure WiFi connections I found was unreal. Decided to stop and browsed PH from my car. Why o why do people not turn the security on?



If you have an ipaq you can use ministumbler that searches out wireless nodes. The reason that they are so easy to find is that almost all wireless kit is installed and left to its default settings.

AiD1

110 posts

258 months

Tuesday 1st February 2005
quotequote all
Philthy said:
Thanks for the link AiD1, I'm off to get some ammo.


No problem. Although, does anyone know of any other free sites where i can download more .3gp or mpeg4 files from?

b17nns

18,506 posts

270 months

Tuesday 1st February 2005
quotequote all
From skinnyfatman


BlueJacking Resources

Bluetooth

Originally Bluetooth was created as a short range wireless protocol that could be used by many everyday electronic objects as a way of communicating. Bluetooth chips can now be found in a wide variety of devices such as mobile phones, pds's and laptops. Phone numbers, business cards and messages can now be passed easily from one enabled device to another.

Bluetooth originated from Sweden from where the idea was conceived by technicians at Ericsson. It was decided that a new protocol for short range communication was needed, one that didn't suffer from the limitations of other protocols such as Infra Red. To reduce interference that is often experienced by (IR), the power level was reduced to 1 milliwatt. Bluetooth also uses Spread spectrum signals which have a high resistance to noise as well as jamming. This allows for a sharing of a frequency band with many other transmissions with minimum interference.

Bluetooth is normally effective within a range of around 10 metres. For devices to communicate with each other within this small area, they join a piconet or a personal area network. These devices then announce their presence. Once this has been achieved, it is now possible to transfer data to these devices. As mentioned earlier, business cards, phone numbers, audio files and low resolution video can be transferred.

Blue Jacking

So, now we know that information can be transferred to devices within a small area. What can be done? Well, blue jacking is when you create a message as a name within your phone book. The phone book entry could contain a message such as 'Hello, I like your Shoes'. next you then search for any other Bluetooth devices. If you find a device, then you can send your phone book contact containing your message to this device anonymously. Follow the steps below for your basic blue jacking guide:-

Acquire yourself a Bluetooth enabled device (preferably a mobile phone)
Create a new phonebook contact containing your message 'I like your Shoes'
Find a busy location (on a Bus, Train, Cafe Bar) The busier, the more likely you are to find a Bluetooth enabled device.
Select your new contact name and send via Bluetooth.
Your device (mobile) will now search for any other enabled Bluetooth devices within a 10 metre range. Your phone will then list all devices found. ( Sometimes the devices can contain information relating to the model.)
Now select one of the listed devices for your contact info to be sent to.
The fun part now begins, you must casually look around and try and spot the owner of the device !


Blue Jacking Ideas.....

Send people contacts like Phil McCrackin, Ben Dover and Billy Willy Asshat.

A great site is www.bluejackers.co.uk/

philthy

Original Poster:

4,697 posts

263 months

Tuesday 1st February 2005
quotequote all
AiD1, I was going to register, then saw you need to put in your mobile phone number. My last number got swamped with junk texts from this sort of thing. Have you had any trouble since you registered?

Phil

Plotloss

67,280 posts

293 months

Tuesday 1st February 2005
quotequote all
philthy said:

pug406 said:
On the same subject but a bit of an aside, went to Werrington in Peterborough today and had my Ipaq WiFi switched on. The amount of unsecure WiFi connections I found was unreal. Decided to stop and browsed PH from my car. Why o why do people not turn the security on?



Try using a laptop, and netstumbler get it here
As you say, amazing how insecure some people leave their connections.

Phil


What does this give you that the standard software supplied with your WiFi doesnt?

I've had a read and am a bit confused...

puggit

49,445 posts

271 months

Tuesday 1st February 2005
quotequote all
philthy said:
AiD1, I was going to register, then saw you need to put in your mobile phone number. My last number got swamped with junk texts from this sort of thing. Have you had any trouble since you registered?

Phil
I just registered without using my phone number