At 12:07 PM 6/8/2005 -0700, Jim McMurry wrote:
This was posted on New Scientist on June 3
http://www.newscientist.com/article.ns?id=dn7461
and on my blog on June 5
http://www.jamesmcmurry.com/archives/000225.html
It is a very serious issue indeed. Anyone with a Palm OS device right
now today can use Bluespam and walk through any airport and see all of
the devices that have default keycode/pins on cell phones.
The actual paper:
http://www.eng.tau.ac.il/~yash/shaked-wool-mobisys05/index.html
Cracking the Bluetooth PIN
Yaniv Shaked and Avishai Wool
School of Electrical Engineering Systems
Supported in part by a grant from Intel Corporation.
Abstract:
This paper describes the implementation of an attack on the Bluetooth
security mechanism. Specifically, we describe a passive attack, in which an
attacker can find the PIN used during the pairing process. We then describe
the cracking speed we can achieve through three optimizations methods. Our
fastest optimization employs an algebraic representation of a central
cryptographic primitive (SAFER+) used in Bluetooth. Our results show that a
4-digit PIN can be cracked in less than 0.3 sec on an old Pentium III
450MHz computer, and in 0.06 sec on a Pentium IV 3Ghz HT computer.
[....]
--------------------------------------------------------------------
James S. Tyre mailto:[EMAIL PROTECTED]
Law Offices of James S. Tyre 310-839-4114/310-839-4602(fax)
10736 Jefferson Blvd., #512 Culver City, CA 90230-4969
Co-founder, The Censorware Project http://censorware.net
