Bluetooth Security - CCC Event Weblog

More documents

Recommendations

Info

Security modes ● Security mode 1 ● No active security enforcement ● Security mode 2 ● Service level security ● On device level no difference to mode 1 ● Security mode 3 ● Device level security ● Enforce security for every low-level connection ... because infinite is sometimes not enough!
How pairing works ● First connection (1) > HCI_Pin_Code_Request (2) < HCI_Pin_Code_Request_Reply (3) > HCI_Link_Key_Notification ● Further connections (1) > HCI_Link_Key_Request (2) < HCI_Link_Key_Request_Reply (3) > HCI_Link_Key_Notification (optional) ... because infinite is sometimes not enough!
Page 1 and 2: Bluetooth Hacking The State of the
Page 3 and 4: Who is investigating ● Adam Lauri
Page 5 and 6: What is Bluetooth ● Bluetooth SIG
Page 7: Bluetooth Stack ... because infinit
Page 11 and 12: Breaking all of them ● Confidenti
Page 13 and 14: Compromised Content ● Paris Hilto
Page 15 and 16: How to avoid pairing vCard Contacts
Page 17 and 18: HeloMoto ● Requires entry in “M
Page 19 and 20: BlueSmack ● Using L2CAP echo feat
Page 21 and 22: BlueBump ● Forced re-keying ● A
Page 23 and 24: BlueSpooof ● Clone a trusted devi
Page 25 and 26: BlueChop ● Brandnew attack (new f
Page 27 and 28: Bluetooone ● Enhancing the range
Page 29 and 30: Blooover ● Blooover - Bluetooth W
Page 31 and 32: Blooover II - Auditing ... because
Page 33 and 34: Blooover II - Breeeder ● Special
Page 35 and 36: The Car Whisperer ● Stationary di
Page 37 and 38: Nokia 770 ● Tablet PC ● Support
Page 39 and 40: Nokia 770 ... because infinite is s
Page 41 and 42: Nokia 770 ... because infinite is s
Page 43 and 44: Blooonix ● Linux distribution for
Page 45 and 46: Conclusions ● Bluetooth is secure
Page 47 and 48: Further information ● trifinite.o
Page 49: Any questions? ... because infinite

Bluetooth Security - CCC Event Weblog

Create successful ePaper yourself

Delete template?

Save as template?