|
|
|
Lousy code opens up Bluetooth hands-free kits, smartphones to hackers |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Lousy code opens up Bluetooth hands-free kits, smartphones to hackers Par SecurityLe [2011-09-23] à 22:43:08
Présentation : That Bluetooth car kit you got at the big box store on sale may be opening your phone up to hacking. Research by Codenomicon, a Finnish data security company, found that each of a sample of ten new Bluetooth hands-free kits tested this year have critical issues with their security implementations. The kits were susceptible to fuzzing attacks by transmissions of malformed data that can crash devices or expose holes in the security of their implentation of the Logical Link Control and Adaption Protocol L2CAP . The problem isn't limited to car kits. Codenomicon's Tommi Mäkilä says that about 80 percent of devices tested in Codenomicon's plugfests have crashed during testing. In crashing, the devices often reveal gaps in their security that, in the case of handsets and computers, can be used to access data or inject malware into the system. And because there's a relatively small number of Bluetooth codestacks on the market, any exploit that might be discovered could be applied to a wide range of devices. Security gaps in Bluetooth aren't a new concern tools like Blooover have demonstrated an exploit called Bluebug, which allowed remote access to text messages, call records and address books on some handsets, and even allowed eavesdropping and placing of phone calls. Changes to phone firmware from handset makers have largely corrected that security hole. But they haven t gone away in July, Microsoft issued a patch to fix a Bluetooth vulnerability in Windows 7 and Windows Vista that allows an attacker to transmit packets to remotely execute code allowing them to install programs view, change, or delete data or create new accounts with full user rights. But the findings of the Codenomicon researchers indicate that security for Bluetooth devices still has a long way to go, and is perhaps even worse than anyone expects. The researchers were particularly concerned about the unreliability of L2CAP implementations, since communication over L2CAP doesn't require Bluetooth devices to pair meaning that attacks can be undertaken without the user being aware. Read the comments on this post
Les mots clés de la revue de presse pour cet article : bluetooth
Les videos sur SecuObs pour les mots clés : bluetooth
Les mots clés pour les articles publiés sur SecuObs : bluetooth
Les éléments de la revue Twitter pour les mots clé : bluetooth
Les derniers articles du site "Security" :
- Using ASAN as a protection
- Execute without read
- Together, we can make a difference
- Internet Bug Bounty issues its first 10,000 reward
- vtable protections fast and thorough
- Exploiting 64-bit Linux like a boss
- Exile for the BBC Micro some elegant solutions
- Using ASAN as a protection
- Execute without read
- Together, we can make a difference
- Internet Bug Bounty issues its first 10,000 reward
- vtable protections fast and thorough
- Exploiting 64-bit Linux like a boss
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.190.17.190 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.190.17.190 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
