http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2016-04-20 01:20:08 - Hackaday : James works from home His office is filled with objects that can be described with adjectives such as, expensive, and, breakable His home, however, is filled with professional object-breakers known as children To keep these two worlds from colliding, he installed a keypad lock on his office door The potential side-effect of accidentally training his children to be master safe-crackers aside, the system seems to work so far However, being a hacker, the tedium of entering a passcode soon grew too heavy for him Refusing to be a techno-peasant, he set out to improve his lock The first step was read more http://www.secuobs.com/revue/news/604169.shtmlhttp://www.secuobs.com/revue/news/604169.shtml 2016-04-19 22:20:42 - Hackaday : We ve seen a few remote controlled turret builds in the past, but this one from Noel Geren is pretty neat it shoots water and uses Bluetooth Low Energy BLE for control Check it out in action in the video below Noel used the guts of a Nerf Thunderstrike water gun for the firing mechanism, combined with a 3D-printed enclosure and a servo that rotates the turret top The pump from the gun is connected to a simple relay that replaces the trigger Both the relay and the servo are connected to an RFDuino with a servo shield, which is programmed read more http://www.secuobs.com/revue/news/604166.shtmlhttp://www.secuobs.com/revue/news/604166.shtml 2016-04-14 17:41:18 - Hackaday : Evil geniuses usually have the help of some anonymous henchmen or other accomplices, but for the rest of us these resources are usually out of reach Evan , on the other hand, is on his way to a helpful army of minions that will do his bidding he recently built a USB-powered minion that turns a regular PS 2 mouse and keyboard into a Bluetooth mouse and keyboard Evan found his minion at a McDonald s and took out essentially everything inside of it, using the minion as a case for all of the interesting bits First he scavenged a PS 2 port from read more http://www.secuobs.com/revue/news/603797.shtmlhttp://www.secuobs.com/revue/news/603797.shtml 2016-04-06 19:25:46 - Hackaday : Last time I talked about the internals of how Bluetooth Low Energy BLE handles data I mentioned that the way it is set up is meant to conserve power and also to support common BLE devices like heart rate monitors On the other hand, I also mentioned that you often didn t need to deal with that because you d use an abstraction layer This time, I want to show you how I used the Hackaday special edition Tiny BLE from Seeed Studios and its mbed library to do a quick simple BLE project If you didn t read the first part, don t read more http://www.secuobs.com/revue/news/603023.shtmlhttp://www.secuobs.com/revue/news/603023.shtml 2016-03-30 19:07:16 - Hackaday : It is a good bet that you have at least one Bluetooth device hanging around Headsets, mice, keyboards, and speakers have become increasingly common Bluetooth forms a short range wireless network and can also perform file transfers and create virtual serial ports If you have ever had to stop listening to music to recharge a Bluetooth headphone, you know Bluetooth won t run long on batteries In 2006, Nokia introduced Wibree, which would later become Bluetooth Low Energy or BLE These days it s used in everything and it s well worth your time to gather a basic understanding of this technology Modern read more http://www.secuobs.com/revue/news/602456.shtmlhttp://www.secuobs.com/revue/news/602456.shtml 2016-03-28 22:02:43 - Hackaday : Besides being common tools available to most hackers and makers out there, 3D printing, CNC machines, and cheap Chinese electronics have one more things in common they were all used by Nick to build a bluetooth speaker system that has some interesting LED effects built into the case This is fresh on the heels of another hack that used similar construction methods to build a magic wood lamp Nick takes it a step further, though His case is precisely machined in white oak and stuffed with the latest China has to offer a bank of lithium-ion batteries, a DC-DC converter read more http://www.secuobs.com/revue/news/602211.shtmlhttp://www.secuobs.com/revue/news/602211.shtml 2016-02-16 13:23:45 - Hackaday : When a hacker finds himself with a metal disc and magnet surgically implanted in his skull, chances are pretty good that something interesting will come from it Eric Cherry s implant, designed to anchor a bone-conduction hear aid, turned out to be a great place to mount a low-cost Bluetooth speaker for his phone at least when he s not storing paperclips behind his ear With single-sided deafness, Eric s implant allows him to attach his bone-anchored hearing aid BAHA , which actually uses the skull itself as a resonator to bypass the outer ear canal and the bones of the middle ear read more http://www.secuobs.com/revue/news/598412.shtmlhttp://www.secuobs.com/revue/news/598412.shtml 2016-02-06 13:00:34 - Hackaday : Implementing a Bluetooth Low Energy BLE device from scratch can be a daunting task If you re looking for an incredibly detailed walkthrough of developing a BLE project from essentially the ground up, you ve now got a lot of reading to do Jocelyn Masserot takes you through all the steps using the ARM-Cortex-M0-plus-BLE nRF51822 chip The blog does what blogs do stacks up in reverse-chronological order So it s best that you roll on down to the first post at the bottom and start there Jocelyn walks you through everything from setting up the ARM compiler toolchain through building up a linker read more http://www.secuobs.com/revue/news/597554.shtmlhttp://www.secuobs.com/revue/news/597554.shtml 2015-12-02 16:39:45 - Hackaday : Bluetooth is one of the mainstays of the mobile gadget world, allowing mobile devices to communicate easily over short distances It s how your wireless headset talks to your cell phone without the complexity and power requirements of WIFi In particular, the Bluetooth Low Energy BLE component is interesting for those who build portable gadgets, because it requires a very small amount of power What Is Bluetooth LE Bluetooth LE, also known as Bluetooth Smart, is part of the fourth version of the Bluetooth standard Finalized in 2010, Bluetooth 40 has been updated several times since, and the current version is read more http://www.secuobs.com/revue/news/591866.shtmlhttp://www.secuobs.com/revue/news/591866.shtml 2015-11-12 19:26:54 - Reverse Engineering : submitted by yadsloof link 1 comment http://www.secuobs.com/revue/news/589923.shtmlhttp://www.secuobs.com/revue/news/589923.shtml 2015-10-28 00:29:06 - New RFCs : 52KB DOI http://www.secuobs.com/revue/news/588189.shtmlhttp://www.secuobs.com/revue/news/588189.shtml 2015-10-22 07:10:54 - Hackaday : The summer may have come to a close here in the USA, but any time of the year is a good time for grilling In the colder weather, it s a drag to have to stay near the hot grill to keep an eye on your burgers and franks Eric Ely thought it would be smarter to have a meat thermometer that sent his phone the current reading via Bluetooth Instead of starting from scratch, Eric took an off the shelf electronic thermometer and removed its temperature probe which was a thermistor The hardware used an off the shelf Bluetooth board read more http://www.secuobs.com/revue/news/587591.shtmlhttp://www.secuobs.com/revue/news/587591.shtml 2015-10-16 02:15:23 - Hacker Public Radio : Klaatu talks about the HC-05 and -06 series of bluetooth modules and how to use them with an Arduino, including some basic code on the Arduino to get it to respond to signals over bluetooth, and some basic PyQt code on how to send signals to the bluetooth device PLUS, he talks about configuring the bluetooth so that it is connected to the serial port of your system so that Python can use it A super basic bluetooth controller app can be found here https gitlabcom makerbox rovcon it's Klaatu's code, and it's not quite finished, so if you have improvements or questions, feel free to comment or merge or email http://www.secuobs.com/revue/news/586918.shtmlhttp://www.secuobs.com/revue/news/586918.shtml 2015-09-30 22:12:10 - Hackaday : The future of tiny electronics is wearables, it seems, with companies coming out with tiny devices that are able to check your pulse, blood pressure, and temperature while relaying this data back to your phone over a Bluetooth connection Intel has the Curie module, a small System on Chip SoC meant for wearables, and the STM32 inside the Fitbit is one of the smallest ARM microcontrollers you ll ever find Now there s a new part available that s smaller than anything else and has an integrated Bluetooth radio just what you need when you need an Internet of Motes of Dust The read more http://www.secuobs.com/revue/news/585263.shtmlhttp://www.secuobs.com/revue/news/585263.shtml 2015-09-18 21:49:35 - Security Bloggers Network : IMAGE Each week, the PhishLabs team posts The Week in Cybercrime TWIC to recap noteworthy cybercrime articles and reports open source http://www.secuobs.com/revue/news/584003.shtmlhttp://www.secuobs.com/revue/news/584003.shtml 2015-09-18 19:33:43 - Slashdot Your Rights Online : tsu doh nimh writes Brian Krebs has an interesting and entertaining three-part series this week on how he spent his summer vacation driving around the Cancun area looking for ATMs beaconing out Bluetooth signals indicating the machines are compromised by crooks Turns out, he didn't have to look for His own hotel had a hacked machine Krebs said he first learned about the scheme when an ATM industry insider reached out to say that some Eastern European guys had approached all of his ATM technicians offering bribes if the technicians allowed physical access to the machines Once inside, the crooks installed two tiny Bluetooth radios one for the card reader and one for the PIN pad Krebs's series concludes with a closer look at Intacash, a new ATM company whose machines now blanket Cancun and other tourist areas but which is suspected of being connected to the skimming activity IMAGE IMAGE Share on Google Read more of this story at Slashdot http://www.secuobs.com/revue/news/583992.shtmlhttp://www.secuobs.com/revue/news/583992.shtml 2015-09-17 06:13:17 - Krebs on Security : In the previous two stories, I documented the damage wrought by an organized crime gang in Mexico that has been systematically bribing ATM technicians to install Bluetooth skimming components that allow thieves to steal card and PIN data wirelessly What follows is a look at a mysterious new ATM company in Mexico that sources say may be tied to the skimming activity http://www.secuobs.com/revue/news/583773.shtmlhttp://www.secuobs.com/revue/news/583773.shtml 2015-09-15 06:05:39 - Krebs on Security : I spent four days last week in Mexico, tracking the damage wrought by an organized crime ring that is bribing ATM technicians to place Bluetooth skimmers inside of cash machines in and around the tourist areas of Cancun Today s piece chronicles the work of this gang in coastal regions farther south, following a trail of hacked ATMs from Playa Del Camen down to the ancient Mayan ruins in Tulum http://www.secuobs.com/revue/news/583489.shtmlhttp://www.secuobs.com/revue/news/583489.shtml 2015-09-14 06:18:30 - Krebs on Security : -Sept 9, 12 30 pm CT, Yucatan Peninsula, Mexico Halfway down the southbound four-lane highway from Cancun to the ancient ruins in Tulum, traffic inexplicably slowed to a halt There was some sort of checkpoint ahead by the Mexican Federal Police I began to wonder whether it was a good idea to have brought along the ATM skimmer instead of leaving it in the hotel safe If the cops searched my stuff, how could I explain having ultra-sophisticated Bluetooth ATM skimmer components in my backpack http://www.secuobs.com/revue/news/583377.shtmlhttp://www.secuobs.com/revue/news/583377.shtml 2015-09-02 07:26:06 - Hackaday : Last January, DrYerzina s sister couldn t find her cat The family searched the neighborhood for two hours until the cat came out from underneath a bed, proving once again cats own humans, not the other way around A solution to this problem would come in the form of technology, specifically as DrYerzinia s entry for the Hackaday Prize, a solar-powered Bluetooth tracking device Yes, you can go on Amazon or eBay and buy a BLE tracker, but this version comes in a handy package it s built of a flexible circuit board to fit just about everywhere, including on the collar of a read more http://www.secuobs.com/revue/news/582123.shtmlhttp://www.secuobs.com/revue/news/582123.shtml 2015-08-28 04:32:23 - Hackaday : We have seen a few projects that convert a rotary dial for use with modern technology, but this one adds a new twist to the mix it uses Bluetooth 40 Silent used a Nordic Semiconductor NRF51 DK development board for the project, which was built from the Nordic SDK source code for creating an HID Human Interface Device After what he claims was an hour or so of hacking, he was able to get this Arduino-compatible SoC dev board to detect the pulses from the rotary dial, then pass the appropriate number to a connected device as a key press read more http://www.secuobs.com/revue/news/581679.shtmlhttp://www.secuobs.com/revue/news/581679.shtml 2015-08-07 13:11:25 - Hackaday : A good hacker hates to throw away electronics We think Matt Gruskin must be a good hacker because where a regular guy would see a junky old 1980 s vintage Fisher Price cassette player, Matt saw a retro stylish Bluetooth speaker His hack took equal parts of electronics and mechanics It even required some custom 3D printing You might think converting a piece of old tech to Bluetooth would be a major technical challenge, but thanks to the availability of highly integrated modules, the electronics worked out to be fairly straightforward Matt selected an off the shelf Bluetooth module and another read more http://www.secuobs.com/revue/news/579583.shtmlhttp://www.secuobs.com/revue/news/579583.shtml 2015-06-27 22:06:24 - Darknet The Darkside : http://www.secuobs.com/revue/news/575667.shtmlhttp://www.secuobs.com/revue/news/575667.shtml 2015-06-21 13:05:10 - Hackaday : You don t need to look very hard to find Nordic s nRF51 wireless module it s found in hundreds of products and dozens of projects over on hackadayio The nRF51 is a SoC that includes an ARM Cortex M0 processor and a variety of radios for Bluetooth and other protocols Useful, if a bit limited in processing power Now, Nordic has a new SoC It s the nRF52, a Cortex M4F processor, a Bluetooth radio, NFC, and a bunch of Flash and RAM to make just about anything you can think of possible Yes, it s an upgrade to the nRF51 a better read more http://www.secuobs.com/revue/news/574831.shtmlhttp://www.secuobs.com/revue/news/574831.shtml 2015-06-20 04:08:26 - Hackaday : Quite often, the raison d être for building a project is to learn and hone one s skills In which case it doesn t matter if the end use seems a bit frivolous indiantinker built BlueIR, a device to control Bluetooth A2DP devices using an archaic IR Remote using a BT-Aux Adapter Sounds convoluted Let s try again He uses an old IR remote to send data to a MSP430-series microcontroller, which is connected over serial to a USB Bluetooth Receiver Adapter, which in turn is connected to a set of wired speakers The Bluetooth adapter is paired with his phone The IR remote read more http://www.secuobs.com/revue/news/574774.shtmlhttp://www.secuobs.com/revue/news/574774.shtml 2015-05-26 17:57:46 - Security Bloggers Network : Devices using Bluetooth Low Energy BLE to transmit their data can be intercepted by hackers, potentially exposing a trove of fitness data from wearables, IT Pro reports The post Bluetooth fitness trackers a threat to privacy appeared first on We Live Security http://www.secuobs.com/revue/news/571995.shtmlhttp://www.secuobs.com/revue/news/571995.shtml 2015-04-06 14:43:15 - Security Bloggers Network : Neat, but I'll bet it can be hacked http://www.secuobs.com/revue/news/566178.shtmlhttp://www.secuobs.com/revue/news/566178.shtml 2015-03-26 09:21:34 - Hackaday : A year and a half ago we ran a post about a SNES controller modified into a pair of headphones They were certainly nice looking and creative headphones but the buttons, although present, were not functional The title of the original post was maybe antagonistically called SNES Headphones Scream Out For Bluetooth Control Well, headphone modder lyberty5 is back with a vengeance He has heeded the call by building revision 2 of his SNES headphones and guess what, they are indeed Bluetooth Not only that, the A, B, X and Y buttons are functional this time around and read more http://www.secuobs.com/revue/news/564880.shtmlhttp://www.secuobs.com/revue/news/564880.shtml 2015-02-18 08:37:41 - Slashdot Your Rights Online : An anonymous reader writes A jury has upheld patent claims against Samsung and awarded the patent-holder 157 million The patents relate to compatibility between different types of modems, and connect to a string of applications going back to 1997 The first version of Bluetooth was invented by Swedish cell phone company Ericsson in 1994 Lawyers for the plaintiff argue that the patents cover all devices that use Bluetooth 20 or later, so further cases could extend far beyond Samsung Of course, the company that won the lawsuit wasn't the one who made the invention, or the one who patented it The company is Rembrandt IP, one of the oldest and most successful patent trolls IMAGE IMAGE Share on Google Read more of this story at Slashdot IMAGE IMAGE IMAGE IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/559997.shtmlhttp://www.secuobs.com/revue/news/559997.shtml 2015-02-09 22:14:44 - Hackaday : Since just about everyone who would be interested in electronics has a decent cellphone now, there s an idea that we don t need USB or weird serial adapters anymore Bluetooth LE is good enough for short-range communication, and there are a ton of boards and Kickstarter projects out there that are ready to fill the need Michah has built what is probably the lowest-spec and cheapest BTLE board we ve ever seen It s really just an ATTiny85 a favorite of the crowd that s just slightly above Arduino level and an HM-10 Bluetooth 40 Low Energy module This board was developed read more http://www.secuobs.com/revue/news/558751.shtmlhttp://www.secuobs.com/revue/news/558751.shtml 2015-01-26 18:26:20 - adafruit industries blog : Make wireless Rubik s Cube headphones via instructables Ever wonder about making your own pair of custom headphones How about a pair of custom Bluetooth headphones Well, it s time to cut the cords and roam about your room while you rock these awesome headphones In this Instructable, you ll learn how to make a set of wooden http://www.secuobs.com/revue/news/556627.shtmlhttp://www.secuobs.com/revue/news/556627.shtml 2015-01-26 14:44:31 - adafruit industries blog : Bob Alexander built Blueprintf, a handheld serial monitor with data displayed on a cell phone I built a handheld serial monitor to use with my microcontroller-based projects, allowing me to debug them or send them commands from my cell phone or tablet I can connect it to my project s UART with two or three wires, http://www.secuobs.com/revue/news/556573.shtmlhttp://www.secuobs.com/revue/news/556573.shtml 2015-01-24 07:11:51 - Hackaday : Pietronet is like many of us in that he enjoys playing some classic console video games from time to time He usually plays them on his PC using a Wiimote as a controller The Wiimote has most of the classic buttons in a comfortable configuration Plus, it s got Bluetooth built-in, which makes it easy to pair up to your PC Pietronet decided to take it a step further, though He managed to cram all of the guts from a Wiimote inside of the original NES controller for a more authentic feel The first step was to crack open the Wiimote read more http://www.secuobs.com/revue/news/556390.shtmlhttp://www.secuobs.com/revue/news/556390.shtml 2015-01-19 18:51:48 - Security Bloggers Network : Bluetooth dongles provided to drivers by insurance companies to track driving habits are poorly secured, and could be hacked to hijack cars, reports The Register The post Bluetooth fob used in 2 millions American cars vulnerable to exploit appeared fi http://www.secuobs.com/revue/news/555387.shtmlhttp://www.secuobs.com/revue/news/555387.shtml 2015-01-13 07:57:20 - adafruit industries blog : Outdoor speakers that are wilderness friendly with solar panel charging via engadget Think the load of Bluetooth speakers announced at CES is rather ho-hum Well, Braven has something to say about that The company s new BRV-PRO Bluetooth speaker sports the rugged look we ve come to expect from them, and claims 20 hours of battery life http://www.secuobs.com/revue/news/554278.shtmlhttp://www.secuobs.com/revue/news/554278.shtml 2015-01-10 16:29:22 - Darknet The Darkside : http://www.secuobs.com/revue/news/553958.shtmlhttp://www.secuobs.com/revue/news/553958.shtml 2015-01-10 04:25:58 - Hackaday : Malebuffy bought himself a used boat last year Fuel isn t exactly cheap where he lives, so he wanted a way to monitor his fuel consumption He originally looked into purchasing a Flowscan off the shelf, but they were just too expensive In the interest of saving money, Malebuffy decided to build his own version of the product instead To begin, Malebuffy knew he would need a way to display the fuel data once it was collected His boat s console didn t have much room though, and cutting holes into his recently purchased boat didn t sound like the best idea He decided read more http://www.secuobs.com/revue/news/553909.shtmlhttp://www.secuobs.com/revue/news/553909.shtml 2015-01-02 13:20:47 - Hackaday : A few years ago, Lou came up with a pretty clever build to open his garage door with his phone He simply took a Bluetooth headset, replaced the speaker with a transistor, and tied the transistor to a few wires coming out of his garage door opener When the Bluetooth headset connected, the short beep coming from the speaker output opened the door The newest version of this build does away with the simple Bluetooth headset and replaces it with a Bluetooth 40 chip The reason for this is that Apple and their walled garden of an App store would read more http://www.secuobs.com/revue/news/552763.shtmlhttp://www.secuobs.com/revue/news/552763.shtml 2014-12-26 05:23:36 - SecurityTube.Net : Departments of Transportation around the United States have deployed little white boxes -- Bluetooth detectors used to monitor traffic speeds and activity While they're supposedly anonymous, they detect a nearly-unique ID from every car, phone, and PC that passes by In this presentation, I explore the documentation on these surveillance systems and their capabilities, then build a Bluetooth detector, analyzer, and spoofer with less than 200 of open-source hardware and software Finally, I turn my own surveillance system on the DOT's and try to detect and map the detectors Grant Bugher has been hacking since the early 90's and working professionally in information security for the last 9 years He is currently a security architect for a cloud computing provider, and has previously been a program manager and software engineer on a variety of widely-used developer tools and platforms Grant is a prior speaker at BlackHat USA and a regular DefCon attendee since DefCon 16 Most of his research and work is on cloud compute and storage platforms, application security, and detecting attacks against web-scale applications Twitter fishsupreme Web http perimetergridcom For More Information please visit - https wwwdefconorg html defcon-22 dc-22-indexhtml http://www.secuobs.com/revue/news/551924.shtmlhttp://www.secuobs.com/revue/news/551924.shtml 2014-12-24 18:09:16 - adafruit industries blog : Kevin wrote in to tell us about his Ö bluetooth ring with an OLED display and 3D printed enclosure, way cool Every Wednesday is Wearable Wednesday here at Adafruit We re bringing you the blinkiest, most fashionable, innovative, and useful wearables from around the web and in our own original projects featuring our wearable Arduino-compatible platform, http://www.secuobs.com/revue/news/551772.shtmlhttp://www.secuobs.com/revue/news/551772.shtml 2014-12-24 10:02:17 - Hackaday : Wearables are the next frontier of amateur electronics, and Kevin s Arduboy ring is one of the best examples we ve seen yet Inside the Arduboy is an nRF51822 a chipset with Bluetooth Low Energy, an ARM Cortex M0,256k of Flash, and 16k of RAM There s also a an OLED and a touch button for displaying notifications from a phone, with the ability to reply to these notifications The enclosure for the ring is rather interesting It s a bit thick, but that s for a reason there s a 40mAh battery stuffed along the sides of the ring The enclosure itself is read more http://www.secuobs.com/revue/news/551718.shtmlhttp://www.secuobs.com/revue/news/551718.shtml 2014-12-23 20:39:22 - adafruit industries blog : As a child growing up, we had a Lego Train Systems 4563 going around the Christmas tree I still remember the day my Dad built it, as we were a little bit too young for the 476 piece work of art Although we had plenty of other Legos to play with, the train went away http://www.secuobs.com/revue/news/551659.shtmlhttp://www.secuobs.com/revue/news/551659.shtml 2014-12-16 04:21:43 - Darknet The Darkside : http://www.secuobs.com/revue/news/550324.shtmlhttp://www.secuobs.com/revue/news/550324.shtml 2014-12-12 02:05:27 - adafruit industries blog : Because everything is more fun when it s wireless Whether you re interested in Classic Bluetooth of wireless speaker and hokey headset fame , or the new fangled Low Energy standard introduced with the Bluetooth 40 Core Specification, mobile phones and devices have given Bluetooth a new lease on life Bluetooth Low Energy AKA Bluetooth Smart Bluetooth Low Energy BLE http://www.secuobs.com/revue/news/549798.shtmlhttp://www.secuobs.com/revue/news/549798.shtml 2014-12-02 04:11:45 - Hackaday : We ve seen all sorts of ways to implement Bluetooth connectivity on your car stereo, but Tony s hack may be the cheapest and easiest way yet The above-featured Bluetooth receiver is a measly 15 over at Amazon actually 750 today it s Cyber Monday after all and couldn t be any more hacker-friendly It features a headphone jack for plugging into your car s AUX port and is powered via USB Tony didn t want the receiver clunking around in the console, though, so he cracked it open and went about integrating it directly by soldering the appropriate USB pins to 5V and GND on the read more http://www.secuobs.com/revue/news/547940.shtmlhttp://www.secuobs.com/revue/news/547940.shtml 2014-11-20 16:18:53 - Hackaday : Sure, anyone can go buy a bluetooth speaker for their portable music needs But for something a little more unique, at least in this decade, Daniel aka speedfox went with an 80s-style boombox and outfitted it with a bluetooth module The retro boombox was delivered with a few scratches and a broken radio, but the tape decks were still in decent shape so it was ready to be hacked speedfox tied the Bluetooth audio output to the tape reader on one of the boombox s tape decks, but this revealed a problem the bass was overwhelming the rest of the Read more http://www.secuobs.com/revue/news/546463.shtmlhttp://www.secuobs.com/revue/news/546463.shtml 2014-11-20 01:23:11 - adafruit industries blog : Bluefruit LE Friend Bluetooth Low Energy BLE 40 nRF51822 v10 The Bluefruit LE Friend is your new BLE BFF This USB-to-BLE board makes it easy to get your computer talking to your BLE enabled phone or tablet using a standard serial UART connection In it s simplest form, it works on the same principle http://www.secuobs.com/revue/news/546328.shtmlhttp://www.secuobs.com/revue/news/546328.shtml 2014-11-10 23:30:11 - adafruit industries blog : Make your room lights and fan voice activated with Arduino and Bluetooth via instructables Before I start I would like to thank the instructable user ASCAS for showing me how to use bluetooth in my project Here is howi learned http wwwinstructablescom id Voice-Activated-Arduino-Bluetooth-Android What I did in this project was use 4 servos to physically turn on http://www.secuobs.com/revue/news/544702.shtmlhttp://www.secuobs.com/revue/news/544702.shtml 2014-11-07 15:13:48 - Channel 9 : Today's hardware Friday post is really hardware'ish I mean building a WPF that communicates to other devices via Bluetooth is a hardware post, right Sara Silva, who's project we just highlighted last week, More Modern UI for WPF examples and samples, is back, this time, well, showing us how to wire up our WPF app's to Bluetooth She using the cool project 32feetNET which we covered a couple years ago, 32feetNET, Bluetooth and Net Gadgeteer What's great about her post is that she uses the Modern UI WPF work she's done and MVVM How to send data through bluetooth in a WPF application using 32feetNet ------------------------------------------------------------- Scope This article has the goal to show a solution for send data between devices using a WPF application and the library 32feetNet The solution will implement the MVVM pattern and will use the MVVMLight Toolkit Introduction Bluetooth is an industry-standard protocol that enables wireless connectivity for computers, handheld devices, mobile phones, and other devices Bluetooth is designed for use by C C programmers Some Bluetooth features are available with Windows Sockets Familiarity with Microsoft Windows networking and Windows Sockets programming is required The article Bluetooth Programming with Windows Sockets, describes how to use Windows Sockets functions and structures to program a Bluetooth application and provide the Bluetooth connection sample But in a first attempt it not looks so nice, when our goal is to create a WPF application In Codeplex, there is a project called 32feetNET This project is a shared-source project to make personal area networking technologies such as Bluetooth, Infrared IrDA and more, easily accessible from NET code Supports desktop, mobile or embedded systems 32feetNET is available on Nuget, and for desktop apps the reference is this 32feetNET 350 Nuget Package Which version we will use in the sample we will create Description The WPF Application will have two modes Sender and Receiver Where the Sender has the responsibility to send messages and the Receiver will get the messages sent by Sender Let s start Creating the project First create the WPF application in Visual Studio The Model The model is defined by the Device class that represent the structure for the device around us The implementation is The Services The services in the application will define the features for the Sender and for the Receiver These classes will be injected to the view model using the ServiceLocator, and the setup is defined in the ViewModelLocator constructor For Sender and Receiver are connected each other, we need to define a Guid that is set to the ServiceClassId and it is the key for the communication When Sender send a message using the ServiceClassID X only the Receiver that know the ServiceClassID X will get the data, any other Receiver that know only the ServiceClassID Y, for exemple, will not receive the data The ViewModel We will define the following view models ReceiverViewModel, SenderViewModel and MainViewModel that will be binding to the DataContext in ReceiverView, SenderView and MainWindow respectively The UI The MainWindow will be the start point for the application and will contains two user controls ReceiverView and SenderView that will be showed if the user want to be a Sender or a Receiver The ViewModelLocator The ViewModelLocator will be a static resource for the application and is defined in Appxaml, as following Running the application For test the application we need two devices, where in the first device we will run as Sender and in the second device we will run as Receiver image Conclusion In conclusion, we can conclude the 32feetNet is a great library for get all devices around with bluetooth on and for send data through bluetooth The library has a great documentation but could have more samples that we could run for test the features provided Another point that the developer should be aware is the fact the project isn t updated since 2012 but everyone can use the source code if needed, for fix any issue Source Code The complete source code can be found in Bluetooth Sample using 32feetNet Make sure you click through as there's a bunch of great stuff in her post that's not covered here Follow saramgsilva Follow CH9 Follow coding4fun Follow gduncan411 IMAGE http://www.secuobs.com/revue/news/544335.shtmlhttp://www.secuobs.com/revue/news/544335.shtml 2014-10-16 22:56:36 - Security Bloggers Network : The Lumsing Portable Waterproof Bluetooth 40 Speaker provides nominal sound capability, but probably has the best Bluetooth implementation I've ever experienced read more IMAGE http://www.secuobs.com/revue/news/540692.shtmlhttp://www.secuobs.com/revue/news/540692.shtml 2014-10-13 23:26:52 - adafruit industries blog : Turn your headphones into bluetooth headphones with Bluetooth Box via instructables I love what my headphones, but a few weeks ago, my friend bought a new bluetooth headset, I intend to switch to bluetooth headphones But I do not want to throw away the love of my headphones, so I got the idea make a http://www.secuobs.com/revue/news/539884.shtmlhttp://www.secuobs.com/revue/news/539884.shtml 2014-09-24 19:15:08 - adafruit industries blog : Via Instructables via Arduino Blog Hey guys I d like to share with you the input device I created specifically to interact with AR glasses like the Google Glass, Meta, Moverio BT or with the VR headsets like Oculus Rift, Samsung Gear VR, vrAse, Durovis Dive Those new products are amazing and they need new types http://www.secuobs.com/revue/news/536656.shtmlhttp://www.secuobs.com/revue/news/536656.shtml 2014-09-12 11:39:20 - SecurityTube.Net : Check your pocket, or your wrist, or your doorlock From lightbulbs to keyboards and mice, Bluetooth Smart aka BLE just won't stop popping up Given such a huge proliferation, it's no surprise that the NSA ANT catalog includes tools that target this fundamentally insecure wireless protocol And this is the NSA we're talking about, they're not after your pedometer Build out your own SIGINT capabilities with my Bluetooth Smart Attack tools modeled on tools from the NSA ANT catalog, built with open source hardware and software, and ready to play with today Bio Mike Ryan is a penetration tester security engineer at iSEC Partners At iSEC, Mike does low-level wireless and embedded testing as much as possible Too often he's stuck doing web crap In 2013 Mike released a tool called crackle to exploit a major crypto vulnerability in Bluetooth Smart BLE Crackle cracks BLE's key exchange, allowing a passive eavesdropper to capture and decrypt all data sent over BLE Earlier this year Mike presented research on fuzzing BLE devices at the application level He publicly demonstrated a stack-level crash against Bluedroid, Android's Bluetooth stack, that he discovered using a dumb mutative fuzzer based on BlueZ Mike has presented ToorCon, ShmooCon, BlackHat, CanSecWest, and USENIX Security He has been playing the game since 2002 and employs a wide array of skills, tricks, and leet hax on a daily basis For More Information please visit - http defcon-wireless-villagecom http wwwirongeekcom iphp page videos defcon-wireless-village-2014 mainlist IMAGE http://www.secuobs.com/revue/news/534625.shtmlhttp://www.secuobs.com/revue/news/534625.shtml 2014-09-04 11:18:07 - adafruit industries blog : The 3D Printed Speaker was designed based off a pre-existing speaker s motherboard Utilizing features such as USB charger, audio in out, volume control, and an on off switch the Proto3000 team was able to design a casing to accommodate all features The clean and minimal housing was designed in CAD and then 3D printed on a MakerBot http://www.secuobs.com/revue/news/532935.shtmlhttp://www.secuobs.com/revue/news/532935.shtml 2014-08-25 23:45:57 - adafruit industries blog : Picture of Wireless Bluetooth guitar speaker Today I initially intended to just make a Bluetooth speaker from an old surround speaker I had laying around I wanted a speaker to take to the beach that sounded better than the little inexpensive guys you get And I didn t want to buy something expensive that I was http://www.secuobs.com/revue/news/531483.shtmlhttp://www.secuobs.com/revue/news/531483.shtml 2014-07-31 23:18:55 - adafruit industries blog : Tony shares his great design for a 60 bluetooth head mounted display Download the files here http wwwthingiversecom thing 408099 Every Thursday is 3dthursday here at Adafruit The DIY 3D printing community has passion and dedication for making solid objects from digital models Recently, we have noticed electronics projects integrated with 3D printed enclosures, brackets, and sculptures, so each http://www.secuobs.com/revue/news/527861.shtmlhttp://www.secuobs.com/revue/news/527861.shtml 2014-07-31 21:38:20 - Security Bloggers Network : Despite a couple annoyances and not being able to get NFC to work with the devices I had handy to test with, the Prophet sound quality is exceptional read more IMAGE http://www.secuobs.com/revue/news/527842.shtmlhttp://www.secuobs.com/revue/news/527842.shtml 2014-07-28 06:20:20 - adafruit industries blog : Thanks to Nancy for sending in her tutorial from her blog orange narwhals Check out more here As part of my work on Swarmbuddies robots that dance to music and create formations we decided to use bluetooth low energy for smartphone support, but also needed it to work on the desktop side for our computer http://www.secuobs.com/revue/news/527140.shtmlhttp://www.secuobs.com/revue/news/527140.shtml 2014-07-18 18:11:25 - adafruit industries blog : UPDATED PRODUCT Bluefruit LE Bluetooth Low Energy BLE 40 nRF8001 Breakout As of 7 17 2014 we updated the layout and changed out the 32KHz crystal The board is functionally the same but a little thicker Our Adafruit Bluefruit LE Bluetooth Smart, Bluetooth Low Energy, Bluetooth 40 nRF8001 Breakout allows you to establish an http://www.secuobs.com/revue/news/525922.shtmlhttp://www.secuobs.com/revue/news/525922.shtml 2014-07-10 19:33:54 - adafruit industries blog : NEW PRODUCT Getting Started with Bluetooth Low Energy by KTOWN You re interested in what all this BLE stuff is about, anyways Let Adafruit s lead Engineer, Kevin KTOWN Townsend aka 50 Ohm guide you in this detailed tome KTOWN teamed up with Akiba aka Wireless EL blinky guy to throw down all their knowledge in http://www.secuobs.com/revue/news/524620.shtmlhttp://www.secuobs.com/revue/news/524620.shtml 2014-07-10 07:19:52 - SecurityTube.Net : This talk was given at a meeting of the Abertay Ethical Hacking Society on 2nd November 2011 at the University of Abertay Dundee For More Information please visit - https wwwyoutubecom channel UCwLxCgdcQCA83nrwdvyx2PA IMAGE http://www.secuobs.com/revue/news/524488.shtmlhttp://www.secuobs.com/revue/news/524488.shtml 2014-07-07 18:28:40 - adafruit industries blog : DIY 3D Tilt Sensor How to build a DIY 3D tilt sensor Bluetooth HID controller, on Instructables Fun, educational to build, and a bit like magic Check this video of the DIY 3D tilt sensor hooked up to Philips Hue The project is designed to be made in a FabLab Zürich represent with a laser http://www.secuobs.com/revue/news/523952.shtmlhttp://www.secuobs.com/revue/news/523952.shtml 2014-07-03 16:10:09 - Security Bloggers Network : July 3rd, 2014 Almost everyone today has a smartphone and one of the features that comes standard is Bluetooth capability Since your device has Bluetooth capabilities, it also has the capability to be hacked If your smartphone is hacked via Bluetooth connection, you are potentially at risk of losing your phone s data, pictures, videos, messages, contacts, and other information compromised Today if you own a smartphone, you are walking around with a small computer in your pocket Don t you think it would be beneficial to understand how Bluetooth works, how hackers use it to steal aspects of your personal life, and ways you can prevent hackers What is Bluetooth Technology Bluetooth is peer-to-peer based network technology Due to this, the technology lacks management over security issues This could eventually cause you grief The fact that this technology is now standard on many electronic devices, from speakers to smartphones, paired with the lack of security functions, makes Bluetooth an easy entrance point for hackers It is fairly simple for hackers to find a way onto your phone Hackers can the technology to gain access to your device Proportionally, it is just as simple to arm your smartphone against hackers Here are IMAGE http://www.secuobs.com/revue/news/523570.shtmlhttp://www.secuobs.com/revue/news/523570.shtml 2014-06-27 09:47:23 - adafruit industries blog : Parker Reed made this great in-car bluetooth audio receiver using his pi Get the code here Each Friday is PiDay here at Adafruit Be sure to check out our posts, tutorials and new Raspberry Pi related products Adafruit has the largest and best selection of Raspberry Pi accessories and all the code tutorials to http://www.secuobs.com/revue/news/522508.shtmlhttp://www.secuobs.com/revue/news/522508.shtml 2014-06-16 14:41:17 - adafruit industries blog : The Bluetooth LE doc-a-thon at ITP Camp featuring the Adafruit Bluefruit line up http://www.secuobs.com/revue/news/519040.shtmlhttp://www.secuobs.com/revue/news/519040.shtml 2014-06-13 19:25:08 - adafruit industries blog : 8BitBox A Bluetooth Box Powered by Arduino and Controlled by Android The 8BitBox is a portable Arduino powered Bluetooth box, controlled via a Bluetooth enabled Android Device This project has an RGB LED and a piezo buzzer to play music that you will be able to control remotely Once you have finished this project, http://www.secuobs.com/revue/news/518813.shtmlhttp://www.secuobs.com/revue/news/518813.shtml 2014-06-12 16:17:50 - adafruit industries blog : I recently put an old laptop in my room as an XBMC computer However, whenever I wanted to switch the content that was playing, I would have to drag myself out of my warm bed to change the content on the computer I searched far and wide for a glitch free way to control XBMC http://www.secuobs.com/revue/news/518549.shtmlhttp://www.secuobs.com/revue/news/518549.shtml 2014-06-09 07:21:40 - SecurityTube.Net : Joseph Paul Cohen, PhD student at University of Massachusetts Boston TCP IP has tools such as netcat and nmap to explore devices and create socket connections Bluetooth has sockets but doesn t have the same tools blucat fills this need for the Bluetooth realm blucat is a perfect debugging tool for bluetooth applications or a device exploration tool It can also be an administration tool for bluetooth enabled devices More information is at http blucatsourceforgenet Biography Joseph is a PhD student at the University of Massachusetts Boston He has worked for large finance, IT consulting, and startup software companies He now focuses on computer science research in machine learning and cyber security education For More Information please visit - http wwwbsidesbostoncom IMAGE http://www.secuobs.com/revue/news/517745.shtmlhttp://www.secuobs.com/revue/news/517745.shtml 2014-05-24 21:51:53 - adafruit industries blog : From cv gate to Ableton via Bluetooth bluetrigg v1 http://www.secuobs.com/revue/news/515335.shtmlhttp://www.secuobs.com/revue/news/515335.shtml 2014-05-20 14:06:35 - adafruit industries blog : A tutorial for Robo-Mobile A Homemade Bluetooth Robot by Razer0901 via Instructables This robot is one I built to learn Before this project I did get my feet wet with a few small scale Arduino projects like an ultrasonic robot, that would move backwards until it was a certain distance away from the wall, http://www.secuobs.com/revue/news/514449.shtmlhttp://www.secuobs.com/revue/news/514449.shtml 2014-05-16 15:47:45 - Channel 9 : Eric Schmidt shares with us a great project, using some of our favorite tools How can you go wrong when LEGOs are in the mix Some of our related past posts LEGO, IR and Netduino LEGO Mindstorms EV3 API, Windows 8, Windows Phone 8, Desktop and you LEGONXT, Windows 8 and Bluetooth a How-to Below I've pulled enough from the original post to hopefully wet your appetite Make sure you click through for the full details, code, tips and more Talking to robots or other devices using Bluetooth from a Windows Runtime app ------------------------------------------------------------------- Microsoft recently sponsored a team to complete in the Build for Good LEGO MINDSTORMS Robo Competition, a team that represented the Xbox brand I had the distinct honor of working on this team of developers, testers, and one business manager to create a pretty awesome exhibit Each of the robots executed code written using the LEGO MINDSTORMS EV3 Software The code listened for messages from the app and then reacted in a specific way From the app s perspective, it connected three separate and distinct Bluetooth-enabled devices to which it sent various messages The difficulty lay in establishing the Bluetooth connection with each robot and then sending and receiving messages To accomplish this, the app used several of the Windows Runtime APIs designed for interacting with devices including the WindowsDevicesBluetoothRfcomm namespace introduced in Windows 81 and Windows Phone 81 In this blog post, I ll provide step-by-step instructions for how you can talk to a MINDSTORMS robot from a Windows Runtime app I ll show you how to build a very simple app that sends and receives messages from an EV3 robot I ll focus on the specific Windows Runtime APIs we used to connect to the robots, so I ll be glossing over a lot of the basics about building a Windows Runtime app using HTML, CSS, and JavaScript If you need to learn more about the fundamentals, see Create your first Windows Store app using JavaScript on MSDN On the other hand, keep in mind that this blog post provides more explicit instructions around managing project files in a Visual Studio solution than we normally provide in our posts I know that many of the loyal readers of our blog are professional developers who are deeply familiar with the basics of Visual Studio For you, I encourage you to skip ahead to some of the details about connecting to Bluetooth devices from a Windows Runtime app Get the hardware and software Before I get any further, I assume that you ve already got the required devices and software for this process I m using Visual Studio Express 2013 for Windows, running on Windows 81, to write my code I m connecting to a MINDSTORMS EV3 Intelligent Brick the brain of the robot that has been updated with the 103H firmware version of the EV3 operating system It s easiest to update the firmware from the MINDSTORMS EV3 Software IMPORTANT Your EV3 Intelligent Brick needs to be paired and connected at least once to your Windows PC before they will be able to receive and send messages to each other This can be a tricky process On the settings page for the EV3 Intelligent Brick, make sure that Bluetooth is turned on When you select the Bluetooth option from the screen, ensure that Visibility and Bluetooth are selected Also, make sure that iPhone iPad iPod are not selected Pair the EV3 Intelligent Brick and your Windows PC From the Start screen, type Devices and Printers, and then select Devices and Printers In the Control Panel, on the Devices and Printers page, click Add a device In the list, find the name of your EV3 Intelligent Brick if you haven t changed it in the EV3 Software, the name will be EV3 and then follow the on-screen instructions t this point, you ll be prompted on the EV3 Intelligent Brick to acknowledge the connection with your PC and to accept a passcode On the PC, you ll be asked to supply this passcode Make sure you remember your brick s name This becomes important later on when you try to connect to the brick Now you can connect to the brick from your PC You can do this with a single click from the EV3 Software Open Devices and Printers again If your brick and PC are paired, the brick will show up in the Unspecified category under its own name You may see it twice if you connected to the brick previously by USB Select the entry that has the details Bluetooth Peripheral Device Right-click the device and select Properties In the device Properties window, go to the Services tab and ensure that Serial Port SPP Serial Port is selected Apply any changes and close the settings dialog box Make sure that the EV3 Software is not connected to your brick by Bluetooth when you attempt to connect to the brick from your app This can block the Window Runtime app from connecting to the EV3 brick For more info about how to troubleshoot Bluetooth connectivity problems, download the EV3 Bluetooth guide Write the EV3 listening and receiving code To demonstrate sending and receiving messages, the brick runs a simple listening program written using the MINDSTORMS EV3 Software A picture of the program running on the robot is shown below Create the user interface for the Windows Runtime app Before I start writing more code, I ll take a quick inventory of the features I need to build for this simple Windows Runtime app The app has to be able to do a few things programmatically 1 It needs to establish a connection to the brick For Team Xbox, the code needed to be extensible so that the app could connect to three bricks 2 It needs to convert a user-generated message into the message protocol that the EV3 brick can understand 3 It needs to listen for and decode incoming messages from the brick Write the code to interact with the robot Now I can begin to write the JavaScript code that talks to the EV3 robot I ll start by adding a new JavaScript file called Robotjs to the solution In Solution Explorer, right click the js folder, choose Add, New JavaScript File In the Add New Item dialog box, name the file Robotjs and click Add Before I continue, I ll add a reference to the new JavaScript file to my defaulthtml file Test the app Before running and testing the Windows Runtime app, you ll want to start the program on the EV3 brick I highly recommend that you download the code to the brick, close all instances of the EV3 Software on your PC, and then run the program directly on the brick With the EV3 program running, run the Windows Store app code from Visual Studio Express press F5 The user interface for the app should look similar to this Other resources You might be wondering if there s an easier way to accomplish all this Well, the good news is that there are a couple of CodePlex projects designed to help you communicate with the LEGO MINDSTORMS EV3 brick over Bluetooth LEGO MINDSTORMS EV3 API This project includes a Windows Runtime component winmd file that can be added to a Windows Runtime project Windows, Windows Phone, and universal Windows apps , a library for Windows Phone apps built with Silverlight, and a library that can be used in a Win32 application This library is very powerful and provides a significant range of functionality You can use it to read sensor values, run motors, even play sounds or read files on the EV3 brick However, it won t allow you to connect to multiple EV3 bricks from a Windows Runtime app EV3Messenger This Win32 project a simple Windows Forms application allows you to connect directly to a specific EV3 brick by specifying the serial port assigned to the brick If you have more than one brick connected to your PC, you need only specify different serial ports to connect to each all of them One of the best parts of this project is that the message protocol for the EV3 brick is broken down into a very readable table Also, the project contains some C code that can be reused to encode and decode messages from a Windows Runtime app with some slight modifications The only drawback is that the connection code for this app uses the SystemIOPorts namespace, which you can t use in a Windows Runtime app or in a Windows Runtime component Unfortunately, neither of these libraries supply both of two key features that Team Xbox needed We wanted to have the form factor of a Windows Runtime app, but we needed to send messages to and receive messages from multiple in our case, three EV3 bricks We produced some code that was heavily influenced by the two CodePlex projects mentioned earlier, but tailored for our needs The secret sauce lies in the RobotconnectToRobotAsync function As I mentioned previously, it can be easily modified to accept a unique name for an EV3 brick and the same function can be called repeatedly at runtime allowing us to connect to more than one block during one app session All in all, Team Xbox had a blast building Lego robots and writing the code to talk to them Our goal was to inspire more people particularly young adults to engage and explore the world of science, technology, engineering, and mathematics I think we achieved our goal furthermore, I hope that this blog post will help you build a Windows Runtime app that talks to an EV3 robot or whatever other Bluetooth-enabled device you re working with Thank you for reading and keep on developing apps Click through for the source and all Follow CH9 Follow Coding4Fun Follow gduncan411 IMAGE http://www.secuobs.com/revue/news/513944.shtmlhttp://www.secuobs.com/revue/news/513944.shtml 2014-05-13 02:28:38 - Reverse Engineering : I own an LG HBM-210 BlueTooth Headset, I've had it for many years it works great but I no longer need it for phone calls I have been able to connect it to speakers for music via BlueTooth which works great Then the phone gets a call directs it through the speakers The BT Chip is attached to my PC via USB but does not show up as a device Is there any way I can get into it disable the Phone Call comands or rewrite a bunch of it Tl Dr BT Headset microUSB to PC USB plugged in Any way to get into its programming disable its call functionality if i can recode it I may use it for my wireless controller circuit board instead of IR submitted by sp_dev_guy link 1 comment http://www.secuobs.com/revue/news/513162.shtmlhttp://www.secuobs.com/revue/news/513162.shtml 2014-05-02 00:12:18 - adafruit industries blog : Make a Guggenhat Bluetooth-connected wearable NeoPixel marquee hat The Adafruit Learning System Adafruit s Bluefruit devices are hands-down the easiest way to get Arduino communicating over a Bluetooth wireless connection Bluetooth LE is a great way to control a project from a smartphone or tablet This simplicity could be illustrated with a scrolling LED wall http://www.secuobs.com/revue/news/511455.shtmlhttp://www.secuobs.com/revue/news/511455.shtml 2014-05-01 21:22:14 - adafruit industries blog : Thingiverse user bqLabs shared a 3D Printed educational robot that can be made with DIY electronics The PrintBot RHINO is an educational robot that can push objects with its dozer and take part in sumobots fights You can see it in action at http youtube r0RgC5rzKug The robot has been designed to attach components such as http://www.secuobs.com/revue/news/511426.shtmlhttp://www.secuobs.com/revue/news/511426.shtml 2014-04-12 17:13:32 - adafruit industries blog : Turn your RROD Xbox 360 into a Bluetooth arcade controller Uses Adafruit s Bluefruit EZ-Key 12 Input Bluetooth HID Keyboard Controller Dustin Evansfound himself with a few Xbox 360 casings lying around He ripped all of the remaining hardware out of these boxes and found that what remained was a decent sized box to mount http://www.secuobs.com/revue/news/507991.shtmlhttp://www.secuobs.com/revue/news/507991.shtml 2014-04-06 14:56:51 - adafruit industries blog : Controlling a lock with an Arudino and Bluetooth LE MAKE This project allows you to open a solenoid lock from a PhoneGap app using theBluetooth Serial Plugin and the new Adafruit Bluetooth LE break-out board for the Nordic Semiconductor nRF8001 chip The Adafruit Bluefruit LE Bluetooth Smart, Bluetooth Low Energy, Bluetooth 40 nRF8001 video Our http://www.secuobs.com/revue/news/506723.shtmlhttp://www.secuobs.com/revue/news/506723.shtml 2014-04-03 19:00:28 - adafruit industries blog : While it feels a bit strange to be writing about a book I was involved writing along with some great co-authors in the form of Carles Cufi, Akiba and Robert Davidson , O Reilly has finally listed our book on Bluetooth Low Energy, which will be available in May 2013 There are a few good books http://www.secuobs.com/revue/news/506378.shtmlhttp://www.secuobs.com/revue/news/506378.shtml 2014-03-28 13:33:48 - adafruit industries blog : This week, we ve added our brand new nRF8001 Bluetooth LE breakout Check it out, and all sorts of other Adafruit stuff, in the Adafruit Fritzing Library http://www.secuobs.com/revue/news/505341.shtmlhttp://www.secuobs.com/revue/news/505341.shtml 2014-03-24 05:35:00 - adafruit industries blog : The Adafruit Bluefruit LE Bluetooth Smart, Bluetooth Low Energy, Bluetooth 40 nRF8001 video Our Adafruit Bluefruit LE Bluetooth Smart, Bluetooth Low Energy, Bluetooth 40 nRF8001 Breakout allows you to establish an easy to use wireless link between your Arduino and any compatible iOS or Android 43 device It works by simulating a UART device beneath http://www.secuobs.com/revue/news/504419.shtmlhttp://www.secuobs.com/revue/news/504419.shtml 2014-03-21 16:04:45 - adafruit industries blog : It was referred to as Bluetooth 40 Bluetooth Low energy BTLE, but now it s Bluetooth Smart What is Bluetooth Smart Technology Bluetooth Smart wireless technology is the ultra-power efficient, application-friendly version of Bluetooth transforming the wireless industry This technology introduces new opportunities in industry verticals from consumer electronics, medical devices and home automation http://www.secuobs.com/revue/news/504234.shtmlhttp://www.secuobs.com/revue/news/504234.shtml 2014-03-20 23:27:12 - adafruit industries blog : NEW PRODUCT Bluefruit LE Bluetooth Low Energy BLE 40 nRF8001 Breakout v10 Our Adafruit Bluefruit LE Bluetooth Low Energy nRF8001 Breakout allows you to establish an easy to use wireless link between your Arduino and any compatible iOS or Android 43 device It works by simulating a UART device beneath the surface, http://www.secuobs.com/revue/news/504084.shtmlhttp://www.secuobs.com/revue/news/504084.shtml 2014-03-20 23:27:12 - adafruit industries blog : Tutorial Introduction to Bluetooth Low Energy The Adafruit Learning System Bluetooth Low Energy BLE , sometimes referred to as Bluetooth Smart , is a light-weight subset of classic Bluetooth and was introduced as part of the Bluetooth 40 core specification While there is some overlap with classic Bluetooth, BLE actually has a completely different lineage and http://www.secuobs.com/revue/news/504083.shtmlhttp://www.secuobs.com/revue/news/504083.shtml 2014-02-08 15:22:01 - adafruit industries blog : Tutorial Making a Bluetooth Temperature Humidity Sensor The Adafruit Learning System Bluetooth devices are widely used in many consumers products, its the most popular wireless protocol for small point-to-point networking Every laptop and just about every computer has Bluetooth classic built into it, so you often don t need a data receiver for http://www.secuobs.com/revue/news/496740.shtmlhttp://www.secuobs.com/revue/news/496740.shtml 2014-02-07 15:51:16 - Channel 9 : Today's Hardware Friday project comes to us via Matt Cavanagh and his need to, well, chase out some rodents from under his house Windows Phone controlled car with Netduino and Bluetooth -------------------------------------------------------- The houses in Durban, South Africa where I live usually have some form of gap underneath them that ranges from 30cm to big enough to crawl inside As far as I know it is for ventilation to help with the heat The problem is that a bunch of squeaky rodents have decided that mine is a good home, and unfortunately the gap is pretty small so I can t fit So I decided to make a little car that could go scout out the area and show me what was going on under there, and possibly how to stop it AOHrz5C Design For the frame and wheels I designed models and 3D printed them image Hardware The Bluetooth module is powered from the Netduino 3V3 and GND pins, and wired to pins 0 and 1 for data A very handy feature of the motor driver is that you can feed it with 9V and it will output 5V from the 5V pin So the battery goes into the VCC and GND, and then the Netduino is powered from the GND and 5V on the motor driver board The LED board can also be driven directly from that 5V Each motor is connected to the outputs on each side image Netduino code If you haven t followed my Netduino WP8 Bluetooth tutorial then go here now, because the Bluetooth part won t be explained fully here Before adding any Bluetooth code, add a new class to the project called MotorControllercs This class will basically control one motor per instance, and is just a helper to set the speed and direction Build that code and deploy to the Netduino, then we can move on to the Windows Phone part Windows Phone code Create a standard Windows Phone 8 application Before you forget, enable the ID_CAP_PROXIMITY capability within WMAppManifestxml Next we need to create a control stick that will be used to move around and drive the car Create a new UserControl called ThumbStickxaml within a new folder called Controls The XAML below just defines a square with an X in the middle There are events to detect when the user puts their finger down, moves it, and then lifts their finger You might notice that instead of referring to a finger, it mentions a mouse this is just because it is based on desktop Silverlight Considerations I wanted to keep the mechanics very simple so decided to not have a turning mechanism, but instead slow down a specific motor to make it turn in that direction Although this works, there is a lot of friction because the back wheels are forced to slide out when turning In future I would probably add a way for the wheels themselves to turn, or go with a tank-tread style I designed the platform around using a 9V battery which turns out is a pretty bad idea Compared to most other types of batteries they have a very low mAh and die really fast when driving two motors and an array of LED s You can grab the source code and STL 3D printing files Read the full post Matt provides all the details, code, hints and tips for creating your own rodent chaser Now all you need to add are some lasers and P IMAGE http://www.secuobs.com/revue/news/496605.shtmlhttp://www.secuobs.com/revue/news/496605.shtml 2014-02-07 08:41:05 - SecurityTube.Net : Bluetooth has been around for a long time It was subject to hacking and security analysis right from the start At DeepSec 2013 Verónica Valeros and Sebastián García gave an overview about the current state of affairs They showed that Bluetooth is alive and kicking, exploit-wise Bluetooth devices are ubiquitous However, until recently, there were no tools to perform Bluetooth wardriving Considering that each cell phone usually identifies one person and that the position of these devices can be stored, it is possible to extract and visualize people's behavior Most people is not aware that their Bluetooth device allows to easily abuse their privacy A new tool called Bluedriving is presented to capture and store the position and information of bluetooth devices The devices can be visualized on a map and different alerts can be used to follow people in the street We present the tool along with a large capture dataset and a deep privacy analysis We conclude that it is possible to follow people using their Bluetooth device For More Information please visit - https deepsecnet IMAGE http://www.secuobs.com/revue/news/496486.shtmlhttp://www.secuobs.com/revue/news/496486.shtml 2014-01-24 06:56:19 - adafruit industries blog : JA Watson s summary of hardware and costs for the four-port USB hub specifically designed for the Raspberry Pi and Bluetooth USB adapter So far I have looked at the Raspberry Pi NOOBS Linux distributions Raspbian, Arch and Pidora the XBMC focused Raspbmc and OpenELEC and the non-Linux RISC OS Then in the most recent post http://www.secuobs.com/revue/news/493760.shtmlhttp://www.secuobs.com/revue/news/493760.shtml 2014-01-23 11:56:20 - Security Bloggers Network : The devices were undetectable - installed internally in gas pumps The fact that they were wireless made it ever so convenient to get at the stolen banking data, as well - a con that netted the alleged thieves 21 million IMAGE http://www.secuobs.com/revue/news/493517.shtmlhttp://www.secuobs.com/revue/news/493517.shtml 2014-01-23 11:53:19 - SecurityTube.Net : TCP IP has tools such as nmap and netcat to explore devices and create socket connections Bluetooth has sockets but doesn't have the same tools Blucat fills this need for the Bluetooth realm Blucat can be thought of as a debugging tool for bluetooth applications device exploration tool a component in building other applications Blucat is designed to run on many different platforms including Raspberry Pi by abstracting core logic from native code using the Bluecove library to interact with a variety of Bluetooth stacks This talk will go over the objectives, designs, and current results of the project More information is at http blucatsourceforgenet Joseph Paul Cohen is a PhD student at the University of Massachusetts Boston He has worked for large finance, IT consulting, and startup software companies He now focuses on computer science research in areas of machine learning and cyber security education For More Information please visit - https wwwdefconorg html defcon-21 dc-21-speakershtml IMAGE http://www.secuobs.com/revue/news/493515.shtmlhttp://www.secuobs.com/revue/news/493515.shtml 2014-01-23 11:53:19 - SecurityTube.Net : As of 2013, it is estimated that there are now billions of bluetooth devices deployed worldwide The goal of the Bluetooth Database Project is to track and freely distribute real time sightings and statistics of these wide spread devices The data collected from these devices can be used to answer questions pertaining to various topics, such as device geolocation, device proliferation, population analysis, device misconfigurations, and an assortment of other security related analytics During this presentation I will go over the current community driven, distributed, real time, client server architecture of the project I will show off some of analytics that can be leveraged from the projects data sets Finally, I will be releasing various open source open source bluetooth scanning clients Linux, iOS, OSX These clients are easily installable across various operating systems and can be used to systematically contribute data to the project Ryan Holeman hackgnar resides in Austin Texas where he works as a senior software developer for Ziften Technologies He has a Masters of Science in Software Engineering He has published papers though ICSM and ICPC and spoken at various security conferences including DEF CON and Black Hat His spare time is mostly spent digging into various network protocols and shredding local skateparks For More Information please visit - https wwwdefconorg html defcon-21 dc-21-speakershtml IMAGE http://www.secuobs.com/revue/news/493513.shtmlhttp://www.secuobs.com/revue/news/493513.shtml 2014-01-23 01:44:12 - Security Bloggers Network : Authorities in New York on Tuesday announced the indictment of thirteen men accused of running a multi-million dollar fraud ring that allegedly installed Bluetooth-enabled wireless gas pump skimmers at filling stations throughout the southern United States IMAGE http://www.secuobs.com/revue/news/493438.shtmlhttp://www.secuobs.com/revue/news/493438.shtml 2014-01-22 12:02:54 - Help Net Security News : Thirteen individuals have been indicted by the Manhattan District Attorney for stealing victims banking information with skimming devices at gas stations throughout the Southern United States, and us http://www.secuobs.com/revue/news/493256.shtmlhttp://www.secuobs.com/revue/news/493256.shtml 2014-01-15 07:04:39 - adafruit industries blog : Style can be functional with these adorable pieces from CSR The pendant-style connected necklaces contain integrated electronics that enable the user to customise the colour and brightness emitted to suit their mood or to coordinate with a particular outfit The electronics integrated into the jewellery have been designed to support a range of functions and http://www.secuobs.com/revue/news/491663.shtmlhttp://www.secuobs.com/revue/news/491663.shtml 2014-01-09 03:35:10 - Hak5 Xvid Large : Open and close your lock using your phone's Bluetooth The Kevo by Kwikset is a Bluetooth 40 LE enabled deadbolt with an iOS app More info http wwwkwiksetcom Kevo http://www.secuobs.com/revue/news/490509.shtmlhttp://www.secuobs.com/revue/news/490509.shtml 2014-01-01 17:48:02 - adafruit industries blog : Make a TRINKET Bluetooth Bluefruit Alarm System Many alarm projects are rather simplistic a single sensor protects a single object or field of view Such projects are good for learning or practicing simple circuit techniques But eventually you may wish to have a more advanced sophisticated alarm system More like those used by commercial http://www.secuobs.com/revue/news/489246.shtmlhttp://www.secuobs.com/revue/news/489246.shtml 2013-12-26 19:52:37 - adafruit industries blog : Bluefruit EZ-Link Bluetooth Arduino Serial Link Programmer We are excited to add another product to our growing Adafruit Bluefruit line, this time it s the Bluefruit EZ-Link the best Bluetooth Serial link programmer ever made module and shield Like you, we have purchased all sorts of Bluetooth devices with high expectations http://www.secuobs.com/revue/news/488470.shtmlhttp://www.secuobs.com/revue/news/488470.shtml 2013-12-13 22:24:59 - adafruit industries blog : NEW PRODUCT Bluefruit EZ-Link Shield Bluetooth Arduino Serial Programmer v10 We are excited to add another product to our growing Adafruit Bluefruit line, this time it s the Bluefruit EZ-Link Shield the best Bluetooth Serial shield ever made Like you, we have purchased all sorts of Bluetooth shields with high expectations http://www.secuobs.com/revue/news/486232.shtmlhttp://www.secuobs.com/revue/news/486232.shtml 2013-12-09 15:27:53 - Channel 9 : Today's project from Joost van Schaik is a Hardware Friday, a Mobile Monday and Windows Wednesday project all wrapped up in one post WiFi Direct, NFC, Bluetooth, Windows 8, 81 and Windows Phone 8 and some code to help you build apps that talk between them all Building for both a tap send Bluetooth connection helper for Windows Phone 8 AND Windows 81 --------------------------------------------------------------------- On my way to the November 2013 MVP Summit, at Matthijs Hoekstra s house in Sammamish, and back again in the Netherlands I spent considerable time trying to get my tap send and Bluetooth connection helper to not only work on Windows 81 as well, but also to make it provide cross-platform communication between Windows Phone 8 and Windows 81 Unfortunately the MSDN PixPresenter sample suggest you can connect between Windows Phone and Windows 8 by sharing app ids in the PeerFinderAlternateIdentities property, and so does the MSDN documentation on said property That way, my friends, lay only mud pies and frustration I don t doubt that it will work for tap send, but as the majority of the current Windows 8x devices including Microsoft s own excellent Surface devices do not include NFC capabilities, the chances of making a successful connection between a Windows Phone and a random Windows 8 computer using tap send are very small I seem to have a thing with Italians these days I had a lot of fun with a bunch of them at the Summit, and it was not until this Italian developer called Andrea Boschin pointed me to a recent blog post by him that I found a way out of this Using this knowledge I adapted DevicePairConnectionHelper once again, so now it s not only cross platform, but it can also connect between Windows Phone 8 and Windows 81 If you are completely new to this subject, I suggest you read the previous two articles about this subject as well What it can do In the demo solution, that sports both a Windows 81 Store application and a Windows Phone 8 application, you will find a shared file DevicePairConnectionHelper2cs containing the updated DevicePairConnectionHelper now supporting the following communication paths Windows Phone 8 to Windows Phone 8 tap send Windows Phone 8 to Windows Phone 8 Bluetooth browsing Windows 81 to Windows 81 WifiDirect browsing Windows 81 to Windows Phone 8 Bluetooth In theory it should support Windows 81 to Windows 81 over tap send as well, but lacking even a single NFC enabled Windows 81 device, this is hard to test for me How to set it up and use it A very important precondition the devices can only find each other when the phone is paired to the Windows 81 computer Now the odd thing is as you have paired the phone to the computer, you will see that is connected on both the computer and the phone, for a very short time And then it flashes off again, so they are not connected This is a bit confusing, but it is normal They now know each other, and that is what s important As far as the the updated DevicePairConnectionHelper goes, it works nearly the same as the previous one, but it has two extras, as far as using it is concerned In the constructor, you can now optionally provide a GUID that describes a Bluetooth Service There is a new boolean property ConnectCrossPlatform that you can set to true then the Window 8 phone will try to connect to a Windows 8 machine using Bluetooth To set it up, you have to take the following things into account In you Windows Phone 8 app manifest, you have to select the ID_CAP_PROXIMITY capability In you Windows 8 app manifest, you will have to the following capabilities Private Networks Client Server Proximity After you have saved you manifest, you have to open the Packageappmanifest manually right click, hit View Code and add a Bluetooth rfcomm service Andrea explains how this is done, and I repeat it here for completeness And that s about what I needed to do The changes to the sample app are very limited I added a checkbox on both of them, and a wrapping ConnectCrossPlatform property that is set by said checkbox Also a minor detail the Reset method in the NfcConnectViewModel no longer stops the PeerFinder first This is especially important for the Windows 81 app it never finds the phone, but the phone is still trying to make a connection If the PeerFinder on Windows 81 is already stopped, you get all kind of funky errors when you select the computer on the phone For those who find the discussion a bit arcane there is, as always, a working demo solution for this article It is built on top of my new not-yet-published WpWinNl library that s basically a cross-platform no, not PCL, just a NuGet Package version of the wp7nl library Well as cross platform as it can be Stay tuned, it will be available soon But tackling this problem took a bit longer than I hoped, so I am a bit behind schedule image Here's a snap of the Solution which compiled for me with no problems image and here's a quick code map picture of the meat of the project, DevicePairConnectionHelper2 image This is perfectly timed to help you build your connected holiday app If you build something cool let us know Smiley IMAGE http://www.secuobs.com/revue/news/485127.shtmlhttp://www.secuobs.com/revue/news/485127.shtml 2013-12-03 22:15:46 - adafruit industries blog : From the desk of Ladyada Coming soon The BLUEFRUIT EZ-Link Bluetooth Shield for Arduino http://www.secuobs.com/revue/news/484124.shtmlhttp://www.secuobs.com/revue/news/484124.shtml 2013-12-02 06:52:05 - SecurityTube.Net : Bluetooth Smart, AKA Bluetooth Low Energy BTLE , is a new modulation mode and link-layer packet format defined in Bluetooth 40 A new class of low-power devices and high-end smartphones are already on the market using this protocol Applications include everything from fitness devices to wireless door locks The Good Bluetooth Smart is well-designed and good at what it does We explain its workings from the PHY layer raw RF all the way to the application layer The Bad Bluetooth Smart's key exchange is weak We will perform a live demonstration of sniffing and recovering encryption keys using open source tools we developed The Ugly A passive eavesdropper can decrypt all communications with a sniffed encryption key using our tools The Fix We implement Elliptic Curve Diffie-Hellman to exchange a key in-band This backward-compatible fix renders the protocol secure against passive eavesdroppers For More Information please visit - http wwwblackhatcom us-13 briefingshtml IMAGE http://www.secuobs.com/revue/news/483769.shtmlhttp://www.secuobs.com/revue/news/483769.shtml 2013-11-19 22:18:40 - adafruit industries blog : NEW PRODUCT Bluefruit EZ-Link Bluetooth Serial Link Arduino Programmer v10 We are excited to add another product to our growing Adafruit Bluefruit line, this time it s the Bluefruit EZ-Link the best Bluetooth Serial Link device ever made Like you, we have purchased all sorts of Bluetooth serial link modules, with http://www.secuobs.com/revue/news/481968.shtmlhttp://www.secuobs.com/revue/news/481968.shtml 2013-11-19 18:59:01 - adafruit industries blog : Bluetooth NES Controller Project The blueNES 2 is a follow-up to the blueNES Instead of using an Arduino, the blueNES 2 uses Adafruit s Bluefruit When connected to ground pins 0 11 on the Bluefruit will send a keyboard command I ve connected mine to an old NES controller It s that simple The controller pinout I found on this Instructables Create http://www.secuobs.com/revue/news/481921.shtmlhttp://www.secuobs.com/revue/news/481921.shtml 2013-11-18 23:50:33 - adafruit industries blog : SNES EZ Key Bluefruit Game Pad Cut the cord and build your own wireless bluetooth game pad Replay those old school retro videos games and cut the cord to build your own wireless SNES controller powered the EZ-Key Bluefruit, Adafruits bluetooth module You can turn any old school game pad into a wireless bluetooth http://www.secuobs.com/revue/news/481712.shtmlhttp://www.secuobs.com/revue/news/481712.shtml 2013-11-17 19:11:24 - securitystream.info : When you pay a visit to the store in a position to buy a starter, there are so incredibly many options choose from from, that frequently get confused in regards to what to buy a Sometimes, we end up acquiring the cheap ones followed byRead more http://www.secuobs.com/revue/news/481498.shtmlhttp://www.secuobs.com/revue/news/481498.shtml 2013-11-15 14:50:36 - Computer Security News : WXII 12's Veronica White takes you the steps you need to take to protect yourself from Bluetooth Phone Hackers http://www.secuobs.com/revue/news/481231.shtmlhttp://www.secuobs.com/revue/news/481231.shtml 2013-11-14 17:17:38 - adafruit industries blog : While Bluetooth has been around forever, Bluetooth Low Energy AKA Bluetooth Smart is a complete rethink of short range, low power wireless communication, and there s a huge amount of interesting around this new standard, as well as some interesting new chips coming out that use it BLE is supported by iOS, Android as of http://www.secuobs.com/revue/news/480998.shtmlhttp://www.secuobs.com/revue/news/480998.shtml 2013-11-14 10:42:51 - SecurityTube.Net : Recognizing a need to support passive bluetooth monitoring in Scapy, Python's interactive monitoring framework, a project was launched to produce this functionality Through this functionality, a new means for interactively observing bluetooth was created along with Python APIs to assist in the development of bluetooth auditing, pentesting and exploitation tools The project supplements the work of Michael Ossman et al by providing Python extensions and Scapy modules which interact with an Ubertooth dongle The project also provides support for other passive bluetooth techniques not present in the current Ubertooth core software such as NAP identification, vendor lookup, extended logging and more In conjunction with this presentation, the source for this project will be released along with distribution packages for easy installation For More Information please visit - wwwblackhatcom usa bh-us-12-speakershtml IMAGE http://www.secuobs.com/revue/news/480894.shtmlhttp://www.secuobs.com/revue/news/480894.shtml 2013-11-09 14:45:15 - securitystream.info : The modern solutions lately has allowed individuals lots of impossible machines most notably best bluetooth headset most of us never thought is usually probable Bluetooth is one of them It is just a sort of wireless social networking that enables a variety of accessories andRead more http://www.secuobs.com/revue/news/479991.shtmlhttp://www.secuobs.com/revue/news/479991.shtml 2013-11-08 15:44:55 - Channel 9 : Today's Hardware Friday continues in our Windows 81 Communication series, this time using Bluetooth with Arduino, courtesy of Michael Osthege Bluetooth communication between Arduino and Windows 81 ------------------------------------------------------- In this sample you can learn how to establish a serial Bluetooth link between an Arduino and a Windows 81 app Building the Sample To test this, you need an Arduino with Bluetooth capabilities for example an Arduino Uno R3 and a JY-MCU Bluetooth module and a Windows 81 device with Bluetooth capabilities A Bluetooth dongle will do as well The sample is provided as a Visual Studio 2013 solution that includes the Windows Store app code and the Arduino code You can open the Arduino code with another IDE as well, but Visual Studio 2013 Preview with the free VisualMicro extension is recommended This sample was inspired by and is based on the Windows Phone 8 implementation of Bluetooth Arduino communication by Marcos Pereira This BUILD talk by Ellick Sung and the related sample application were also helpful in porting the code to WinRT Description Set up the Arduino with a Bluetooth module, two LEDs and a potentiometer, according to the following diagram image Communication with the Bluetooth module is accomplished using the SoftwareSerialh library The Windows 81 app has to declare Bluetooth serial communication capabilities in Packageappxmanifest To deploy the Arduino code with VisualMicro, right click the Project in the Solution Explorer and select Debug Start new instance When the Windows 81 app starts, you can establish a connection and control the LEDs, or subscribe to analog inputs as seen in the following video Bluetooth communication between Arduino and Windows 81 ------------------------------------------------------- Introduction Recently, after being inspired by this video of Arduino Bluetooth communication with Windows Phone 8 by Marcos Pereira, I got myself some new devices to play with Arduino Uno R3 in a starter kit link JY-MCU Bluetooth module link and a few extra cables The thing is I don t have a Windows Phone 8 yet and the Windows Phone 78 APIs do not support this kind of Bluetooth communication But I have a Surface RT and with Windows 81 the RFCOMM API can be used to establish a serial link to the Arduino Arduino and Visual Studio It happens that my developing skills are quite limited to C and when I had to develop some Kinect software with Processing in early 2012, I almost freaked out Arduino code is written in C and the standard Arduino IDE is derived from the Processing IDE Fortunately there s the Visual Studio extension VisualMicro which brings a very intuitive Arduino support for VS2010-VS2013 not available for Express versions You can get VisualMicro for free at http visualmicrocodeplexcom They also offer a pro-version 20 with support for Breakpoint-Debugging The Arduino IDE should be installed as well and you have to tell the VisualMicro extension where to find it Preparing the Code The Arduino has to be loaded with some code to send and receive Bluetooth messages I created a Visual Studio solution with a blank Windows 81 app and a new Arduino sketch and added a new header file SoftwareSerialh Fig2 The code of SoftwareSerialh can be found here IMAGE http://www.secuobs.com/revue/news/479827.shtmlhttp://www.secuobs.com/revue/news/479827.shtml 2013-11-05 15:24:52 - adafruit industries blog : Leon Snyman s Magic MonitorX is a handy little app for displaying data on an iOS device over Bluetooth - Magic Monitor is a unique customizable application for displaying different values from MCU s like ARDUINO, Propeller, Basic Stamp, PIC s or other peripherals that communicate via UART The application uses the HID profile over bluetooth connection which http://www.secuobs.com/revue/news/479097.shtmlhttp://www.secuobs.com/revue/news/479097.shtml 2013-11-05 01:48:11 - adafruit industries blog : Tutorial- How to make a Bluetooth Arcade Stick by Quinn Dunki The Adafruit Learning System If you re into playing classic video games, there s just no substitute for an arcade joystick and buttons The clicky feel, the ball top stick, it s all part of the experience Not only that, but these games were originally tuned http://www.secuobs.com/revue/news/479010.shtmlhttp://www.secuobs.com/revue/news/479010.shtml 2013-11-04 17:29:32 - LinuxSecurity.com Latest News : LinuxSecuritycom A DIY cyborg has a surgically implanted chip that reads his body temperature and delivers the data to a mobile device Warning his subcutaneous sensor might make your own skin crawl http://www.secuobs.com/revue/news/478900.shtmlhttp://www.secuobs.com/revue/news/478900.shtml 2013-11-04 08:08:12 - securitystream.info : The most recent engineering now means people most unbelievable items such as best bluetooth headset 2013 we will never imagined could very well be plausible Bluetooth is one It s actually a sorts of cordless media that allows unique gadgets along with tools to always beRead more http://www.secuobs.com/revue/news/478794.shtmlhttp://www.secuobs.com/revue/news/478794.shtml 2013-10-14 22:00:30 - adafruit industries blog : Swap_File in the Adafruit forums posted up about his incredibly well-documented Tron suit cosplay complete with color changing disc and voice changing helmet My Tron suit costume is complete and was shown at CONvergence 2013 Pictures on Flickr, and Code, Schematic, and DXF files on Github The Helmet is a inexpensive eBay motorcycle helmet with http://www.secuobs.com/revue/news/474557.shtmlhttp://www.secuobs.com/revue/news/474557.shtml 2013-10-11 00:11:57 - adafruit industries blog : Make your Star Trek costume go live by connecting your Trekkie communicator with your phone HAPPY HALLOWEEN Each weekday this month we ll be bringing you ideas and projects for an Electronic Halloween Expect wearables, hacks mods, costumes and more here on the Adafruit blog Working on a project for Halloween this year Share it http://www.secuobs.com/revue/news/473944.shtmlhttp://www.secuobs.com/revue/news/473944.shtml 2013-10-04 14:26:56 - adafruit industries blog : Adafruit BLUEFRUIT Bluetooth controller makes a great Bluetooth SNES Controller for the iPad NEW PRODUCT Bluefruit EZ-Key 12 Input Bluetooth HID Keyboard Controller In stock and shipping now Create your own wireless Bluetooth keyboard controller in an hour with the Bluefruit EZ-Key it s the fastest, easiest and bestest Bluetooth controller We spent years http://www.secuobs.com/revue/news/472606.shtmlhttp://www.secuobs.com/revue/news/472606.shtml 2013-09-27 22:13:47 - adafruit industries blog : NEW PRODUCT Bluefruit EZ-Key 12 Input Bluetooth HID Keyboard Controller In stock and shipping now Create your own wireless Bluetooth keyboard controller in an hour with the Bluefruit EZ-Key it s the fastest, easiest and bestest Bluetooth controller We spent years learning how to develop our own custom Bluetooth firmware, and coupled with our http://www.secuobs.com/revue/news/471296.shtmlhttp://www.secuobs.com/revue/news/471296.shtml 2013-09-26 03:46:23 - adafruit industries blog : COMING SOON Bluefruit EZ-Key 12 Input Bluetooth HID Keyboard Controller, as in this week IT IS HERE FINALLY Create your own wireless Bluetooth keyboard controller in an hour with the Bluefruit EZ-Key it s the fastest, easiest and bestest Bluetooth controller We spent years learning how to develop our own custom Bluetooth firmware, and http://www.secuobs.com/revue/news/470886.shtmlhttp://www.secuobs.com/revue/news/470886.shtml 2013-09-07 02:34:25 - adafruit industries blog : An excellent how-to by Matt Hawkins via raspberrypi-spycouk I ve recently got hold of a Perixx Bluetooth keyboard Model 804 which I plan to use with my tablet for typing and future Raspberry Pi projects I chose the Perixx 804 as it uses a UK keyboard layout The black version is a standard PC layout http://www.secuobs.com/revue/news/467166.shtmlhttp://www.secuobs.com/revue/news/467166.shtml 2013-07-29 19:32:06 - adafruit industries blog : Don t Get Sucker Pumped Krebs on Security As the Oklahoma case shows, gas pump skimmers have moved from analog, clunky things to the level of workmanship and attention to detail that is normally only seen in ATM skimmers Investigators in Oklahome told a local news station that the skimmer technology used in this case http://www.secuobs.com/revue/news/459837.shtmlhttp://www.secuobs.com/revue/news/459837.shtml 2013-07-26 14:59:50 - Channel 9 : A couple weeks ago we highlighted something that was a Hit of Build 2103 my personal award Chris Walker and SecretLabs had a table which was always packed with people and everyone seemed interested and impressed , You don't have to be a Secret Agent to develop for the AGENT SmartWatch You just have to read this Today we're taking another look, this time into one specific detail, brought to us by Mike Hole Agent Emulator Bluetooth Device Communications ------------------------------------------------ Yay the Agent smart watch preview SDK is available You can find it here http wwwagentwatchescom One of the 1st questions that springs to mind is how do we go about some sort of Bluetooth communication with anything from the emulator Then I spotted this in the comments section of the Agent kickstarter page So that got me looking onto how this works so I set about following the instructions and here is the results of my findings PC Settings image The diagram above depicts how your host PC should be set up Basically what you see here is that standard Bluetooth on the host machine is capable of providing COM Port based communication COM ports go back to the days of RS232 serial and Centronics parallel communicationThey take care of the transmission of bytes between machines, Once you have a COM port open each device can send bytes down the wire To enable paired devices to open the COM port on your host PC you need to ensure that there is an incoming com port this is done in the Bluetooth settings You need one incoming COM port, this is done by tapping the add button and selecting incoming as the connection type Emulator settings When you install the Agent SDK it installs the emulator with a standard settings configuration file if you have used the defaults then this config file will be located here The diagram above depicts how your host PC should be set up Basically what you see here is that standard Bluetooth on the host machine is capable of providing COM Port based communication COM ports go back to the days of RS232 serial and Centronics parallel communicationThey take care of the transmission of bytes between machines, Once you have a COM port open each device can send bytes down the wire To enable paired devices to open the COM port on your host PC you need to ensure that there is an incoming com port this is done in the Bluetooth settings The Agent Application NOTE The rest of the code mentioned here will be based upon the AGENT SDK v011 June 2013, Preview Release and will be subject to change as the SDK gets closer to it s version 1 release Given that the Agent emulator has a virtual COM port all the work is carried out using Stream based objects The SystemIOPortsSerialPort object is derived from SystemStream, so if you are familiar with working with streams then this should be familiar territory To add a serial port to your code that uses the host Bluetooth connection you just add the following line of code The Windows Phone Application A good place to start when writing a Bluetooth application for Windows Phone 8 is the Bluetooth App to device sample NOTE One thing to remember when writing a Windows Phone application that uses Bluetooth is to set the ID_CAP_PROXIMITY app capability within your WMAppManifestxml file double click the file within VisualStudio The source code can be found here https projectsdevelopernokiacom agentexamples browser agentexamples BTW, if you're interested in see more app's, run, don't walk, to Watch App and Watch Face Showcase and also AGENTContrib which I think is going to get its own post in the future Wink IMAGE http://www.secuobs.com/revue/news/459320.shtmlhttp://www.secuobs.com/revue/news/459320.shtml 2013-07-24 14:03:39 - adafruit industries blog : StickNFind sensors are the size of a thick US quarter and cost 50 for a pack of two Put them on whatever it is you want to keep track of and monitor find them with your smart phone s Radar Screen App You can set an alarm to trigger when a distance boundary is exceeded Because the app http://www.secuobs.com/revue/news/458854.shtmlhttp://www.secuobs.com/revue/news/458854.shtml 2013-07-22 04:32:11 - SecurityTube.Net : Joseph Paul Cohen, PhD student at University of Massachusetts Boston TCP IP has tools such as netcat and nmap to explore devices and create socket connections Bluetooth has sockets but doesn t have the same tools blucat fills this need for the Bluetooth realm blucat is a perfect debugging tool for bluetooth applications or a device exploration tool It can also be an administration tool for bluetooth enabled devices More information is at http blucatsourceforgenet Biography Joseph is a PhD student at the University of Massachusetts Boston He has worked for large finance, IT consulting, and startup software companies He now focuses on computer science research in machine learning and cyber security education For More Information please visit - http wwwbsidesbostoncom IMAGE http://www.secuobs.com/revue/news/458252.shtmlhttp://www.secuobs.com/revue/news/458252.shtml 2013-07-10 06:15:14 - adafruit industries blog : Swap_File in the Adafruit forums posted up about his incredibly well-documented Tron suit cosplay complete with color changing disc and voice changing helmet My Tron suit costume is complete and was shown at CONvergence 2013 Pictures on Flickr, and Code, Schematic, and DXF files on Github The Helmet is a inexpensive eBay motorcycle helmet with http://www.secuobs.com/revue/news/455976.shtmlhttp://www.secuobs.com/revue/news/455976.shtml 2013-07-01 07:19:59 - adafruit industries blog : Check out this project from Kevin in the Adafruit Forums on the topic of 16 channel Servo board with IOIO I need some help to create the java code for running the Adafruit 16 channel servo breakout board with the IOIO I am creating a player guitar of sorts and have a working prototype using http://www.secuobs.com/revue/news/454666.shtmlhttp://www.secuobs.com/revue/news/454666.shtml 2013-06-26 11:03:36 - adafruit industries blog : Hands-tied kit Designer tests bluetooth glove phone on BBC Increasingly manufacturers and developers are experimenting with wearable technology Recent innovations include clothes that display twitter updates, mobile phone headsets, Google glasses, mobile phones that work in conjunction with wristwatches, and bracelets that track your fitness regime As an experiment in wearable tech, and to highlight http://www.secuobs.com/revue/news/453722.shtmlhttp://www.secuobs.com/revue/news/453722.shtml 2013-06-11 14:52:32 - Network World on Security : A Trojan that spreads itself via Bluetooth and another that's received a mobile upgrade to steal SMS banking codes have been discovered by security researchers http://www.secuobs.com/revue/news/450705.shtmlhttp://www.secuobs.com/revue/news/450705.shtml 2013-06-06 19:43:12 - SecurityTube.Net : Jonathan Knudsen, Principal Systems Engineer at Codenomicon, performs testing of Bluetooth L2CAP implementation on Android phone Indicative of testing process for firmware software hardware built on Bluetooth, ZigBee, and BlueZ protocols For more videos and technical deep dives, go to the Codenomicon Labs site at wwwcodenomiconcom labs To request an invitation to CodenomiCON 2013 on July 30th in Las Vegas, go to wwwcodenomiconcom campaign blackhat2013 Codenomicon finds security vulnerabilities others can't find Companies rely on Codenomicon's solutions to discover zero-day vulnerabilities that cause Denial of Service DoS and data leakage, which are the unknown vulnerabilities Advanced Persistent Threats APTs use to break into systems Codenomicon is known for Defensics software for security stress-testing aka 'fuzzing' of software firmware hardware, Clarified Situation Awareness solution for Computer Emergency Response Teams CERTs and Network Operations Centers NOCs , and Fuzz-o-Matic application testing-as-a-service Fuzzing is a methodology to manage and assess unknown vulnerability exposure Fuzz testing is part of all modern secure software development lifecycles such as Microsoft SDL, Cisco SDL, Adobe SPLC secure product life cycle and others Codenomicon's customers include Alcatel-Lucent, AT T, Cisco Systems, Microsoft, Motorola, Google, Verizon, Nokia Siemens Networks, Huawei, and T-Systems IMAGE http://www.secuobs.com/revue/news/449854.shtmlhttp://www.secuobs.com/revue/news/449854.shtml 2013-05-28 16:01:07 - Dark Reading All Stories : Each presentation will dip into clever exploits and workarounds for major protocols http://www.secuobs.com/revue/news/448070.shtmlhttp://www.secuobs.com/revue/news/448070.shtml 2013-05-16 16:01:49 - Schneier on Security : Here is a new lock that you can control via Bluetooth and an iPhone app That's pretty cool, and I can imagine all sorts of reasons to get one of those But I'm sure there are all sorts of unforeseen security vulnerabilities in this system And, even worse, a single vulnerability can affect all the locks Remember that vulnerability found http://www.secuobs.com/revue/news/445849.shtmlhttp://www.secuobs.com/revue/news/445849.shtml 2013-05-13 14:59:29 - adafruit industries blog : NEW PRODUCT PIXEL Guts Kit Bluetooth Controlled 32 32 RGB LED Matrix Kit new video Control a 32 32 LED matrix with your Android device or PC over Bluetooth, no soldering or coding required This is a 32 32 1024 total LED RGB matrix connected to a custom IOIO Mint so that custom graphics can be http://www.secuobs.com/revue/news/445043.shtmlhttp://www.secuobs.com/revue/news/445043.shtml 2013-05-09 21:02:07 - adafruit industries blog : NEW PRODUCT PIXEL Guts Kit Bluetooth Controlled 32 32 RGB LED Matrix Kit Control a 32 32 LED matrix with your Android device or PC over Bluetooth, no soldering or coding required This is a 32 32 1024 total LED RGB matrix connected to a custom IOIO Mint so that custom graphics can be sent http://www.secuobs.com/revue/news/444485.shtmlhttp://www.secuobs.com/revue/news/444485.shtml 2013-04-21 12:20:27 - securitystream.info : They address many causes which enable it to help you get rid for the circumstances, which are most likely irritating Insulation-Make a trip to Home Depot or Lowes and purchase some weather stripping for old drafty windows This phone has MP3 player and is alongRead more http://www.secuobs.com/revue/news/440847.shtmlhttp://www.secuobs.com/revue/news/440847.shtml 2013-04-18 00:40:34 - adafruit industries blog : NEW PRODUCT Bluetooth 40 USB Module v21 Back-Compatible Add Bluetooth capability to your computer super fast with a USB BT 40 adapter This adapter is backwards compatible with v21 and earlier, but also supports the latest v40 Bluetooth Low Energy Inside lies a CSR8510 Bluetooth USB host We ve used this with great success on http://www.secuobs.com/revue/news/440280.shtmlhttp://www.secuobs.com/revue/news/440280.shtml 2013-03-29 16:32:50 - SecurityTube.Net : Mike Ryan We are entering a golden age of affordable broad spectrum wireless sniffing I will demonstrate how to use the new generation of wireless hacking tools to intercept and inject Bluetooth Low Energy communications Bluetooth LE, aka, Bluetooth Smart, is a new low power mode defined in the recent Bluetooth 40 spec Found in recent high-end smartphones, it is used in sports devices, sensors, and will soon appear in some medical devices This talk covers both the Bluetooth LE protocol and the tools and techniques used to study it This talks features live demonstrations of sniffing Bluetooth LE using Ubertooth and other hardware to sniff Bluetooth LE The software presented in the talk was developed by Mike Ryan and is available open source as a part of the Ubertooth project Mike Ryan likes to take things apart, break them, and put them back together better than before He recently joined the Ubertooth team to sniff out security issues in the latest lower-powered version of Bluetooth Bluetooth Low Energy LE Mike gave a WIP talk on his work at Toorcon 14 IMAGE http://www.secuobs.com/revue/news/436650.shtmlhttp://www.secuobs.com/revue/news/436650.shtml 2013-02-25 15:27:46 - Vigilance vulnérabilités publiques : Lorsque le noyau Linux est compilé avec le support Bluetooth HIDP, un attaquant local peut employer l'ioctl HIDPCONNADD, afin d'obtenir un fragment de la mémoire http://www.secuobs.com/revue/news/429827.shtmlhttp://www.secuobs.com/revue/news/429827.shtml 2013-02-15 07:34:47 - adafruit industries blog : Using a Wii controller with your Raspberry Pi, Gertboard, Bluetooth and Python Matt Hawkins from Raspberry Pi Spy has done the leg-work enabling Pi users to use a Wii controller along with a Bluetooth USB dongle to send inputs to the Raspberry Pi It uses a Python library called CWiid I imagine this is http://www.secuobs.com/revue/news/427931.shtmlhttp://www.secuobs.com/revue/news/427931.shtml 2013-02-12 13:31:18 - adafruit industries blog : Pulsar Bluetooth Wireless Heart Rate Monitor Dear Ladyada Adafruit folks, As a professional hardware engineer with little time, I have been working evenings and weekends to create a Bluetooth 40 heart rate monitor without a chest strap all open source hardware and design for such devices should not be proprietary or expensive I need http://www.secuobs.com/revue/news/427109.shtmlhttp://www.secuobs.com/revue/news/427109.shtml 2013-02-04 14:01:30 - SecurityTube.Net : Recognizing a need to support passive bluetooth monitoring in Scapy, Python's interactive monitoring framework, a project was launched to produce this functionality Through this functionality, a new means for interactively observing bluetooth was created along with Python APIs to assist in the development of bluetooth auditing, pentesting and exploitation tools The project supplements the work of Michael Ossman et al by providing Python extensions and Scapy modules which interact with an Ubertooth dongle The project also provides support for other passive bluetooth techniques not present in the current Ubertooth core software such as NAP identification, vendor lookup, extended logging and more In conjunction with this presentation, the source for this project will be released along with distribution packages for easy installation Ryan Holeman resides in Austin Texas where he works as a software developer specializing in backend services He has a Masters of Science in Software Engineering and has published papers though ICSM and ICPC His spare time is mostly spent digging into various network protocols and shredding local skateparks IMAGE http://www.secuobs.com/revue/news/425603.shtmlhttp://www.secuobs.com/revue/news/425603.shtml 2013-01-08 14:45:26 - adafruit industries blog : Tethercell lets you control mostly anything with Bluetooth hands-on The Verge The internet of things is great, in theory the problem is that you need new connected stuff to replace your old unconnected stuff Tethercell is trying to fix that it s basically a plastic sleeve that converts an AAA battery into an AA, http://www.secuobs.com/revue/news/420452.shtmlhttp://www.secuobs.com/revue/news/420452.shtml 2012-11-29 01:53:58 - Slashdot Your Rights Online : First time accepted submitter ChanukahZombie writes The City of Calgary, AB has introduced a new traffic congestion timing information platform for drivers 'The system collects the publicly available data from Bluetooths to estimate the travel time and congestion between points along those roads and displays the information on overhead message boards to motorists' Currently only available on the Deerfoot Trail the city's main highway artery but will be 'expanded in the future to include sections of Crowchild Trail and Glenmore Trail in the southwest' As for privacy concerns the city says it cannot connect the MAC address collected to the device owner IMAGE IMAGE Share on Google Read more of this story at Slashdot IMAGE IMAGE IMAGE IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/414017.shtmlhttp://www.secuobs.com/revue/news/414017.shtml 2012-11-23 22:51:27 - adafruit industries blog : In the comments to our hackfriday post, Chris told us about this project he s been working on It s an Arduino-based Bluetooth game controller He writes I ve been on mission lately to design a handheld bluetooth game controller I ve made a prototype in the past but, it never was really usable as a gaming device Although the concept http://www.secuobs.com/revue/news/413128.shtmlhttp://www.secuobs.com/revue/news/413128.shtml 2012-11-18 19:12:35 - SecurityTube.Net : Bluetooth traffic analysis is hard Whilst other radio communications technologies 80211, Zigbee support promiscuous mode, Bluetooth dongles cannot monitor all traffic due to a pseudo-random frequency hopping system Until recently the only way to monitor Bluetooth traffic was to use expensive software radio peripherals Project Ubertooth is an open hardware device that has opened up new opportunities to capture Bluetooth traffic between devices, even in non-discoverable mode As part of this presentation I will demonstrate the latest frequency hopping functionality that allows us to follow a connection as it changes frequency 1600 times per second and capture the packet data for analysis The talk will also explain the technical challenges that have been overcome while attempting to implement Bluetooth protocol analysis on affordable hardware, such as the obscure error correction methods that many manufacturers have chosen not to implement in their products The demonstrations will include tools written to work with the Ubertooth device as well as integration with both Kismet and Wireshark Additionally some of the tools will also work with the GnuRadio platform and the USRP hardware, this will be demonstrated if time allows DOMINIC SPILL BIO Dominic Spill has been investigating Bluetooth security using software radio since 2007 In that time he has built the first promiscuous Bluetooth packet sniffer based on software radio and collaborated with other researchers to produce open source Bluetooth traffic analysis tools He is currently working as a developer and security researcher in Melbourne IMAGE http://www.secuobs.com/revue/news/412097.shtmlhttp://www.secuobs.com/revue/news/412097.shtml 2012-11-13 06:23:20 - SecurityPark.net : With the promotion of RFID technology in China, RFID technology has been applied to some extents, and also has a huge market and development margin And the UHF Bluetooth technology has also been demonstrated the advancement at the industry level DAILY RFID, as one of the most professional and trustful RFID company, has released its latest Bluetooth UHF RFID Reader DL930B to offer effective and a more http://www.secuobs.com/revue/news/411053.shtmlhttp://www.secuobs.com/revue/news/411053.shtml 2012-11-12 12:45:23 - adafruit industries blog : Here s a MaKey MaKey Bluetooth Hat taking advantage of a Bluetooth module to go wireless Every Monday is Makey Makey Monday here at Adafruit The MaKey MaKey by Jay Silver and Eric Rosenbaum, made by JoyLabz Ever played Mario on Play-Doh or Piano on Bananas Alligator clip the Internet to Your World MaKey MaKey http://www.secuobs.com/revue/news/410873.shtmlhttp://www.secuobs.com/revue/news/410873.shtml 2012-10-11 21:27:03 - adafruit industries blog : Gerald used a combination of the Adafruit Ultimate GPS module, MRF24J40 wireless modules, and a bluetooth module to send wirelessly send remote GPS information to his Android phone The whole goal of the project is to take away the wireless distance limits of bluetooth, and allow him to control an RC boat with his Android http://www.secuobs.com/revue/news/405120.shtmlhttp://www.secuobs.com/revue/news/405120.shtml 2012-10-11 05:37:08 - Hak5 Xvid Large : Check out how you can start gaming with a Playstation 3 controller on Android http://www.secuobs.com/revue/news/404967.shtmlhttp://www.secuobs.com/revue/news/404967.shtml 2012-08-27 21:46:58 - Security Bloggers Network : iAlertTag creates wireless link with phone and tag so when they are separated, both devices vibrate and produce an alarm sound http://www.secuobs.com/revue/news/396096.shtmlhttp://www.secuobs.com/revue/news/396096.shtml 2012-08-07 07:03:35 - SecurityTube.Net : A disgruntled former employee of Texas Auto Center chose a creative way to get back at the Austin-based dealership He hacked into the company's computers and remotely activated the vehicle-immobilization system, which triggered the horn and disabled the ignition system in more than 100 of the vehicles The dealership had installed the system in their cars as a way to deal with customers who fell behind on their payments Police arrested the man and charged him with breach of computer security His legal status was unclear as of our deadline for this story Out-of-control honking horns may be annoying, but other types of hacking, such as cutting the engine of unsuspecting drivers, could have deadly consequences Although most experts agree there isn't an immediate risk, vehicle hacking is something that bears watching With the increasing computerization of vehicles of all types, observers have longer-term concerns over the vulnerabilities of trucks, delivery vans, rental cars and consumer autos A malicious hacker could, in theory, disable the vehicles, re-route GPS signals or otherwise put employees, customers and the company as a whole in danger IMAGE http://www.secuobs.com/revue/news/392075.shtmlhttp://www.secuobs.com/revue/news/392075.shtml 2012-08-06 15:02:50 - LinuxSecurity.com Latest News : LinuxSecuritycom A disgruntled former employee of Texas Auto Center chose a creative way to get back at the Austin-based dealership He hacked into the company's computers and remotely activated the vehicle-immobilization system, which triggered the horn and disabled the ignition system in more than 100 of the vehicles http://www.secuobs.com/revue/news/391862.shtmlhttp://www.secuobs.com/revue/news/391862.shtml 2012-07-05 14:46:20 - adafruit industries blog : microController BT Android Apps on Google Play Kevin writes - I wanted to share an app that I created to control and monitor my various electronics projects It uses Bluetooth, is highly customizable and is very easy to integrate I always put a lot of thought into how I m going to control and monitor http://www.secuobs.com/revue/news/385568.shtmlhttp://www.secuobs.com/revue/news/385568.shtml 2012-06-15 17:13:30 - NovaInfosec.com : Bluetooth started off very insecure with a number of attacks popping up to take advantage of various vulnerabilities in the early and mid-2000s So many attack techniques came out that a whole vernacular appeared during this time As per an earlier GCNcom post circa 2005, some of these terms included BlueSnarfing, BlueBugging, and BlueJacking Other attack terms involved BluePrinting, BlueSmacking, BlueBumping, BlueDumping, Car Whisperer, and BlueChop You could use these techniques to do some pretty fun stuff For example, one included the ability to talk to people in their cars as they drove by Car Whisperer Other individuals chose to use these attacks in malicious ways, eg, downloading all of a person s contact data from their phone BlueSnarfing Since then the security of Bluetooth has vastly improved One of the key improvements involved manufacturers disabling discovery mode by default Lately, we ve mostly recognized Bluetooth as being fairly low risk as long as discovery mode remains disabled until needed Holes still exist though just look at the recent capability built into Flame Correlations causation of the day Flame using BlueTooth - NIST updating Bluetooth guidance Just a thought Anyway with well maintained publications like this guidance from NIST, designers, http://www.secuobs.com/revue/news/381816.shtmlhttp://www.secuobs.com/revue/news/381816.shtml 2012-06-06 17:39:12 - SecuraBit : Hosts Chris Gerling secbitchris Chris Mills - chrisam Andrew Borel andrew_secbit Mike Bailey mpbailey1911 Guests Jason Andress jason_andress Ronin r0wnin Topics APT and Penetration Testing Bluetooth Hacking and Reconnaissance News Items Google Warning Users About State-Sponsored Attacks threatpost http mthreatpostcom en_us blogs google-warning-users-about-state-sponsored-attacks-060512 Apple Releases Guide To iOS Security TechCrunch http mtechcrunchcom 2012 06 04 apple-releases-guide-to-ios-security Flame http://www.secuobs.com/revue/news/379884.shtmlhttp://www.secuobs.com/revue/news/379884.shtml 2012-06-02 06:24:48 - Computer Security News : The Flame malware, detailed publicly for the first time Monday, has been described by security researchers working overtime to unravel its inner workings as the largest and most complex piece of malicious code they've ever seen Since malware writers tend to keep an eye on the competition, expect some of the capabilities built into Flame --aka http://www.secuobs.com/revue/news/379127.shtmlhttp://www.secuobs.com/revue/news/379127.shtml 2012-06-01 23:56:14 - Ars Technica Risk Assessment : Flame attackers could even surveil smartphones not infected by the malware http://www.secuobs.com/revue/news/379089.shtmlhttp://www.secuobs.com/revue/news/379089.shtml 2012-06-01 19:29:02 - Network World on Security : The Bluetooth functionality of the Flame cyberespionage malware could potentially be used to pinpoint the physical location of infected devices and allow local attackers to extract data if they get in close proximity to the victims, according to security researchers from antivirus vendors Symantec and Kaspersky Lab http://www.secuobs.com/revue/news/379042.shtmlhttp://www.secuobs.com/revue/news/379042.shtml 2012-06-01 03:56:12 - Symantec Connect Security Response Billets : W32Flamer is possibly the only Windows based threat we have encountered which uses Bluetooth It is yet another indicator that W32Flamer is not only exceptional, but that it is a comprehensive information gathering and espionage tool The CrySyS laboratory has previously documented the technical details of Bluetooth in W32Flamer But, what does this actually mean for potential victims targeted by Flamer What can an attacker accomplish using Bluetooth The Bluetooth functionality in Flamer is encoded in a module called BeetleJuice This module is triggered according to configuration values set by the attacker When triggered it performs two primary actions 1 The first is to scan for all Bluetooth devices in range When a device is found, its status is queried and the details of the device recorded including its ID presumably to be uploaded to the attacker at some point 2 The second action is to configure itself as a Bluetooth beacon This means that a computer compromised by W32Flamer will appear when any other Bluetooth device scans the local area And there is more In addition to enabling a Bluetooth beacon, Flamer encodes details about the infected computer see Figure 1 and then stores these details in a special 'description' field When any other device scans for Bluetooth-enabled devices, this description field will be displayed These are the facts of how Flamer uses Bluetooth And what can the attacker do with this functionality There are several potential avenues available Scenario 1 Identification of victim social networks By continuously monitoring the Bluetooth devices within range of a W32Flamer compromised computer, the attacker can build a profile of various devices encountered throughout the day This will be particularly effective if the compromised computer is a laptop because the victim is more likely to carry it around Over time, as the victim meets associates and friends, the attackers will catalog the various devices encountered, most likely mobile phones This way the attackers can build a map of interactions with various people and identify the victim's social and professional circles Scenario 2 Identification of victim physical locations When compromising a victim's computer, the attacker has determined that this particular victim and their location is a high-priority target While the building that the victim resides in can be known, the actual office is not identified The attacker, however, could identify the location of compromised devices using Bluetooth Bluetooth operates over radio waves By measuring the strength of a radio wave signal, an attacker can measure if he is she is getting closer or further away to a particular device With the Bluetooth beacon turned on, and with the details of a particular compromised device available in the description field, it is straightforward for the attacker to identify the physical location of a W32Flamer compromised computer or device An alternative to this is that rather than identifying the actual compromised computer, the attacker identifies a mobile phone which belongs to the victim The Beetlejuice module already has retrieved a list of all the devices IDs which are near to the infected computer and so the attacker knows what devices belong to the victim It is likely that one of the devices is a mobile phone which the victim carries most times Now the attacker has the ability to passively monitor for the victim, without installing or modifying the victim's devices Bluetooth monitoring devices could be placed in airports, train stations, or any transport hub, and listen for the ID values of any known victim device Some attacks have even identified Bluetooth devices more than one mile away The more sinister aspect of this passive sniffing is that it allows the attacker to pinpoint a victim and, therefore, more easily track them in the future Scenario 3 Enhanced information gathering As described in our previous blog, a substantial part of Flamer s functionality is implemented in Lua scripts, or 'apps' which are downloaded from the FLAME 'app repository It would be trivial for an attacker to upload a new malicious Bluetooth Lua app into the FLAME store for download onto a compromised device With increase functionality an attacker, having identified various Bluetooth devices in range, could perform numerous attacks Steal contacts from an address book, steals SMS messages, steals images, and more Use a device to eavesdrop Connect a compromised computer to a nearby device and enable handsfree communication When the device is brought into a meeting room, or used to make a call, the attackers could listen in Exfiltrate already-stolen data through any nearby device's data connection This would bypass any firewalls or network controls An attacker within one mile of the target could use their own Bluetooth-enabled device for this It is possible that there is undiscovered code within W32Flamer which already achieves some of these goals For example, although we have not found network code near the 'beacon' code, one compromised computer may connect to another computer using Bluetooth If the second computer is using a secured network and was infected through a USB connection, potentially the only network available would be a Bluetooth connection back to the first compromised computer The code to achieve this may already exist in Flame The various theories described here are all practical attacks, easily to implement by a skilled attacker The sophistication of W32Flamer indicates that the attackers are certainly technically skilled and such attacks are well within their capabilities http://www.secuobs.com/revue/news/378893.shtmlhttp://www.secuobs.com/revue/news/378893.shtml 2012-05-23 09:51:40 - SecurityTube.Net : In this video we see how to scan for visible BlueTooth Devices and save then to a LOG You can do this on pretty much any Linux Distro including Maemo on a Nokia N900 a tool called hcitool is used in this video DESCRIPTION hcitool is used to configure Bluetooth connections and send some spe- cial command to Bluetooth devices If no command is given, or if the option -h is used, hcitool prints some usage information and exits OPTIONS -h Gives a list of possible commands -i The command is applied to device hciX , which must be the name of an installed Bluetooth device If not specified, the command will be sent to the first available Bluetooth device IMAGE http://www.secuobs.com/revue/news/377139.shtmlhttp://www.secuobs.com/revue/news/377139.shtml 2012-05-19 07:20:32 - SecurityTube.Net : Previously hacking was restricted to computers or computer networks only but as the time changed this field has grown up and now mobile phones, especially the multimedia phones are more prone to hacking This is a demo on how to get started with Bluetooth hacking using BackTrack Learn how to pair up your bluetooth device, using blueprint,bluesmash and lots more IMAGE http://www.secuobs.com/revue/news/376485.shtmlhttp://www.secuobs.com/revue/news/376485.shtml 2012-05-19 07:20:32 - SecurityTube.Net : Information gathering is the first step in the quest to break into target system Even BlueTooth devices can be fingerprinted or probed for information gathering using the technique known as BluePrinting Using this one can determine manufacturer, model, version, etc for target bluetooth enabled device This is part 2 on how to get started with Bluetooth hacking using BackTrack Learn how to your hcidconf file, blueprint,bluesmash and lots more http wwwinsecurein bluetooth_hackingasp IMAGE http://www.secuobs.com/revue/news/376484.shtmlhttp://www.secuobs.com/revue/news/376484.shtml 2012-03-30 19:04:11 - adafruit industries blog : NEW PRODUCT Smart Cord A2DP Bluetooth, 120v 10amp 1200 Watt Extension Cord This is Zsmart s patent pending electrical extension cord with manual and Bluetooth wireless technology control The Bluetooth wireless range of 30 feet or more, depending on environment Does not require line of site This is an inexpensive way to control on off http://www.secuobs.com/revue/news/367215.shtmlhttp://www.secuobs.com/revue/news/367215.shtml 2012-03-23 17:43:18 - Raymond.CC Blog : Nowadays almost everything is wireless and you no longer have all those cables cluttering your workspace If you want to use a wireless keyboard, you should opt for one that supports Bluetooth if your computer comes with Bluetooth because it doesn t require an additional receiver that uses an extra USB port Being a fan of Microsoft keyboard, I found a slim and small keyboard sold by Microsoft called Microsoft Bluetooth Mobile Keyboard 6000 that uses Bluetooth for wireless connectivity Other than that, it is a shorter keyboard because of the How to Install Bluetooth Keyboard on Windows 7 is a post from RaymondCC Blog http://www.secuobs.com/revue/news/365728.shtmlhttp://www.secuobs.com/revue/news/365728.shtml 2012-03-21 07:40:09 - Hak5 Xvid Large : This time on the show, locking down your PC with proximity and a little bluetooth magic -- I'll be showing you how Then, what's the IEEE on about these days Darren reports from South-by-South-West More fun bash tips and VPN security - who do you trust All that and more, this time on Hak5 http://www.secuobs.com/revue/news/365040.shtmlhttp://www.secuobs.com/revue/news/365040.shtml 2012-03-18 17:21:12 - Raymond.CC Blog : I have always been a huge fan of free tools developed by Nir Sofer One of his latest tool is BluetoothView that claims to allow you to monitor the Bluetooth activity around you Basically BluetoothView periodically tries to detect any discoverable Bluetooth devices in background and then logs it in the program Window with information such as Device Name, Bluetooth Address, Major Device Type, Minor Device Type, First Detection Time, Last Detection Time, and more You will also receive a balloon notification when a new Bluetooth has been discovered Since BluetoothView Detects Nearby Enabled Bluetooth Devices is a post from RaymondCC Blog http://www.secuobs.com/revue/news/364364.shtmlhttp://www.secuobs.com/revue/news/364364.shtml 2012-02-13 21:00:09 - Intrepidus Group Insight : Just a quick follow up to last week s post, defining what NAP, UAP, and LAP actually are and where they come from They are the 3 components of 6 byte BD_ADDR Bluetooth device address NAP Non-significant Address Part 2 bytes These are assigned by the IEEE and are publicly available here Depending on who makes http://www.secuobs.com/revue/news/357545.shtmlhttp://www.secuobs.com/revue/news/357545.shtml 2012-01-29 20:47:12 - Intrepidus Group Insight : The IG crew is just heading back from ShmooCon, which reminds me of last year s awesome talk on the Ubertooth One Intrepidus backed the kickstarter project and, as promised, got 2 Ubertooths We recently started playing with it, and have a couple of tips and a supplementary script We originally followed the post here to get the Ubertooth http://www.secuobs.com/revue/news/354706.shtmlhttp://www.secuobs.com/revue/news/354706.shtml 2012-01-11 22:53:08 - Security Bloggers Network : New Entrust IdentityGuard capability turns mobile devices into enterprise credentials http://www.secuobs.com/revue/news/351576.shtmlhttp://www.secuobs.com/revue/news/351576.shtml 2011-12-27 09:07:20 - PenTestIT : Bluelog is a simple Bluetooth scanner designed to tell you how many discoverable devices there are in an area as quickly as possible It is written in C That so eliminating compatibility issues in most platforms It is intended to be used as a site survey tool, identifying the number of possible Bluetooth targets there are Bluelog Bluetooth Scanner Tool is a post from PenTestIT IMAGE IMAGE IMAGE IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/349103.shtmlhttp://www.secuobs.com/revue/news/349103.shtml 2011-12-04 22:07:19 - Travis Goodspeed's Blog : by Travis Goodspeed with thanks to Alexei Karpenko Spot Connect cropped Reverse engineering a Bluetooth device is rather straightforward, but quite a few good neighbors don't know where to begin This article demonstrates exactly how an Android client was reverse engineered in order to produce open source clients in Python and QT Mobility I'm writing with the assumption that you are trying to reverse engineering your own device, which is similar but not identical to mine As this is an introductory guide, I'll stay clear of any code reverse engineering, sticking only to network traffic The subject of this article is the Spot Connect, which transmits one-way text messages and GPS coordinates by L-band to the GlobalStar satellite constellation These messages are then forwarded by email or SMS Except in its emergency mode, the device is operated through Bluetooth by a smart phone Thanks to Android's use of the Bluez bluetooth stack, it is rather easy to get the necessary traffic dumps Kind thanks are due to Alexei Karpenko Natrium42 for his article on SPOT Reverse Engineering, which covers the original SPOT unit in excellent and thorough detail It was his article that got me looking at the Spot Connect, and his description of the GPS format saved me quite a bit of travel for sample collection GlobalStar Beacon Sniffing RFCOMM The first step is to load the official client onto a rooted Android phone, in my case a Nexus S I had to swap SIM cards as my Brazilian one put me in a region of the Android market that didn't have the application Switching to a Swiss card fixed this, and a moment later the app was installing SPOT Connect The Spot Connect uses RFCOMM, which is Bluetooth's alternative to a TCP socket or a UART As it is easy to prototype and always delivers packets in order, RFCOMM has become the standard way of implementing custom protocols To sniff the traffic before knowing the mode, we'll use hcidump running in a debugging shell of the phone For this, run adb shell hcidump -X tee spotlogtxt on your workstation, send a transmission, and watch the result in the log The message being sent stands out as ASCII, of course, so it's the first thing to look for With no knowledge of the HCI protocol, you can still be sure that you have a cleartext recording HCIDump Screenshot 35 00 40 00 0b ef 63 aa 31 26 01 00 01 00 01 4d 5 c1 M 72 2e 20 57 61 74 73 6f 6e 2c 20 63 6f 6d 65 20 r Watson, come 68 65 72 65 2e 20 49 20 77 61 6e 74 20 74 6f 20 here I want to 73 65 65 20 79 6f 75 2e 9a see you From Alexei's article, you can expect that frames inside of RFCOMM will begin with 0xAA, followed by a length, followed by a verb and the objects These bytes will be wrapped in padding on the outbound end, and they'll be fragmented on the inbound end Sure enough, these are the bytes that come before the word Watson'' aa Preamble 31 Length 26 Verb 01 00 01 00 01 Flags OK, Check In 4d 72 2e 20 57 ASCII Message abbreviated Counting 0x31 bytes out, notice that the packet ends exactly on a byte of the ASCII message, without a checksum By looking for bytes of AA and searching for length, with allowances for packet fragmentation and the RFCOMM wrapper, it becomes possible to decode every command and its matching response Be aware that responses will be fragmented more than transmissions If you need to reverse engineer longer transactions or have a more complete log, it will be handy to have a script to reassembly from the HCI frames In those cases, toss together a proper HCI decoder to get a more accurate interpretation of the records Looking through the entire log, it the protocol appears to be as follows First, the client queries the Device ID with verb 0x01, using the exact same format as Alexei's article Then it uses verb 0x25 to query the last known position of the device, which will be returned in the style that Alexei reverse engineered from the original unit Use pen and paper to decode these transactions from my Python client Location Query First Implementation With these recordings in hand, the complete language can now be described and implemented Luckily, three verbs make for a quick implementation I use py-bluez for prototyping such implementations, as its rfcomm-clientpy example is simple enough to get a working client in minutes As py-bluez is specific to Linux, Mac users might prefer lightblue For simplicity, cut the UUID code or switch it to RFCOMM's UUID, which is 00001101-0000-1000-8000-00805F9B34FB For a list of all services on a device, run 'sdptool records adr' This only lists those which are publicly announced by SDP, the Service Discovery Protocol To scan for unadvertised services, try BT Audit from Collin Mulliner 0x01 -- Get ID A minimal test client will just test the serial number of the device To do this, simply send xAA x03 x01 and then catch the reply with verb 0x01 Bytes 3, 4, 5, and 6 of the reply will contain the serial number in Big Endian notation For this first implementation, commands and their responses may be handled synchronously for simplicity Where selftx takes a frame as its input and returns the response, this is implemented in Python as the following What could be simpler SpotConnectgetid self 0x25 -- Get Last Position Similar in calling convention, the 0x25 verb requests the last known GPS position of the device The coordinate format is exactly the same as in Alexei Karpenko's Spot Hacking article, consisting of three bytes apiece to describe latitude and longitude The following is my C code for parsing the position data, which has already been requested as xAA x03 x25 SpotConnect parsePosition char 0x26 -- Transmit Text Transmitting text is just as easy, with the Spot Connect handling all the work after a message has been loaded The following is Python code to transmit a short text message with the OK message-code This lacks length checks and doesn't support the changing of flags, but it will work perfectly well for a test SpotConnectcheckin After the device receives this command, it will reply with an acknowledgment and then begin to attempt transmissions at irregular intervals Each transmission consists of a number of fragments, such that the packet can be reassembled so long as one copy of each fragment makes it through If you have a clear view of the sky and have configured the first destination to be your email address, you should receive a notification within a few minutes If you don't receive a notification by the time the mailbox icon has ceased blinking, then the transmission failed Other Verbs These three verbse--0x01, 0x25, and x026--are sufficient to implement a minimal client for the Spot Connect If you'd care to help out, it would be useful to have more documentation for the flags of the 0x26 verb, as well as documentation for 0x52, 0x40, and 0x38 By scanning and listening for error codes, it should be possible to get a complete list of those verbs that are unused by the Android application You can find my Python client at https githubcom travisgoodspeed pyspot It ought to run as-is on Linux with py-bluez, including the Nokia N900 A Graphical Client Now that the protocol has been sufficiently well documented to have a Python implementation, it is worthwhile to rewrite it as a GUI In my case, I wanted a QT Mobility client for my Nokia N9 You can find my work in progress at https githubcom travisgoodspeed goodspot Pacific Ocean Other Methods If hcidump isn't available for your platform, you might try Sniffing with a USRP or reflashing a dongle to become a commercial sniffer For a jailbroken iPhone, see the iPhone Wiki's documentation Another option would be to create a Bluetooth proxy, relying on the slim authentication performed in the protocol In this case, the proxy would open all relevant port to the device being reverse engineered, ferrying commands back and forth as a way to record them You might also need to experiment with changing the device class and, in the case of iOS devices, there is also a lockout sequence that must be implemented If none of that works for your device, you could sniff the UART lines that come from the bluetooth module, shown here on the left board This particular module happens to be a BT23, and Page 8 of BT23_Datasheetpdf shows that pins 14 and 13 should be tapped to get a communications log SPOT Connect As a last resort, you could always ask for documentation I didn't bother with this because of my own impatience, but for some devices, such as the Metawatch, documentation is freely available More than once, a neighborly vendor has been so kind as to give me the source code or documentation just to be neighborly Future Work This article will be followed with one on the physical layer protocol of the SPOT, which I've been able to sniff thanks to some kind help from Michael Ossmann For a preview of that technique, you are welcome to stalk my SPOT Connect Set on Flickr The most neighborly of these shows individual bits from a FunCube Dongle recording of the transmission It's cleartext, of course Bits from SPOT Connect Replacement firmware is also a possibility The Spot Connect uses an MSP430F5xx microcontroller with the standard USB bootloader, using a Java client on Windows and an Objective C client on OS X The firmware itself is downloaded by HTTPS, and a copy could be acquired either by a MITM attack on HTTPS or by asking the bootloader politely, using the password that is to be found within the firmware update Be careful when doing this to test on a unit without a service contract, as service cannot be moved from one unit to another and bricking is a distinct possibility Conclusions I hope that this article has given you a decent overview of the methods for reverse engineering Bluetooth RFCOMM devices While my subject was the Spot Connect, these methods would apply equally well to something like a GPS, the Metawatch, Bluetooth chat applications, and multiplayer games Other brands of Bluetooth satellite communicators are available, and open documentation for them would be quite handy For a list of a few thousand potential targets, search the Bluetooth SIG's Gadget Guide http://www.secuobs.com/revue/news/345274.shtmlhttp://www.secuobs.com/revue/news/345274.shtml 2011-11-24 18:22:17 - SecurityTube.Net : Uploaded by ChRiStIaAn008 on Feb 3, 2011 Speaker Michael Ossmann The off-the-shelf Bluetooth adapters didn't do what I wanted, so I built my own This is the story of how someone with very little knowledge of electronics embarked on a project to build a 24 GHz wireless development platform and ultimately succeeded in creating a low cost device that can be used for Bluetooth sniffing and more Find out how to build your own Ubertooth One, how to use it for Bluetooth experimentation and other things, and catch a glimpse of an exciting future of wireless security research enabled by open source hardware For more information visit http bitly shmoocon2011_information To download the video visit http bitly shmoocon2011_videos IMAGE http://www.secuobs.com/revue/news/343705.shtmlhttp://www.secuobs.com/revue/news/343705.shtml 2011-11-24 06:32:09 - Symantec Connect Security Response Billets : Recently the issue of Bluetooth security raised its head once again For such a young protocol, Bluetooth has had one rough ride This time, however, it was for two very separate reasons The first was a protocol fuzzer an automated test harness for the L2CAP protocol that was released by Pierre Betouin 1 I later helped out with the project adding certain functionality The author of the tool used this to discover multiple unauthenticated denial of service conditions in common top-tier cellular handsets It has always amused me that we have to classify remote device crashes as denial of service only, as we simply don t have the visibility into a lot of these proprietary devices in order to gain a full understanding as to the degree of exploitability The second reason was the OSXInqtanaA worm 2 3 What I found interesting about this was that it was the first worm to my knowledge that actually exploited a Bluetooth vulnerability to aid in its propagation Previously, we had only seen worms utilize Bluetooth as a mechanism by which to spread However, those typically still involved user interaction to allow to do so In this instance, the worm actually exploited a vulnerability detailed by Kevin Finisterre in order to gain a foothold on the vulnerable Mac OSX host On the subject of Bluetooth vulnerability exploitation, at EUSecWest there was an excellent demo by Tim Hurman during his ARMed Combat presentation He exploits a buffer overflow vulnerability 4 in the WidComm Bluetooth stack on a Microsoft Windows Mobile 2003 SE device in order to execute arbitrary code I believe this is going to be where a rash of new vulnerabilities will emerge in the future As desktops become harder to exploit due to improved network and host security and increasing number of mobile wireless devices centered on Symbian, Windows Mobile, and Linux is going to create an ever more tantalizing target for malicious software authors and attackers alike References 1 http securitechhomeunixorg blue 2 http securityresponsesymanteccom avcenter venc data osxinqtanaahtml 3 http wwwsymanteccom outbreak macoutbreakhtml 4 http wwwpentestcouk documents ptl-2004-03html http://www.secuobs.com/revue/news/343627.shtmlhttp://www.secuobs.com/revue/news/343627.shtml 2011-11-24 06:32:09 - Symantec Connect Security Response Billets : Back in 2004, I presented some research at CanSecWest entitled Bluetooth Security Toothless One of the items I covered in this presentation was the ability to recover link keys over the air My research was missing a key feature, which was how to force a re-pair between two devices in order to be able to observe the new pairing to be able to get the required data Fast-forward to June, 2005, and Yaniv Shaked and Avishai Wool improved the attack in many aspects and released the paper Cracking the Bluetooth PIN, including many novel aspects Well, it s now 2006 and Thierry Zoller has just given an interesting presentation at the hacklu conference with input from Kevin Finisterre entitled All your Bluetooth is belong to us In this presentation apart from some cool zero-days they demonstrate BTCrack, which is their implementation of the PIN Linkkey recover attack Using this, they can recover a four-digit PIN in just 025 seconds With the ability to get the linkkey and if you can then forge your bdaddr, you can abuse an existing pairing between two devices in order to get access So, here are some simple steps for us to try and mitigate this attack 1 Pair your devices in a secure place 2 Use long PIN numbers where possible 3 If you suddenly find that you have to re-pair devices for reasons that aren t apparent, be suspicious, and if possible return to step 1 As I ve previously mentioned, let s all hope that Wireless USB isn t a repeat of Bluetooth for my sanity, if no one else s http://www.secuobs.com/revue/news/343482.shtmlhttp://www.secuobs.com/revue/news/343482.shtml 2011-11-17 12:35:17 - Security Bloggers Network : Intelligent Bluetooth fuzzing Why bother Tommi Mäkilä Jukka Taimisto Been testing Bluetooth since 2005 as part of the UPF UnPlugFest UnPlugFest https wwwbluetoothorg login defaultaspx ReturnUrl events upf unplugfestshtm Carkits testing bonanza 2011 15 different carkits tested Found problems in 13 of them Some in-car kits required dealer servicing after testing 10 crashes with L2CAP No Pairing required Tested http://www.secuobs.com/revue/news/341172.shtmlhttp://www.secuobs.com/revue/news/341172.shtml 2011-09-27 09:00:15 - Security Bloggers Network : News of a recently discovered, pernicious and particularly troublesome apparently caused code-cruft Bluetooth exploit has filtered up through the detritus of the interwebs Cruft, heard round the world http://www.secuobs.com/revue/news/331221.shtmlhttp://www.secuobs.com/revue/news/331221.shtml 2011-09-23 22:43:08 - Security : IMAGE That Bluetooth car kit you got at the big box store on sale may be opening your phone up to hacking Research by Codenomicon, a Finnish data security company, found that each of a sample of ten new Bluetooth hands-free kits tested this year have critical issues with their security implementations The kits were susceptible to fuzzing attacks by transmissions of malformed data that can crash devices or expose holes in the security of their implentation of the Logical Link Control and Adaption Protocol L2CAP The problem isn't limited to car kits Codenomicon's Tommi Mäkilä says that about 80 percent of devices tested in Codenomicon's plugfests have crashed during testing In crashing, the devices often reveal gaps in their security that, in the case of handsets and computers, can be used to access data or inject malware into the system And because there's a relatively small number of Bluetooth codestacks on the market, any exploit that might be discovered could be applied to a wide range of devices Security gaps in Bluetooth aren't a new concern tools like Blooover have demonstrated an exploit called Bluebug, which allowed remote access to text messages, call records and address books on some handsets, and even allowed eavesdropping and placing of phone calls Changes to phone firmware from handset makers have largely corrected that security hole But they haven t gone away in July, Microsoft issued a patch to fix a Bluetooth vulnerability in Windows 7 and Windows Vista that allows an attacker to transmit packets to remotely execute code allowing them to install programs view, change, or delete data or create new accounts with full user rights But the findings of the Codenomicon researchers indicate that security for Bluetooth devices still has a long way to go, and is perhaps even worse than anyone expects The researchers were particularly concerned about the unreliability of L2CAP implementations, since communication over L2CAP doesn't require Bluetooth devices to pair meaning that attacks can be undertaken without the user being aware Read the comments on this post IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/330710.shtmlhttp://www.secuobs.com/revue/news/330710.shtml 2011-09-21 12:22:14 - Help Net Security News : Codenomicon warns consumers about the poor quality and security of Bluetooth equipment Based on Codenomicon's robustness test results using smart model based fuzzing tools, 80pourcents of all the tests ag http://www.secuobs.com/revue/news/330132.shtmlhttp://www.secuobs.com/revue/news/330132.shtml 2011-09-06 15:52:20 - Travis Goodspeed's Blog : by Travis Goodspeed continuing Promiscuity is the NRF24L01 's Duty with kind thanks to fbz, skytee, and their Hacker Hostel Bluetooth GoodFET Since building my packet sniffer for the Microsoft 24GHz keyboards, I've frequently wanted to demo it without having to drag out a laptop Laptops are heavy, they are inconvenient, and cables just make matters worse While it is possible to port it to a standalone board or to add an LCD to the Next Hope Badge, I'd rather have the entire GoodFET client library available over bluetooth to my Nokia N900 Pictured above is my prototype build, which reliably sniffs keyboard traffic on battery power for a more than an hour Rather than serving as a build tutorial, this article will chronicle the bugs that cropped up during the port, in the hope that they'll help other neighbors trying to port the GoodFET firmware to new devices This sniffer was assembled from a Next Hope Badge running the GoodFET firmware with hardwired DCO calibrations, a Roving Networks RN41 module, and three NiMH batteries The client uses py-bluez at the moment, but I might port it to LightBlue for OS X support Future models will use a GirlTech IMME or Telos B in place of the Next Hope Badge, to allow me to play with APCO P25 or ZigBee networks without a laptop Compiling the Firmware Most of the GoodFET devices are built around an FT232RL and MSP430, with the FTDI taking care of USB to serial conversions The client software just opens dev ttyUSB0 or its local equivalent through py-serial, then uses the DTR and RTS lines to reset the MSP430 into either the GoodFET application or a masked-ROM bootloader, the BSL The client and the hardware do a little initialization dance in which the GoodFET is reset until the clock configuration register within the device matches 16MHz So when you run 'goodfetmonitor info' and it replies with Clocked at 0x8f9e , the devices has rebooted several times until it finds by chance that 0x8F9E is a stable clock configuration for 16MHz When replacing the FTDI with a Bluetooth module, the DTR and RTS lines are unavailable with the timing resolution that is necessary to enter the BSL Rather than rely upon them, I left them disconnected and instead ran only the TX and RX lines from the RN41 to the NHBadge The RST signal is also disconnected, so the GoodFET will boot when power is applied and cannot be rebooted except by the appropriate software command Bluetooth GoodFET This creates a number of complications in the client, which I'll get to later, but the important thing for firmware is that the clock configuration must be explicitly known by the firmware at compile or link time To specify this at compile time, set CFLAGS -DSTATICDCO 0x8F9E To specify it at link time, just flash the image without erasing the INFO flash that resides from 0x1000 to 0x1100 in the MSP430X chips Additionally, the firmware must be told which pins to use and which microcontroller to target These are specified by exporting platform nhb12b and mcu msp430x2618 If an NHB12 were used instead of the NHB12B, then the platform would be redefined appropriately Finally, the firmware size and thus the flashing time can be significantly reduced by exporting config monitor nrf spi to reduce the set of applications to only the Monitor, Nordic RF, and SPI applications To ease in reconfiguring my build environment, I left a script to create these settings in trunk firmware configs examples bluetooth-nhb12bsh Be sure to change the STATICDCO value to that of your own hardware when building it Next Hope Badge Flashing Finally, the firmware had to be flashed by JTAG, rather than BSL This was done the same way the Next Hope Badges were originally programmed at the factory, by wedging the board into a GoodFET programmer and running 'goodfetmsp430 flash goodfethex', then verifying with 'goodfetmsp430 verify goodfethex' Patching the Client Recalling that the client was initially designed to use py-serial, a few changes were required to make it function through py-bluez Before writing a proper client, I wrote a quick py-bluez script to connect to the GoodFET and print any string that is received Briefly touching the RST signal on the JTAG connector to its GND pin resets the device, causing it this client to print http goodfetsfnet If the default GoodFET firmware is flashed, with no STATICDCO or Info Flash, the string will be printed as garbage most times, with one attempt in ten producing a legible string Having verified that the timing and baud rate were correct, I continued by writing a communications module, GoodFETbtser , that emulates the read and write functions of serialSerial used by the rest of the application Additionally, the GoodFETbtserread function is written so as to always return the exact number of bytes requested by the receiver, as Bluetooth buffering sometimes breaks apart packets that would otherwise reliably be received as contiguous chunks The following is a screenshot with GoodFETverbose 1 of a transmission being split in half because of a read request returning too few bytes Bluetooth Packetization Bug Additionally, the initialization routine was modified such that if the GOODFET environment variable is set to a six byte MAC address Setting it to bluetooth causes the firmware to search for Bluetooth devices by name, then exit with instructions for setting the MAC Later revisions might attempt to use the first observed RFCOMM adapter Conclusions The final client is already mainstreamed into the GoodFET's subversion repository, and it looks a little like the following when packet sniffing encrypted OpenBeacon traffic It can also sniff Turning Point Clickers, Microsoft Keyboards, and anything else that uses the 24GHz Nordic chips Bluetooth GoodFET OpenBeacon Sniffing I've already ordered parts to build Bluetooth versions of the Girltech IMME and the Telos B for mobile sniffing of APCO P25 and ZigBee My rebuilds will include integrated battery charging from USB and the option of running standalone with the bluetooth module disabled, in order to greatly increase battery life The client ought to run unmodified on rooted Android devices by use of SL4A and py-bluez Additionally, I'm planning a firmware port to the OpenBeacon USB 2 module from Bitmanufaktur GmbH As a final note, I would like to remind all good neighbors that there is no reason why offensive security can't be fun for the whole family Bluetooth GoodFET http://www.secuobs.com/revue/news/327254.shtmlhttp://www.secuobs.com/revue/news/327254.shtml 2011-07-30 18:48:52 - PenTestIT : All of us must have seen FTP bruteforcers, HTTP bruteforcers, SMTP bruteforcers, etc But, this BTCrack is a bruteforcer for the Bluetooth protocol stack version 10 and 20 Actually, it is a pairing handshake cracker against Bluetooth 10 and 20 BTCrack is the worlds first Bluetooth Pass phrase PIN bruteforce tool It works by reconstructing the PIN and link key with data sniffed during IMAGE IMAGE IMAGE IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/320138.shtmlhttp://www.secuobs.com/revue/news/320138.shtml 2011-07-13 20:18:34 - Dark Reading All Stories : Fix among 22 issues addressed by Patch Tuesday http://www.secuobs.com/revue/news/316796.shtmlhttp://www.secuobs.com/revue/news/316796.shtml 2011-07-13 18:20:12 - Les derniers documents du CERTA. : Une vulnérabilité à été corrigée dans la pile Bluetooth des systèmes d'exploitation Windows Vista et Windows 7, qui permet d'exécuter du code arbitraire à distance http://www.secuobs.com/revue/news/316765.shtmlhttp://www.secuobs.com/revue/news/316765.shtml 2011-07-13 14:05:33 - Network World on Security : Microsoft today patched 22 vulnerabilities in Windows and Office, including a bug in the Bluetooth technology within Vista and Windows 7 that could be used to hijack a nearby PC http://www.secuobs.com/revue/news/316706.shtmlhttp://www.secuobs.com/revue/news/316706.shtml 2011-07-13 08:29:12 - Hak5 Xvid Large : Capture analyze bluetooth packets and Boot Virtual Machines from USB - and more http://www.secuobs.com/revue/news/316654.shtmlhttp://www.secuobs.com/revue/news/316654.shtml 2011-07-13 01:01:07 - Security Bloggers Network : Microsoft today released updates to fix at least 22 security flaws in its Windows operating systems and other software The sole critical patch from this month's batch addresses an unusual Bluetooth vulnerability that could let nearby attackers break into vulnerable systems even when the targeted computer is not connected to a network Bluetooth is a wireless communications standard that allows electronic devices -- such as laptops, mobile phones and headsets -- to communicate over short distances the average range is about 30 to 100 meters, but that range can be extended with specialized tools To share data, two Bluetooth-enabled devices normally need to pair with one another, a process that involves the exchange of a passkey between the two devices http://www.secuobs.com/revue/news/316614.shtmlhttp://www.secuobs.com/revue/news/316614.shtml 2011-07-12 20:40:30 - Zero Day Blog RSS ZDNet : The Bluetooth stack vulnerability introduces remote code execution risks on Windows Vista and Windows 7 http://www.secuobs.com/revue/news/316566.shtmlhttp://www.secuobs.com/revue/news/316566.shtml 2011-07-12 20:34:28 - Optimal Security : While this Patch Tuesday may appear insignificant with just 4 patches a quarter of what we saw last month , the reality is that it will be rather disruptive All patches impact Windows and Office and require a restart Priorities for July The MS11-053 patch is critical and warrants immediate attention if your environment is Bluetooth enabled http://www.secuobs.com/revue/news/316560.shtmlhttp://www.secuobs.com/revue/news/316560.shtml 2011-07-12 20:21:40 - Microsoft Security Bulletins : Bulletin Severity Rating Critical - This security update resolves a privately reported vulnerability in the Windows Bluetooth Stack The vulnerability could allow remote code execution if an attacker sent a series of specially crafted Bluetooth packets to an affected system An attacker could then install programs view, change, or delete data or create new accounts with full user rights This vulnerability only affects systems with Bluetooth capability http://www.secuobs.com/revue/news/316556.shtmlhttp://www.secuobs.com/revue/news/316556.shtml 2011-07-12 20:02:50 - threatpost The First Stop for Security News : Microsoft has patched a critical vulnerability in Windows 7 and Windows Vista related to the Bluetooth stack in the operating system The bug is the lone critical vulnerability fixed in today's Patch Tuesday release, and Microsoft officials said it's unlikely that it can be used for remote code execution read more http://www.secuobs.com/revue/news/316547.shtmlhttp://www.secuobs.com/revue/news/316547.shtml 2011-07-12 13:59:54 - Vigilance vulnérabilités publiques : Un attaquant distant peut envoyer un paquet Bluetooth L2CAP illicite, afin de corrompre la mémoire du noyau, ce qui conduit à un déni de service et éventuellement à l'exécution de code http://www.secuobs.com/revue/news/316449.shtmlhttp://www.secuobs.com/revue/news/316449.shtml 2011-07-10 15:10:08 - xorl eax eax : This was discovered and reported some time ago by Dan Rosenberg aka bliss as we can read here The exact vulnerable code is available in net bluetooth l2cap_corec file This code is part of Linux kernel s implementation of L2CAP Bluetooth protocol More specifically, the l2cap_bredr_sig_cmd will trigger the call to l2cap_config_req in case of a L2CAP_CONF_REQ signaling http://www.secuobs.com/revue/news/316127.shtmlhttp://www.secuobs.com/revue/news/316127.shtml 2011-06-16 19:16:05 - SecurityTube.Net : The Bluetooth standard features security, and Marcel Holtmann explains the security model of recent Bluetooth implementations IMAGE http://www.secuobs.com/revue/news/311676.shtmlhttp://www.secuobs.com/revue/news/311676.shtml 2011-05-31 15:49:52 - Help Net Security News : Broadcom released the BCM43142 InConcert combo chip which combines Wi-Fi Direct connectivity with seamless proximity-based pairing, simplifying wireless connectivity in the home The combo chip sup http://www.secuobs.com/revue/news/308140.shtmlhttp://www.secuobs.com/revue/news/308140.shtml 2011-05-10 17:37:04 - Vigilance vulnérabilités publiques : Un attaquant local peut employer la fonction getsockopt sur une socket bluetooth l2cap rfcomm afin d'obtenir un octet de la mémoire du noyau http://www.secuobs.com/revue/news/303805.shtmlhttp://www.secuobs.com/revue/news/303805.shtml 2011-05-03 19:05:18 - xorl eax eax : This was also reported by Vasiliy Kulikov and it is located in net bluetooth bnep sockc file static int bnep_sock_ioctl struct socket sock, unsigned int cmd, unsigned long arg struct bnep_connlist_req cl struct bnep_connadd_req ca switch cmd case BNEPCONNADD if capable CAP_NET_ADMIN return -EACCES if copy_from_user ca, argp, sizeof ca return -EFAULT nsock sockfd_lookup casock, if nsock return http://www.secuobs.com/revue/news/302290.shtmlhttp://www.secuobs.com/revue/news/302290.shtml 2011-04-11 08:19:46 - PenTestIT : Spooftooph is designed to automate spoofing or cloning Bluetooth device Name, Class, and Address Cloning this information effectively allows Bluetooth device to hide in plain site Bluetooth scanning software will only list one of the devices if more than one device in range shares the same device information when the IMAGE IMAGE IMAGE IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/297471.shtmlhttp://www.secuobs.com/revue/news/297471.shtml 2011-03-16 01:21:23 - Hack In The Box : Barnes Noble calls the NOOKcolor a 249 color eBook reader, but hackers have been doing their best to turn it into a full-fledged Android tablet since day one Now theyâ re also working to turn it into a phoneâ of sorts Out of the box, the tablet supports WiFi, but not Bluetooth But the latest build of the CyonagenMod 7 operating system for the NOOKcolor enables the dormant Bluetooth functionality of the tabletâ s wireless chip That means you can pair the tablet with a Bluetooth headset and listen to music â or make voice calls using Androidâ s SIP phone capabilities Sure youâ ll still need a WiFi connection to make calls But itâ s amazing just how versatile this 7 inch tablet is becoming http://www.secuobs.com/revue/news/291896.shtmlhttp://www.secuobs.com/revue/news/291896.shtml 2011-03-02 14:05:26 - Vigilance vulnérabilités publiques : Un attaquant local peut interroger une socket Bluetooth, afin de lire un octet provenant de la mémoire du noyau http://www.secuobs.com/revue/news/288816.shtmlhttp://www.secuobs.com/revue/news/288816.shtml 2011-03-02 14:05:26 - Vigilance vulnérabilités publiques : Un attaquant local possédant la capacité CAP_NET_ADMIN peut employer un ioctl sur une socket Bluetooth BNEP, afin de lire la mémoire ou de mener un déni de service http://www.secuobs.com/revue/news/288815.shtmlhttp://www.secuobs.com/revue/news/288815.shtml 2011-02-28 14:28:30 - Security Bloggers Network : include disclaimerh These are just notes to myself on Bluetooth which I found quite useful while doing a little reading into the Bluetooth protocol They are based on my reading listening into the subject so there isn t anything original or leet here Credit to the useful stuff is given at the end I ve been http://www.secuobs.com/revue/news/288173.shtmlhttp://www.secuobs.com/revue/news/288173.shtml 2011-02-21 14:18:04 - PenTestIT : This project was originally unveiled at the recently concluded ShmooCon It shows a lot of promise and the authors two years of study and experimentation The name is Ubertooth Ubertooth is an open source 24 GHz wireless development platform suitable for passive bluetooth monitoring It aims to be the world s IMAGE IMAGE IMAGE IMAGE IMAGE IMAGE http://www.secuobs.com/revue/news/286605.shtmlhttp://www.secuobs.com/revue/news/286605.shtml 2011-02-09 22:03:08 - Apple Examiner RSS Feed : Bluetooth Analysis - Bluetooth Explorer is an application included with Apple s Developer Tools We have an article showing how you might be able to use it during your analysis http://www.secuobs.com/revue/news/284102.shtmlhttp://www.secuobs.com/revue/news/284102.shtml 2011-02-05 19:44:27 - SecurityTube.Net : Project Ubertooth Building a Better Bluetooth Adapter Video Tutorial IMAGE http://www.secuobs.com/revue/news/283211.shtmlhttp://www.secuobs.com/revue/news/283211.shtml