Bluetooth Security Part 2
Auf securityfocus.com ist der zweite der Teil des Bluetooth Security Review erschienen.
Diesmal geht der Author insbesondere auch auch die Gefährdung der Privatsphäre durch Bluetooth (BT) ein.
Die Kombination von eindeutiger Adresse eines jeden Geräts mit aktiviertem BT - zur Identifizierung - mit dem Fakt, dass man sich mit den meisten BT Geräten ohne Authentifizierung verbinden kann, solange man nicht auf besondere Services zugreifen will, macht aus Geräten mit aktivem BT einen billigen und freiwillig getragenen Peilsender.
One could simply build a special device with a short range Bluetooth receiver that performs a scan for discoverable Bluetooth devices every minute, and then reports all discovered devices to the monitoring system. If more then one receiver is installed at various distances, the network of such devices (nodes) could record the device’s position and additionally, the movement of a Bluetooth device — all this without the device owner’s knowledge. The non-discoverable device could be also reported if we know the MAC address and make a request to it every 1 minute and report any response.
Such system could have a number of interesting uses. For instance, if we carry a Bluetooth enabled handset (in discoverable mode) with us while shopping at the local supermarket, the supermarket owner could easily track our movements as we walk through the supermarket, record how long we spend in certain areas, and eventually create a map of our movements within the supermarket. Based on gathered data, it would be possible to analyze our shopping behavior as market research, and as result change positions of certain products or advertisements, or worse, sell the marketing data to research companies. RFID might seem to be more efficient in such a system, however this would require the supermarket to issue RFID tags to their customers, which most people would not accept. By using the Bluetooth technology on the phone they are already carrying, companies can avoid issuing special tracking cards or badged to customers yet still be able to track their movements.