Is Bluetooth-enabled devices is a great risk

[AzzamKhan]

Hi all,

I am a student from California university. Today, Blue tooth have a great technology to share any thing to any one. But some risk are also gain form blue tooth device. I want to know that is Bluetooth-enabled devices is a great risk. Please reply. Thanks in advance.

[Steve123]

Bluetooth device through the initial pairing process to establish a secure connection. During this period, one or both devices need to enter the PIN code, the internal algorithm using the security key code generator, security key will then be used to verify the device at any time. So i think it have no risk.

[Shen]

A recent academic report, a way to "estimate" Bluetooth device security settings match the theoretical process. To accomplish this, devices need to monitor the initial attack in a pairing process. Based on this view, algorithms can estimate the security key and masquerade as other Bluetooth devices. The report of the novel lies between the two devices presented in the enforcement of the new pairing sequence, and to improve the implementation of the method of estimation process, which makes the previous attack time significantly shortened.

[Big Fish]

To perform this attack, the attacker needs eavesdropping initial pairing process, which usually only happens once in a confidential environment, and lasted less than a second time. The authors put forward two Bluetooth devices try to forcibly remove the security key in one of the possible ways, and then start a new pairing process, so that they overheard. To accomplish this, they need to connect a second device disguised. This process requires very expensive equipment, usually restricted to developers. If this process succeeds, the user will see a message on the device and ask them to re-enter the PIN code. If the attacker appears enter the code, and entered the PIN code is short enough, in theory, attack will be successful.

[Spyrus]

In bucktooth pairing, If the PIN key is only four numbers, then a fast PC in less than a tenth of a second can be the time to calculate the security key. PIN key is longer the time required to crack the security key is the longer. Use 8-bit alphanumeric characters PIN takes 100 years to calculate the time out is almost impossible to break. So it is safe.

[Milton.J]

Hackers can monitor and record activities within the spectrum, then use the computer to regenerate the exchange with the PIN code. This requires special hardware and a complete Bluetooth build systematic knowledge. If you use 8-bit or more digit alphanumeric PIN, an attacker may take several years to break out the PIN code. If you use a 4 digit PIN code, hackers may break within a few hours out of the PIN. But still need high-level software. All the best.