Bluetooth Technology has become very popular for the transferring data & which is user friendly and completely wire free. It is connection oriented technology & may be single point or multi point. Normally people think that their device is hacked just inside the 10 meter circle, but this is misconception. Any device can be hacked at distance up to 100 meter. (Use changes according to needs)

Bluetooth Hacking attacks can be Reduced/ Eliminated by using following measures:

Turn off the device to non-discoverable or invisible mode when the Bluetooth technology not in use.

Never pair your device with unknown devices or in public places.

Whenever possible, use an eight characters or more alphanumeric PIN code.

Reject the unexpected pairing request.

If your device is affected by the Bluesnarfing or Bluebugging then take your device to the manufacture or authorized dealer for proper diagnosis.

Install software patches which are available to the older Bluetooth technology device and keep your transfers upgraded so as to ensure maximum security.

The Bluejacker just expect reaction from the recipient for the exchange of data. To ignore the Bluejacker, just reject the business card.

Update your cell phone antivirus time to time to keep it free from new Viruses and Trojans.

These are some of the latest security measures, any user should be aware of. Bluetooth hacking is still in its initial stage of development. So if we keep our knowledge upgraded then we can stop further techniques to evolve.

Whatever data transfer takes place must be through a secured channel. No one has right to intrude your data and exploit your privacy. To avoid all such attack keep reading Hackers Enigma – An Ethical Hacking Blog

Bluetooth is an open system that enables short range wireless communication of data and voice. It comprises of a hardware & a software components.

Bluetooth Architecture consist of the master and the slave arrangement, both are symmetric i.e in same device. In Bluetooth architecture the communication occurs between a master unit and a slave unit, while they share same channel for communication. Each device has a 48 bit unique address that is fixed. Two or more radio devices together form ad-hoc networks called Piconets. These Piconets consist of one master and seven slaves as shown in figure.

Activation of the Piconet is known by the 3 bit active device address . The piconet form the link of one bluetooth device to another bluetooth device .The master is only responsible for establishing the bluetooth link  in the same  device . The slaves are not allowed to communicate between themselves.

Piconet

During the communication there are various protocol are also responsible are as follows-
Bluetooth core protocol – Baseband ,LMN ,L2CAP, SDP 
Cable Replacement Protocol – RFCOMM
Telephony Control Protocol – TCS Binary, AT Commands
Adopted Protocols-  PPP, TCP/IP, OBEX, WAP, vCard, vCal, IrMC, WAE

The description of each protocol at each layer:

The RF layer:
The RF layer is lowest defined layer of bluetooth architecture.The Bluetooth air interface is based on a nominal antenna power of  extensions for operating at up to 100 mW  worldwide.
The nominal link range is 10 centimeters – 10 meters, but can be extended to more than 100 meters by increasing the transmit power to 100 mW.

The Bluetooth  Baseband :
This layer defines the timing , frame , packets and the flow control on the link.

The Link Manager 
Responsible for managing connection states enforcing fairness among slaves & power management..

The logical Link Control And Adaptation Protocol
These layer Handles multiplexing, segmentation and reassembly of large packets and device discovery.

Audio
The audio maps the data directly to the Baseband layer.

So, this was the basic introduction of Bluetooth Technology which is today a widely used media for data communication. We are covering this topic so as to give more knowledge for all Ethical Hacking & Bluetooth security interested people.

Bluesnarfing is one type of blue-tooth hacking. While it is similar to the bluejacking and bluebugging. It was discovered by Marcel Holtmann in october 2003.

Bluesnarfing is unauthorized access of information or data from wireless device through blue-tooth technology. Connection is often between the desktop’s, LAP’s ,cellphones , PDA’s . Blue-tooth is very high speed but a short range wireless technology,in which exchanging of information between cellphones, deskstop’s. The most know device in which the blue-tooth is already installed is cellphones .

In this the attacker access the calendar, contact list and e-mail and text messages without leaving any evidence of the act. Other device is Laptop’s and computers ,they are having less frequency and more complex system than cellphones . The time required is attacking this device takes is more.

Bluesnarfing

In bluesnarfing the exchange of Information takes place by guessing the MAC address. However this is difficult task for attacker ,the Bluetooth uses a 48-bit unique MAC Address. There are over 280 trillion possible addresses to guess .After guessing ,the attacker can synchronize the device which is know as pairing . Then at least the information is exchanged between the devices.

Bluesnarfing is considered as the illegal in many countries.To avoid bluesnarfing always switch off the blue tooth device to non-discoverable mode . Never pair the device with the unknown or public places.

Bluejacking is one of the type of Blue-tooth hacking. Bluejacking was first carried by the Malaysian IT consultant. In simple words Bluejacking means tempoarly hijacking someones device. Bluejacking allow the user to send business cards anonymously using Bluetooth wireless technology.

Bluejacking is carried only to the Bluetooth enable device that is cell phones, PDA’s , laptop’s . Bluejacking can take place just at a range of 10 meters. To start with the process of bluejacking ,the hacker search for device whose Bluetooth device is on.

Bluejacking

Then the hacker enables a wireless communication between the device it is known as pairing. The hacker send out some business card or text message to user to establish the connection . The Bluejacker often look for a reaction from the user. They then send another, more personal message to that device. Once again, in order to carry out a bluejacking. All this is carried at the bluetooth enabled device via the OBEX protocol.
Bluejacker some make an misuse the device ,they can send messages orelse hack your contact list . In Bluejacking it does involve any alteration or indication that data is transferred from one device to another device.

In order to avoid the bluejacker disable the Bluetooth device when it is not needed or not in use or else reject the unexpected pairing request.

This article is to inform the public about the bluejacking. And how to protect your device from it . Don’t forget to make comments or questions here.