Eavesdropping on Bluetooth Headsets

[ROCKNTV1]

this activity in my area would secure a sever beating

[burnrider2001]

whether he did it under optimal conditions (which hackers do not get very often) or not, the point is that "it's out there and plausible". Ooooooor the guy is trying to sell classes at his website... either or!

[SexyKush420]

he has the voice of a fucking 12 year old

[vincentstockdaletv]

i love how u named the injected adio eargasm

[Vaultzero]

If this was real, this guy looks like the perfect lonely creep that would do it.

[n2spy77]

gay!!!!!!!!!!!!!!!!!!!

[jimmayl1]

This will only work if you know the address. Although, he does have a point that this displays some insecurities of the bluetooth technology, simply because it is a "security by obscurity" design, which has been shown to fail time and time again.

[jack9938]

eargasm?

[bimsam2]

thayerr!!!



[fingerprint211b]

@shanethemainman Would that stop you?

[thijsloon]

if you know the password (he says 0000 is standard), you can break in in all bluetooth headset devices with a regular phone

[nnngggiii]

what phone does he have? pleasee//

[amitsoni08]

very good information

[kayudelon]

la traduccion anda mal pero el video esta bueno!

[TheMightyKinkle]

you should have said'' fortunatly'' istead of ''unfortunatly thats not true'' at 0:51

[turbovectorz]

Bluetooth RF can be extended 7-10+ miles depending on the custom RF front-end and 26+ miles from SIGINT satellites.

[ecouriercouk]

@TheMightyKinkle ...I disagree with you. His sentence was grammatically correct. Furthermore, I will not comment on YOUR spelling.

[maxfli58]

Fear not. He cannot listen in on your phone conversations. This is mostly BS. Notice he already had the BT address of the target device. You cannot get this unless the target device is discoverable. Headsets do NOT stay discoverable. This was staged to make you afraid. While it is technologically possible, an attacker is going to have to capture the headsets BT address. This is NOT possible in the setting he is describing.

[flyingdervish]

@maxfli58 - Many devices become briefly discoverable when first turned on. A common instance would be such as in an airport where lots of people are turning their device on as they get off a plane. If you wanted to target a specific person, you might stake out their house until they get up and head out to work. You're likely to see their headset turn on then. Other scenarios may be less common, but possible.

[BigJyeTV]

@maxfli58 I don't think this was mad to really make people afraid, I see it more as pay attention to your bluetooth settings.

[robextra0]

@maxfli58: You can easily get the BT address, google Car Whisperer on trifinite website.

Please next time, learn a little more about a subject before responding, especially on expert IT topics.

TO ALL: SANS Institute is the world's top security training company, and this video is not just from a hacker, average IT person or a journalist trying to prove their point.

[pspheaven]

@maxfli58 Very true, it has to be discoverable... and you have to put it in that mode.. although I'm curious if it'd be possible to find it by sniffing the bluetooth traffic in the air the same as you can sniff wifi and get a hidden ssid.. regardless even if you could do that you'd need a bluetooth scanner, they're expensive.. the D-link DBT-120 is modable but most people would never be able to successfully mod the firmware of the device and get it to work.

[zethib]

so basically people need to change the pin code from the default one... makes sense.

[farhmoha]

This is a quality video man

[CredibilityorElse]

interesting video,good awareness for people that use bluetooth

[Usorth]

Arbitrary audio.

[lolivampire]

Let's hope this becomes so common. Whenever I see some self-important asshole wearing one of those dorky things, I want to slap them.

[synthead]

Absolutely excellent video! Shows practical use of this exploit, while showing the commands in clear view too. I'm duplicating your strategy right now. Much appreciated, thanks!

[mrseahawks10]

Bluesnarfing is the unauthorized access of information from a wireless device through a Bluetooth connection, often between phones, desktops, laptops, and PDAs. This allows access to a calendar, contact list, emails and text messages, and on some phones users can copy pictures and private videos. Currently available programs must allow connection and to be 'paired' to another phone to copy content.

[garrett414]

Would this work from osx?  Where is bluetooth installed on osx?

[shunkakodi]

Tooooo funny. Linux rules!!!!

I'll have a cafe mocha please

[cwggenius]

Hottie!! @ 24 seconds (in white)

[peppeddu]

bluetooth headsets, by default, won't accept remote connections unless you manually switch the device into "connect mode"

[lowtone10]

in reply to pepeddu, every time a call connects to the phone, the phone connects to the headset, the laptop poses as a phone

[peppeddu]

Unless you know the headset's MAC address your PC will be idling there for a long time.

And even then, when the phone receives request from two devices with the same MAC addresses all sorts of errors starts to happen.

[billie874]

Wow you just commit a crime and record it and put in on internet with detail information on how you did it, great job genius!

[Chrisxnieves]

lol... ur dumb. it was clearly him making an example using his blue tooth... he commited no crime GENIUS!

[casio1987vd]

this is very cool and worked on my fathers phone :) it was hilarous to inject some strange sound while in convo :d

[xzotyqa]

private investigators have devices available to them to monitor anyone's cellphone conversation legally. no hack needed. we are speaking about non-governmental or police work here. if you are a registered investigator you can do this, but then they have a need for it. why do you need to do this anyway if it isn't for legit reasons, entertainment?

[wizkid22]

turned my bluetooth off

[1bangor]

This guy is a moron. How did you get the address to the device? Why didn't you show the whole process. This is retarded.

In my day, you just stuck some tinfoil in your cellphone battery, and listened to peoples entire cell phone calls. Those were the good old days.

[jeremiahd23]

what are you, 100, retard, as if he is gonna show u exactly how to do it, if he did u would try and fail, dumbshit

[joeisabastard]

are you from the past?

[cosmiclightning]

I know exactly where you are! There's the SciLi and Thayer Street, and the bus tunnel! Right outside Brown.

[farmer808]

If you watch carefully, when he's listening to the conversation, the words "dramatization" appears on the bottom. In reality he was probably just hearing a guy drinking his coffee. To search for a bluetooth device in the first place, i'd need to be in paring mode. It's more likely that people's phones are being hacked more than the bluetooth headset itself. Don't believe me? Try going to a mall and searching for bluetooth devices on your phone.

[killingmelody]

I am doing Prom work about Bluetooth technology and. Bluetooth uses frequency of 1600Hz and operates in frequency range of 2.4GHz - 2.43 GHz which is equal to microwave oven. Bluetooth is safest communication technology and even US army uses it on short range. So my opinion is that BT can not be hacked.... or if it can, that is very slow process and difficult.

[lalalandd123]

o thats nice TEACH us how to evesdrop and for those out there attack with this nice

[Z3r0XoL]

i wanna know how to control the linux laptop with the phone :P

[oxblood]

WiFi/VPN + SSH

[fuckinashol]

and yes he runs linux

[niksoft111]

Yes, bluetooth is not a secure protocol, this is but one simple tool and technique used against such devices, one of many, yes it works, no its not a spoof, carwhisperer is a freely and openly distributed, proof of concept tool. Criminals have tools that have a much greater impact, this is just a fun tool to play with. Sans is simply demonstrating, and by that, making you aware about this wide-spread and simple to implement exploit, and there are many more... Be careful with bluetooth!

[ALTERN95]

Or just use a CB radio *shrugs*

[Adideva01]

BT can be hacked !BEWARE someone can be hearing YOUR CONVERSATION!!

[ReneeNme]

I think what mahammar1 had in mind was that the Bluetooth may have been NAMED after a 9th Century viking",not that it was invented by one.And he's correct,it's on Wikipedia.

BTW,this video is fake,but Bluetooth's technology CAN BE hacked.

[rangedtiger]

wow...?

[mahammar1]

According to wikipedia the reason why its called Bluetooth due to the fact it was an American viking in the early 9th Century who invented it.

[ReneeNme]

*According to wikipedia the reason why its called Bluetooth due to the fact it was an American viking in the early 9th Century who invented it.

That's some funny shit there mahammar1.Did Amerigo Vespucci invent the internet?Oops,I forgot,that was Al Gore.Nevermind.

: D

[spiritofcourage]

lol i dont need this cuz im all ready the emperor of evesdroping

[icygumball3000]

u dumbass, u just told the criminals how to do it >:(

[se7en1976]

Dude he didnt even show how to hook up the antena, let alone getting all the software.

This was vauge and general using ideas that a child could come up with. The technical bits were left out

[DimmeDriver]

@se7en1976 UTFG

Antenna: youtube(dot)com/watch?v=cwKWOd­OHiWY

Software: trifinite(dot)org/trifinite_st­uff_carwhisperer.html

Installation: mediakey(dot)dk/~cc/howto-inst­all-carwhisperer-on-ubuntu-9-1­0/

[please5]

is this illegal?

[bestSVMS]

most likely

[Quinlan2]

i hav a moto ht820.. how do i change the password

[Narcoblix]

Well, suppose that you are a person in charge of a very sensitive project for a business. The competition (or anyone else) could listen in on your potentially important conversation.

[dannyboyinxs]

hmmm exactly

[SirJaz30]

Answer: Do Not Use Wireless

[13thpersoncomedy]

use WPA2, change the pass every week

WPA2 takes at least 1 week to be cracked.. and there's 1% that the cracked password is "correct" so, the answer it, use WPA2 and change pass every week, just incase

[unadulterateddagger]

that has nothing to do with bluetooth, that's wifi

[pike666db]

LOL

[fanofsongs]

@unadulterateddagger ????????

[joejc07]

@unadulterateddagger how is that wifi, do you actually know anything?

[involutaryhaxor]

@joejc07 Back when I replied to this video a year ago, someone had said that you can use a WEP key to encrypt the traffic from your bluetooth. Since then, the thread of replies has been lost.

[jacksawild]

@unadulterateddagger WIFI and bluetooth are standards. They both use the same technology, it's only the control of the technology which differs. This is how you can use wifi hardware with bluetooth standards and vice versa. Its all EM, you see?

[involutaryhaxor]

@jacksawild Yes, they are the same general technology, EM spectrum, however, that doesn't mean that I can use my WiFi card or bluetooth dongle to capture visible light which is also part of the electromagnetic spectrum (If I'm wrong, I'd love to see that hack). My original comment only had to do with the fact that someone said to use WEP encryption to secure their bluetooth communication.

[jacksawild]

@involutaryhaxor My mistake. And very good point.

[markthema3]

@involutaryhaxor wifi card light shows would be friggin' amazing!

[ronaldinh0fan]

who would go through all of that just to listen to what would most likely be a pointless conversation.

[Vippi13]

Really this video is a very sneaky NOKIA commercial. O.o

[Rockonanon]

ZOMG! Viral marketing!

[MechaManiac10]

LOL! i feel a prank coming on... *uses ubuntu and his bluetooth dongle with his dad's ear piece*

[Katalyzt]

Nice

[allawenchen]

This works! Now to turn that cross at the top of the hill into an antenna :D

[777Sinny777]

I love how simple this is, I use it to rick-roll yuppies...epic lulz...

[mimzywimzy08]

Haha... did anyone notice the part that said eargasm.rav

...lol

[randomstufdude]

i did it to my dad and listened in to a conversation but it wasn't on the phone. I used the blutooth of a mac and it was very simple. But you can't do it unless you steal the blue tooth headset and connect it to your computer.

[amri250593]

1.42, what program is that? how to use a bluetooth on pc? my labtop has a bluetooth but how to activate it?

[ThaWhitePilot]

Buy a enhanced blue tooth on ebay item# 380011507970

[beaveling]

and ofcourse you can do it with VoIP over wifi also

[leedeforest]

I saw this guy demo this technique at a SANS conference. It took an hour, during which time he showed us exactly how to determine the bdaddr of the target device, which is the only thing you need to know, since the PIN is always 0000. (Turns out that half the bdaddr is transmitted in the clear; the other half is easy to guess because it is the manufacturer ID and there are only about 30 of these, as I recall). This guy is brilliant and teaches the SANS wireless course.

[lolhinuby]

smart, ive personallly tried it on my sister but not the same way and all of you people who think he is faking you all suck just cause you cant do it dosent mean that its not possible

[sergelapelle]

One of the guys who worked for Marks and Spencers was caught insider dealing by bluetoothing his text messages and phone calls.

[rocker1821]

anything going over the air can be hacked if you know what your doing

[randylikesdrums]

this guy is like beyond genius.

[summerwizz]

yeh im not going to hack anyone but where do i get all this files and does this run on vista

[HubSwitch]

how come? summat to do with it will only accept a device connection upto one minute after switch on, of the head-set or summat?

[leedeforest]

This is not bull. I saw Josh Wright's hour-long technical demo showing exactly how it is done. Since then I have avoided bluetooth completely, and won't buy a phone or GPS that supports it.

[TheTallDwarf]

no, for headsets it's automatic sometimes mostly

[TheTallDwarf]

oh sure

[therealdudeguy1234]

There are Linux programs for everything, duh!

[alainnannym]

bad

[firstmicro]

Error: Can't connect RFCOMM channel: host is down

any help?

thanks

[firstmicro]

Ok. questions ,,, How did you scan for the bd:address for that bluetooth headset, Is there an app to scan for the bt headsets around me..

I hope someone will answer these

Thanks

[fredo69]

i dont care cuz its not like im saying where the secret treasure is when im talking to my mom.

[atombomb12345678]

yea.. they all have the same signal...

[AppA]

Big, big brother :S

[DarkMaverik]

People who wear BlueTooth headsets when not on a call look like idiots to everyone else.

[darkism]

"People who wear BlueTooth headsets at any time look like idiots to everyone else."

Fixed.

[atombomb12345678]

is this because you cant afford one, or is it you are "to Cool" to wear one... dude shut the hell up if you dont know what you are talking about. the blutooth is not just for looks ats to better convienence the average person, and to keep your hands on the steering wheel... so think twice before you say somthing that stupid.

[puppetmasterblaster]

THEY ARE FOR RETARDS

[DarkMaverik]

I never mentioned driving. I'm talking about people who walk around the city wearing a headset but not talking to anyone. It's not even a minor inconvenience to just keep the stupid thing in your pocket and pull it out to take a call.

[p13m4n]

Speakerphone, learn to use it. lol.

[deepshadow32]

i kno you can hack it but im not sure if you can inject audio

[bluegbx]

nice.but how can i stop ppl from Eavesdropping my BT headset???tell me pls.

[BPinard]

You can't unless you can change the PIN number. Even if you can, it is still possible to scan for all values between 0000-9999, so the best way to secure your communications would be encryption.

[atombomb12345678]

change your pin id