| Many electronic devices are now incorporating Bluetooth technology to allow
wireless communication with other Bluetooth devices. Before using Bluetooth,
it is important to understand what it is, what security risks it presents,
and how to protect yourself.
What is Bluetooth?
Bluetooth is a technology that allows devices to communicate with each other
without cables or wires. It is an electronics "standard," which means that
manufacturers that want to include this feature have to incorporate specific
requirements into their electronic devices. These specifications ensure that
the devices can recognize and interact with other devices that use the
Bluetooth technology.
Many popular manufacturers are making devices that use Bluetooth technology.
These devices include mobile phones, computers, and personal digital
assistants (PDAs). The Bluetooth technology relies on short-range radio
frequency, and any device that incorporates the technology can communicate
as long as it is within the required distance. The technology is often used
to allow two different types of devices to communicate with each other. For
example, you may be able to operate your computer with a wireless keyboard,
use a wireless headset to talk on your mobile phone, or add an appointment
to your friend's PDA calendar from your own PDA.
What are some security concerns?
Depending upon how it is configured, Bluetooth technology can be fairly
secure. You can take advantage of its use of key authentication and encryption. Unfortunately, many
Bluetooth devices rely on short numeric PIN numbers instead of more secure
passwords or passphrases.
If someone can "discover" your Bluetooth device, he or she may be able to
send you unsolicited messages or abuse your Bluetooth service, which could
cause you to be charged extra fees. Worse, an attacker may be able to find a
way to access or corrupt your data. One example of this type of activity is
"bluesnarfing," which refers to attackers using a Bluetooth connection to
steal information off of your Bluetooth device. Also, viruses or other
malicious code can take advantage of Bluetooth technology to infect other
devices. If you are infected, your data may be corrupted, compromised,
stolen, or lost. You should also be aware of attempts to convince you to
send information to someone you do not trust over a Bluetooth connection.
How can you protect yourself?
- Disable Bluetooth when you are not using it - Unless you are actively transferring information from one device to another, disable the technology to prevent unauthorized people from accessing it.
- Use Bluetooth in "hidden" mode - When you do have Bluetooth enabled, make sure it is "hidden," not "discoverable." The hidden mode prevents other Bluetooth devices from recognizing your device. This does not prevent you from using your Bluetooth devices together. You can "pair" devices so that they can find each other even if they are in hidden mode. Although the devices (for example, a mobile phone and a headset) will need to be in discoverable mode to initially locate each other, once they are "paired" they will always recognize each other without needing to rediscover the connection.
- Be careful where you use Bluetooth - Be aware of your environment when pairing devices or operating in discoverable mode. For example, if you are in a public wireless "hotspot," there is a greater risk that someone else may be able to intercept the connection than if you are in your home or your car.
- Evaluate your security settings - Most devices offer a variety of features that you can tailor to meet your needs and requirements. However, enabling certain features may leave you more vulnerable to being attacked, so disable any unnecessary features or Bluetooth connections. Examine your settings, particularly the security settings, and select options that meet your needs without putting you at increased risk. Make sure that all of your Bluetooth connections are configured to require a secure connection.
- Take advantage of security options - Learn what security options your Bluetooth device offers, and take advantage of features like authentication and encryption.
_________________________________________________________________
Both the National Cyber Security Alliance and US-CERT have identified
this topic as one of the top tips for home users.
_________________________________________________________________
Authors: Mindi McDowell, Matt Lytle
_________________________________________________________________
Courtesy of US-CERT, a government organization.
Return to Top
Time to Modify Counterterrorism Strategy
By Peter B. Martin
It was a close call in Times Square. Thankfully, someone was observant and reported the suspicious smoke emanating from the vehicle. Fortunately, the bomb was poorly assembled and failed to go off. Unfortunately, the terrorist, Faisal Shahzad almost made a getaway. Nonetheless, lessons can be learned from this failed bombing plot and applied to further safeguard the public in the future. It also suggests that in the so-called “war on terrorism”, that is presently being fought in Afghanistan, is not making the United States any safer, to the contrary, I argue it is making it more unsecure. To start with, a few comments on improving security the Times Square incident exposed would be in order.
When someone buys a one-way airline ticket to Pakistan on the next flight and with cash, if that doesn’t appear suspicious to the ticket seller and doesn’t lead to heightened security check, I don’t know what then would. Anyone, paying cash for tickets should be flagged; anyone flying to Pakistan should be flagged; and anyone buying a one-way ticket should be flagged and should be subject to a tighter security check. A series of questions should be then asked of the suspects and their answers and comportment analyzed by experts watching the interview via a one-way mirror or through a CCTV security camera. Only after a thorough examination, that lifts any doubt, should the person be allowed to board an aircraft.
The would-be terrorist almost made it out of the county because airport personnel failed to check to see if any new names were added to the No-Fly list. When a new name is inscribed on the No-Fly bulletin, that name should automatically come up in red on the monitors of the check-in counters. All pilots should have access to the list and any addition should be immediately brought to their attention so they can be sure that person isn’t on their passenger list.
The Pakistan Taliban was the initiators of this bungled bombing attempt and was behind all the terrorism conducted lately; consequently, it should be the principal county that counterterrorism should now focus on. But that is not the case.
The United States is spending billions of dollars in Afghanistan and committing thousands of troops over nine years to defeat the insurgents and accomplishing so little. At this writing the casualty list is over 1000 American soldiers. The cost of this war is horrendous. For example, a gallon of fuel for a military vehicle over there averages a whopping $400. A mere thousand U.S. troops in Afghanistan cost $1 billion to deploy and there are tens of thousands already stationed out there. The cost alone should be incentive to get out of that country as fast as possible, particularly with the present economic situation the West finds itself in. Throwing money at a bad government is an extravagance we can ill afford. The Pentagon’s rational for fighting this conflict has been altogether eroded over the years.
Afghanistan’s historical record unquestionably establishes that these tribal people never accept foreign control. The have repulsed intruders time and time again. Nobody has ever conquered the region for very long. Darius the Great, Alexander, Attila the Hun and Genghis Khan among others, all tried but were eventually routed. You can’t defeat these people the war theater is all too fluid. The allies are confronted with internal power struggles, drug lords, deep ethnic divisions, cross border insurgences and tribal conflicts, all intractable problems that have been going on for centuries and never totally resolved. It is a state in constant flux and perplexity and at war with itself.
Unless we are going back to overland trading with the Orient, Afghanistan holds little strategic value. Remaining there will only make matters worse in that communal civil war. The best option that United States has to improve security on their home front is to give up trying to defeat terrorism overseas. Simply put, occupying and fighting terrorists in their native country only generates more hatred and more terrorism against the United States. Furthermore, it gives the natives more incentive to be more vicious and invites retaliation by sympathizers back home.
Provided by Specialized Consulting Services Network Member Peter B. Martin in Toulouse, France.
Return to Top
|
Understanding Bluetooth Technology