In recent tests by Codenomicon, every Bluetooth handsfree kit the company tested had critical security issues.
"The kits were susceptible to 'fuzzing' -- attacks by transmissions of malformed data that can crash devices or expose holes in the security of their implentation of the Logical Link Control and Adaption Protocol (L2CAP)," writes Ars Technica's Sean Gallagher.
"The problem isn't limited to car kits," Gallagher writes. "Codenomicon's Tommi Mäkilä says that about 80 percent of devices tested in Codenomicon's 'plugfests' have crashed during testing. In crashing, the devices often reveal gaps in their security that, in the case of handsets and computers, can be used to access data or inject malware into the system."
Go to "Lousy code opens up Bluetooth hands-free kits, smartphones to hackers" to read the details.
For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.
Loading Comments...