Comments on: BlueCast or BlueSnarfed? http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/ News, opinion, and fresh thinking for web developers and designers. The official podcast of sitepoint.com. Thu, 04 Dec 2008 03:47:59 +0000 http://wordpress.org/?v=2.5 By: David Johnson http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-320682 David Johnson Tue, 31 Jul 2007 03:17:25 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-320682 if a end-user sees the bluecast symbol and says to ones' self hey I would like to find out more about that, then they would enable their bluetooth - get the info they need then turn it off. In my experience bluetooth does chew into the battery, this is a pain if you use your phone as much as my sister does. if a end-user sees the bluecast symbol and says to ones’ self hey I would like to find out more about that, then they would enable their bluetooth - get the info they need then turn it off.
In my experience bluetooth does chew into the battery, this is a pain if you use your phone as much as my sister does.

]]> By: AlexW http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-76803 AlexW Tue, 31 Oct 2006 01:45:23 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-76803 <blockquote>well as long as i am aware of this Bluecasting stuff offered by filter world wide (www.filterww.com & www.bluecasting.com), they are antispam .. and as i have observed if one rejects the message they do not send it again .. otherwise downloads just once and doesn’t prompt again … this technology is widely being used in stadiums, stations and aiports around the world while till now it seems filter world wide is the only successful leading provider of the technology..BlueSnarfed and BlueCasting are totally two different things ..</blockquote> Bill the point is, the BlueSnarf demonstrates the attacks <em><strong>are</strong></em> invisible -- no prompt or action by the phone owner is required -- did you actually watch the presentation? Security experts advise that the only foolproof protection against the attack is to not leace your phone's bluetooth switched to 'discoverable'. Bluecasting relies heavily on discoverable bluetooth.

well as long as i am aware of this Bluecasting stuff offered by filter world wide (www.filterww.com & http://www.bluecasting.com), they are antispam .. and as i have observed if one rejects the message they do not send it again .. otherwise downloads just once and doesn’t prompt again … this technology is widely being used in stadiums, stations and aiports around the world while till now it seems filter world wide is the only successful leading provider of the technology..BlueSnarfed and BlueCasting are totally two different things ..

Bill the point is, the BlueSnarf demonstrates the attacks are invisible — no prompt or action by the phone owner is required — did you actually watch the presentation? Security experts advise that the only foolproof protection against the attack is to not leace your phone’s bluetooth switched to ‘discoverable’.

Bluecasting relies heavily on discoverable bluetooth.

]]> By: BILL http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-76798 BILL Tue, 31 Oct 2006 01:27:13 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-76798 well as long as i am aware of this Bluecasting stuff offered by filter world wide (www.filterww.com & www.bluecasting.com), they are antispam .. and as i have observed if one rejects the message they do not send it again .. otherwise downloads just once and doesn't prompt again ... this technology is widely being used in stadiums, stations and aiports around the world while till now it seems filter world wide is the only successful leading provider of the technology..BlueSnarfed and <em>BlueCasting</em> are totally two different things .. well as long as i am aware of this Bluecasting stuff offered by filter world wide (www.filterww.com & http://www.bluecasting.com), they are antispam .. and as i have observed if one rejects the message they do not send it again .. otherwise downloads just once and doesn’t prompt again … this technology is widely being used in stadiums, stations and aiports around the world while till now it seems filter world wide is the only successful leading provider of the technology..BlueSnarfed and BlueCasting are totally two different things ..

]]> By: AlexW http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-72335 AlexW Mon, 23 Oct 2006 01:40:59 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-72335 Roger, I'm not totally convinced that client-based apps are the answer either -- unless one client was to become onmipresent, in the way Flash has. I think people would be a bit gun-shy about installing an app just to use services while they wait at a station. Who knows, the station at the other end might require a different client and I might need another client at the shopping mall. Ideally I think this stuff needs to be pretty transparent if people are going to use it. Perhaps an icon appears on your phone's screen telling you there is a local bluetooth service available and asking you if you would like more information on it. Maybe there could be some kind of encrypted certificate system that could verify the legitimacy/ownership of any sort of service asking to connect. You would think it would be almost a no-brainer to publish bluetooth interactive/searchable maps for stations, malls, sports centers, etc. Roger, I’m not totally convinced that client-based apps are the answer either — unless one client was to become onmipresent, in the way Flash has. I think people would be a bit gun-shy about installing an app just to use services while they wait at a station. Who knows, the station at the other end might require a different client and I might need another client at the shopping mall.

Ideally I think this stuff needs to be pretty transparent if people are going to use it. Perhaps an icon appears on your phone’s screen telling you there is a local bluetooth service available and asking you if you would like more information on it.

Maybe there could be some kind of encrypted certificate system that could verify the legitimacy/ownership of any sort of service asking to connect.

You would think it would be almost a no-brainer to publish bluetooth interactive/searchable maps for stations, malls, sports centers, etc.

]]> By: Roger http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-70821 Roger Fri, 20 Oct 2006 08:15:44 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-70821 This is why solutions like Jellingspot and Nokia's CoolZone are becoming more popular -- because they're client-server oriented ... they don't spam and content is legit. The only problem is people have to install a client-side application on their mobile device first, but it's not that difficult. This is why solutions like Jellingspot and Nokia’s CoolZone are becoming more popular — because they’re client-server oriented … they don’t spam and content is legit. The only problem is people have to install a client-side application on their mobile device first, but it’s not that difficult.

]]> By: Ryechi http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-70227 Ryechi Thu, 19 Oct 2006 15:03:39 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-70227 That sounds alarming. I always leave my buetooth device un-attended, innocently aware of the possibilities and existence of malicious strangers That sounds alarming.
I always leave my buetooth device un-attended, innocently aware of the possibilities and existence of malicious strangers

]]> By: Nadja http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-70223 Nadja Thu, 19 Oct 2006 14:58:28 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-70223 Even though Bluetooth is a really cool feature, I only use it to connect with other devices. And I don't think that I would press "Yeah, download this file right away, I don't care about the sender". I think this can be pretty annoying to many people - like pop-ups or spam mails. It would be much better (and more secure) to put up a big sign with a nice explanation of the service and let the user discover it instead of sending him messages without his permission or files he wouldn't choose if he had a choice. Even though Bluetooth is a really cool feature, I only use it to connect with other devices. And I don’t think that I would press “Yeah, download this file right away, I don’t care about the sender”. I think this can be pretty annoying to many people - like pop-ups or spam mails.

It would be much better (and more secure) to put up a big sign with a nice explanation of the service and let the user discover it instead of sending him messages without his permission or files he wouldn’t choose if he had a choice.

]]> By: Octal http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-70115 Octal Thu, 19 Oct 2006 11:14:00 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-70115 <blockquote>…which begs the question, where do I go to find out about security vulnerabilities in my phone?</blockquote> Indeed. Nothing obvious has come up on my search for my phone

…which begs the question, where do I go to find out about security vulnerabilities in my phone?

Indeed. Nothing obvious has come up on my search for my phone

]]> By: Kevin Yank http://www.sitepoint.com/blogs/2006/10/19/bluecast-or-bluesnarfed/#comment-70031 Kevin Yank Thu, 19 Oct 2006 08:04:23 +0000 http://www.sitepoint.com/blogs/?p=1742#comment-70031 ...which begs the question, where do I go to find out about security vulnerabilities in my phone? …which begs the question, where do I go to find out about security vulnerabilities in my phone?

]]>