ie8 fix
madison

The Mobile Gadgeteer

Matthew Miller & Joel Evans

Bluetooth stole my wife's phone call

By | February 25, 2012, 5:29pm PST

Summary: With Bluetooth on, can a device be compromised these days without pairing?

I’ve been a fan and user of Bluetooth since before it was relegated to just being for wireless headsets. One of the things I have loved about it is that once it’s paired, all you need to get it to work is to have both the headset and the phone turned on and have bluetooth activated. Then seconds later, you’re talking wirelessly.

Well, this scenario actually backfired for a friend of mine the other day. It turns out that my friend and his wife were traveling in their own cars but happened to be one in front of the other. My wife was having a conversation with his wife, who was using her iPhone without Bluetooth, when half way through the phone call, all of the sudden my wife’s friend’s husband was on the call. It turns out that his in-car Bluetooth was paired to his wife’s phone and since the cars were one behind the other, his in-car Bluetooth took over the call.

The wild thing about the above situation was how seamless it was. I wasn’t on the call but was sitting next to my wife at the time. She was enjoying a conversation with her friend when all of the sudden she said, “hello? Who is this?” In her case, one second she was talking with her friend, and then without any sound or click on the other end, the call was taken over by my wife’s friend’s husband’s in-car Bluetooth.

I know that this case is a weird one since in order for it to happen to anyone else, the phone has to be paired to the other Bluetooth receiver, and the cars have to be one behind the other, but I figured it was a pretty wild story and worth sharing.

The above also got me thinking about Bluecasing or War Nibbling. If you’re not familiar with the terms, they are used to describe the act of pairing with someone’s phone over Bluetooth and stealing or reading their information. This was big news in the Pocket PC days but I haven’t heard about it lately. I’m not sure if it’s because the security has gotten better or people are just not aware of it, but I figured maybe if I wrote this article, the readers would chime in.

Have you had an experience where Bluetooth didn’t work the way you expected it to? Or where your phone was compromised via Bluetooth? Share in the comments below.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

With more than a decade of mobile, Internet and wireless experience, Joel specializes in taking existing brands and technologies into the mobile and wireless space.

Disclosure

Joel Evans

Joel is a serial entrepreneur with his most recent business, CronkSoftware (cronksoftware.com), focusing on consulting and building games and applications for mobile devices. Joel has consulted for Microsoft’s Windows Mobile division and advises other companies on how to incorporate mobile into their existing brands and products. Joel purchases many of his devices and others are sent for review on a 30-day loaner basis and then returned to the supplier. If any devices are provided as “keeper” Joel will clearly disclose this in his reviews.

Biography

Joel Evans

With more than a decade of mobile, Internet and wireless experience, Joel specializes in taking existing brands, technologies and services into the mobile and wireless space. Joel is currently serving as the Managing Director of Cronk Software, Inc., a company he founded to offer full-service, end-to-end mobile strategy, design and development services.

Joel is the former founder and "Chief Geek" of Geek.com, a website praised by The New York Times, The Wall Street Journal, The Economist, and others as one of world's best sources of information for technology professionals and enthusiasts.

Joel also serves as a technology expert for a number of well-known publications and regularly advises corporations, analysts, journalists and bloggers on what the future of technology will bring. He brings decades of relationships with leading game publishers, online communities and publishers, along with both hardware and software product management and delivery expertise. Joel can be found online as "JoelGeek" and you can follow him on Twitter @JoelGeek.

Related Discussions on TechRepublic

Did you know you can take part in these discussions with your ZDNet membership?
12
Comments

Join the conversation!

Just In

All of the Time
alphaxi3 28th Feb
I always have a problem with BT hijacking. I have my headphones paired to my phone and my laptop. Every time I am listening to something on my laptop and my phone rings and I start talking on it eventually my headphones will hijack the call and I am wondering why I cannot hear the other person anymore. What makes me mad is that I sometimes turn the headphones to pair with my phone and it will not and I have to do it manually, but it will religiously hijack my calls with no problems.
The service worked as designed. She can turn off the auto-connect option to prevent this from happening .... but then she will have to manually make the connection every time she is in her car.

The question is why is her phone also hooked to your car? Unless she is the driver on your car on a regular basis, there was no need to have her connected on your car. She can manually answer calls while being a passenger.
2 Votes
+ -
Not uncommon
CobraA1 25th Feb
It's not uncommon, especially for tech-savvy families.

It's also not uncommon for families to have joint ownership of property rather than "his" or "her" car. Many families may have one large family vehicle for longer trips and one smaller vehicle for every day use.
0 Votes
+ -
Well
CobraA1 25th Feb
Well, security has gotten better - you need to have the right code to pair these days, and devices won't pair automatically, you need to actively put them into a special pairing mode. So I don't think "Bluecasing or War Nibbling" is really all that practical anymore, because the manufacturers have (mostly) wised up.

Interesting story, though.
I have not even had a device in the last 6 years that had the pairing code printed in the manual, let alone have my phone or computer ask for a code. not since WinMo 5
0 Votes
+ -
regulation?
lgwhitlock@... 26th Feb
Bluetooth is not regulated for only wireless headset use. There are standards for Bluetooth profiles that define what each device can do like file transfer or headset. Then each manufacturer decides which profiles to include. Many cell phone carriers try to limit which profiles can be implemented so they can sell more of their own services. The regulation would effect paring devices to provide a certain level of security. It is not perfect but will keep uneducated curious people from listening in. A true hacker will always find a way in...
The word he used was relegated, not regulated.
0 Votes
+ -
Pairing
Byterat 26th Feb
If the phone had been paired with the BT in the car and had a BT earpiece paired up as well, the phone might have shifted between the devices if the earpiece had a momentary signal level change. The phone might have perceived the signal drop as an indication to switch to the other available pairing.
0 Votes
+ -
Inadvertent Bluetooth switching
AMCooper63 27th Feb
My cousin got a new phone. But soon after getting it, it kept dropping out while she was in a call at her house. It got bad enough that she took it back and got a new phone. Soon after getting the new phone, it started happening again. She had a Jabra visor speaker for hands free in the car. It's rarely turned off. When ever it was parked in the driveway and she was in the living room, it would randomly connect and take over her call. There was nothing wrong with the phones.
0 Votes
+ -
I was on the front porch on my phone with my brother while my car was warming up out back in the driveway. I came into the house to the kitchen and could no longer hear him. It took a few minutes for me to realize that my in-car bluetooth had taken over once my phone got in range. He didn't think it very funny but I did. He spent a whole 3 minutes talking to my car. When I opened the door to the car I could hear him saying, "Hello?"
Gotta love technology!
0 Votes
+ -
Unauthorised Bluetooth
jhudson2049 27th Feb
A Friend was driving her Husband's car recently, and while she was stopped at a set of traffic lights, all of a sudden she heard this belching and farting sounds! As well as this stupid rap music!

What happened was, that someone had managed to paired their phone to the car's built-in Bluetooth! It only lasted a couple of minutes, because as soon as the light's turned green, she drove off, and was out of range, but it did scared the crap out of her!! She turned around and drove straight back home!

The only trouble with cars with built-in Bluetooth is how do you turn the Bluetooth off? In most cars, you can't!! So they took the car to the local Auto Electrician and had them install an OFF switch so that they can turn it off!
0 Votes
+ -
bluetooth
WATKINS12@... 27th Feb
One of them must have been tailgating.
0 Votes
+ -
All of the Time
alphaxi3 28th Feb
I always have a problem with BT hijacking. I have my headphones paired to my phone and my laptop. Every time I am listening to something on my laptop and my phone rings and I start talking on it eventually my headphones will hijack the call and I am wondering why I cannot hear the other person anymore. What makes me mad is that I sometimes turn the headphones to pair with my phone and it will not and I have to do it manually, but it will religiously hijack my calls with no problems.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix