Spammed by Bluetooth
An Anonymous Reader writes "BBC News is reporting a new craze - using Bluetooth to send unsolicited messages. Apparently lots of phone owners are leaving Bluetooth switched on, meaning that anyone within range can send a short message. The phenomenon is known as "bluejacking". It's not clear at present that this is being done by anyone other than pranksters, but one can't help wondering, how long before commercial spammers catch on."
Heh. I had a long layover in Amsterdam last month and had hours of gleeful fun sending "boe" notes over bluetooth to all the other bluetooth phones I could see while drinking Heineken at the KLM Crown Lounge.
I've used this feature also to send quick notes to cow-orkers at the office when they were on the phone or we were busy in a meeting. It's handy and saves the absurd ten cent charge applied to an outbound SMS.
It's only a matter of time before it's rendered useless due to spam, I'm sure.
Every bluetooth phone I've ever owned has required a PIN to be set when you activate it. Without the PIN you can't make a connection.
Then, when connection does succeed, a box pops up on the receiving phone asking whether you want to accept the connection.
It's difficult to see how that could be done without the owner knowing about it.
As bluetooth operates in the same 2.4 GHz band as WiFi, I'd bet some people are hooking up Bluetooth devices to cantennas for greater bluejacking range.
Two wrongs don't make a right, but three lefts do.
I claim Prior Art on the technique. I had a plan to transmit messages wirelessly to users of gentlemen's toilets as they were standing there unable to do much else. The original intention was to send advertisements, and it would ideally have been done on a pay-to-view basis so I would be making money three ways: from the advertisers, from the recipients of the adverts and from the patent royalties.
Everybody is talking about how the damage will be limited because bluetooth has such a short range, but what happens if the spammers boost the power of their transmittors? Is this possible with Bluetooth (I admit I don't know)? If so, we may be in for more problems then the first few posts let on.
Sure, it may be illegal/immoral, but can we trust spammers to be legal and moral?
On another note how long until this is used to SPAM products designed to defeat this type of SPAM (ala Windows Messenger Service)?
I want peace on earth and goodwill toward man.
We are the United States Government! We don't do that sort of thing.
You could easily create a small battery powered embedded device running Linux that would just send out bluetooth messages. Drop that on a city bus or subway car and you could spam a ton of people really easily.
;)
Perhaps I should be patenting an idea like that.
I understand that some bluetooth phones are used to connect your PDA or laptop to the Internet.
Is it possible to place a laptop next to a phone, somehow hijack the connection, get the IP address, send 1000 spam messages and disconnect?
Should not take more than 30-50 seconds.
As I recall, this was one of the intended applications of Bluetooth.
A friend of mine uses Bluetooth in this way to distribute his freeware Symbian games such as Vexed to other Symbian phones.
Watch out for a manic Scotsman on the London tube system waving a Nokia 7650...
Forget viruses, what if someone discovers a way to send a malformed message which crashes the phone?
Even worse, some of the new phones offer 'over the air' programming updates. The right bug, and someone could render your phone useless....