Slashdot Mirror


Ready, Aim, HACK!

KD5YPT writes "According to a story on Wired, Adam Laurie and Martin Herfurt demonstrated that they can hack a Bluetooth enabled phone from up to a mile away using a sniper rifle with yagi antenna. Kinda gives a new meaning to '1337 hAx0r2'."

62 of 277 comments (clear)

  1. Great by Anonymous Coward · · Score: 5, Funny

    Now all the people that hack Counter-Strike will be out on the streets with Snipers hacking Bluetooth devices, leaving CS hack-free. Thank god.

  2. So? by Zorilla · · Score: 5, Funny

    I'm not impressed. If you really want to impress me, use a Cap'n Crunch whistle over a Bluetooth-enabled phone to switch your neighbor's TV to the Spice channel with the volume up to 50.

    Fun.

    --

    It would be cool if it didn't suck.
  3. Kinda gives a new meaning to '1337 hAx0r2'. by strictnein · · Score: 4, Funny

    Kinda gives a new meaning to '1337 hAx0r2'.

    What, so instead of "Fucking tool" it now will mean "Fucking tool who's in jail for aiming a sniper rifle at someone"?

    1. Re:Kinda gives a new meaning to '1337 hAx0r2'. by justkarl · · Score: 5, Funny

      What, so instead of "Fucking tool" it now will mean "Fucking tool who's in jail for aiming a sniper rifle at someone"?

      True.
      Do you think that cops would arrest you first for
      a: hacking or
      b: carrying around a F'n sniper rifle?

      "No, officer, I swear I wasn't shooting anybody, I was just trying to hack their phone!"

    2. Re:Kinda gives a new meaning to '1337 hAx0r2'. by still+cynical · · Score: 4, Insightful

      Do you really think you wouldn't go to jail for aiming that thing at someone? The police don't care if it's not a real rifle, the same as they wouldn't care if you aimed a realistic looking squirtgun at someone on the highway. As far as they're concerned, if it looks like a duck and walks like a duck, you're threatening someone with a duck.

      --
      Ignorance is the root of all evil.
    3. Re:Kinda gives a new meaning to '1337 hAx0r2'. by Jahf · · Score: 2, Insightful

      The beauty of the sniper rig is that you're not SUPPOSED to be -seen-.

      Besides, if you can do this with a sniper rifle, you can do it with gear that looks like a telephoto rig. While it won't look less suspicious, it will appear less malicious.

      --
      It is more productive to voice thoughtful opinions (reply) than to judge (moderate) others.
    4. Re:Kinda gives a new meaning to '1337 hAx0r2'. by Ignorant+Aardvark · · Score: 2, Informative

      You've got to be kidding!!!!!!!!! how is this funny? The idiot did not even take the time to click on the article before articulating a kharma whoring response. What are the mods doing here, rewarding laziness? I smell abuse, someone meta-moderate this.

      You don't gain karma for a Funny mod.

    5. Re:Kinda gives a new meaning to '1337 hAx0r2'. by d474 · · Score: 5, Funny
      They should turn this rifle into a head mounted unit with a Large parabolic dish attached to the top.

      That would result in:
      1. 1) You would get laughed at by police instead of shot

      2. 2) Nerd factor points increase in orders of magnitude
      --
      Authority questions you. Return the favor.
    6. Re:Kinda gives a new meaning to '1337 hAx0r2'. by Lord_Dweomer · · Score: 2, Interesting
      " Do you really think you wouldn't go to jail for aiming that thing at someone?"

      You're right, they might shoot first and ask questions later.

      Any moron who actually does this in public deserves the Darwin award they get.

      --
      Buy Steampunk Clothing Online!
    7. Re:Kinda gives a new meaning to '1337 hAx0r2'. by plover · · Score: 2, Insightful
      At least in The United States of Ashcroft you'd only be charged with attempted murder for pointing a sniper-rifle-looking thing at someone.

      If you were to point a camera at someone instead, you'd be arrested for "casing a national security threat" and held indefinitely without bail until they decided to execute you.

      --
      John
    8. Re:Kinda gives a new meaning to '1337 hAx0r2'. by Eisenfaust · · Score: 2, Interesting

      A funny old guy at my work told me a story that reminds me of this a lot.

      I guess when he was young, President Truman came through town. I'm not exactly sure of his motives but he probably didn't have access to a TV at this time. Anyway.... When the president's motorcaid got within reasonable distance from his house he grabbed his dads rifle and ran up to the roof of the house. He then proceeded to point the rifle at the president as his car passed by serval blocks away. Of couse his intention was to look through the high magnification scope to get close glimspe of the president. He lived in Independence Missiouri, Truman's home town. It seems like a stupid thing to do, but apparently the idea of seeing such a hometown hero was more than enough to blur his judgement.

      Its funny how things with very innocent intention can be viewed as something totally different. Its also scary to think what might happen if a kid tried something like this today.

      --
      Grrrrr... don't bother me, I'm thinking.
  4. guns.. by Anonymous Coward · · Score: 5, Funny

    If I saw a guy pointing a gun at me from far away (or close), I wouldn't be worried about him taking my contacts out of my phone.

  5. Camping bastards... by Fulcrum+of+Evil · · Score: 4, Funny

    Now in real life too. Too bad you can't toss the occasional opportunistic grenade like in Half Life.

    --
    "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    1. Re:Camping bastards... by stienman · · Score: 2, Interesting

      I don't know about that. If you design and place a very powerful 2.4GHz emitter so it goes right up their Yagi, then I bet you could damage the receiver electronics of the bluetooth device they're using.

      Kind of like sticking a carrot in the gun barrel and letting them blow it up themselves.

      At least these are active attacks - you should be able to honeypot it very easily, or at the minimum detect attacks, and jam them if needed.

      -Adam

    2. Re:Camping bastards... by sploo22 · · Score: 2, Funny

      ...so it goes right up their Yagi

      Wow. That's a euphemism I've never heard before.

      --
      Karma: Segmentation fault (tried to dereference a null post)
  6. Sweet by TheSexican · · Score: 5, Funny

    No more paying for those pricey 900 numbers... I'll just hack some poor schmuck's phone and whack o..err... talk for free.

    --
    Hey, guys. Big gulps, huh? Cool. All right! Well, see ya later.
  7. It would be interesting... by AcquaCow · · Score: 4, Interesting

    to use this same setup to look down into a city and pick up individual wireless networks.

    War Sniping?

    --

    up 12 days, 22:30, 2 users, load averages: 993.20, 994.21, 994.56
    *makes note to limit user processes...
    1. Re:It would be interesting... by garcia · · Score: 2, Funny

      My wireless network is fucking bulletproof. I have a monk standing guard.

  8. Re:Sniper rifle?! by rvw14 · · Score: 5, Informative

    After I RTFA, I found that a sniper rifle was not used

    The BlueSniper "rifle," created by John Hering and colleagues at Flexilis as a proof-of-concept device, resembles a rifle. It has a vision scope and a yagi antenna with a cable that runs to a Bluetooth-enabled laptop or PDA in a backpack.

  9. Yeah, Except... by JamieKitson · · Score: 5, Funny

    ...that you have to call the guy at the other end and ask him to stand very very still :)

  10. They should paint that thing orange by Anonymous Coward · · Score: 3, Interesting

    ... or something to make it look like a toy. They're going to have real guns pointed at them if they keep carrying that around, and I'd say anyone that shoots back would be entirely justified.

  11. L33t? by Lethyos · · Score: 2, Insightful
    Kinda gives a new meaning to '1337 hAx0r2'.

    Uhm, no, not really. Not at all.

    --
    Why bother.
  12. that's why by eoyount · · Score: 5, Interesting

    That's why you should turn bluetooth off when you're not using it.

    Is there really any need to have bluetooth turned on all the time? I would think that it just wastes batteries.

    --
    To understand recursion,
    you must first understand recursion.
    1. Re:that's why by whorfin · · Score: 3, Interesting

      Toothing is why you leave it on. I would have figured that /. of all places would be all over this one.

      --
      Laugh while you can, monkey-boy!
    2. Re:that's why by the+pickle · · Score: 2, Funny

      No way, man. Most of /. doesn't even know what sex *is*...

      p

  13. Re:Time by EvilCabbage · · Score: 2, Funny

    What kind of time do these people have to try these kinds of ridiculous "tests?"

    What else are they going to do with their time once they get kicked out of their parents basements?

  14. I didn't realize that ... by burgburgburg · · Score: 2, Funny
    Microsoft's security division designed bluetooth phones.

    Learn something new every day.

  15. Re:Sniper rifle?! by Tenebrious1 · · Score: 3, Informative

    The BlueSniper "rifle," created by John Hering and colleagues at Flexilis as a proof-of-concept device, resembles a rifle.

    How much does it resemble a rifle? People get shot here in NYC when wallets and candy bars get mistaken for weapons...

    --
    -- If god wanted me to have a sig, he'd have given me a sense of humor.
  16. Dupe by Jacco+de+Leeuw · · Score: 4, Informative

    You're right, here are the pictures.

    --
    -------
    Warning: Slashdot may contain traces of nuts.
  17. Sensible design for its purpose by Glendale2x · · Score: 3, Insightful

    The "rifle" design with a scope actually makes sense. If there's a moving target at a decent enough distance, all you have to do it keep them in the sights while you communicate with the device. Otherwise, a yagi on a stick without sights is probably a little harder to aim precisely, especially if your target is far away.

    --
    this is my sig
    1. Re:Sensible design for its purpose by raytracer · · Score: 2, Informative

      The "rifle" design with a scope actually makes sense. If there's a moving target at a decent enough distance, all you have to do it keep them in the sights while you communicate with the device. Otherwise, a yagi on a stick without sights is probably a little harder to aim precisely, especially if your target is far away. Well, it doesn't make that much sense. A 14dbi Yagi has a beamwidth of about 30 degrees or so. A 4x sniper scope probably has a field of 10 degrees or so, an 8x scope, more like 7 degrees. You simply don't need to aim it that accurately. A simple peep sight would work just fine, and probably draw less attention.

  18. More info by AngryScot · · Score: 5, Informative
    Here

    Was covered in brief on tomshardware in a post on /. yestarday

    --

    All spelling mistakes are due to solar flares...honest

  19. It looks nifty, but its not a sniper rifle by millisa · · Score: 4, Informative

    It isn't a real sniper rifle It'd still make someone nervous if it was pointed at them I imagine . . .

  20. Luddites Rejoice by ackthpt · · Score: 3, Funny
    According to a story on Wired, Adam Laurie and Martin Herfurt demonstrated that they can hack a Bluetooth enabled phone from up to a mile away using a sniper rifle with yagi antenna.

    Surviving the 21st century:

    Pencil

    Pocket knife

    Pad of paper

    Water bottle
    &

    Towel

    BTW the Hitchhikers Guide is now considered a bad idea, as even it has proven to be hackable, particularly by those who consider themselves to be hoopy froods (though inaccurate entries may be inserted, and attempts to modify the operating system of all versions of the Guide result in the brief appearance of a hungry ravenous bugblatter beast of Traal, followed shortly by the departure of a not quite as hungry ravenous bugblatter beast of Traal.)

    --

    A feeling of having made the same mistake before: Deja Foobar
  21. Interesting Military Application by Vexler · · Score: 5, Interesting

    If deployed in the field, special ops soldiers can approach a terrorist safehouse, and activate this device to hack into any cell phone that may be vulnerable. Then they could simply listen in on the safehouse without ever being even 500 feet away, and can discern their movement if necessary.

    All this translates into being able not to tip off the bad guys that you are coming, and still able to glean important intel.

  22. Re:Sniper rifle?! by nine-times · · Score: 4, Informative
    Now why someone thought it necessary to call it a 'sniper rifle' when they submitted the article is beyond me since it's at the very least misleading.

    It actually makes a lot of sense, no? The device resembles a rifle- not just out of some "cool" factor, but because use of the device requires aim, and the rifle form is suitable. It also has metaphorical relation to the rifle, in that it's a "weapon of attack", so to speak. Further, insofar as the attack is a long range attack from a concealed location, it makes a certain amount of sense to call it "sniping".

    So, insofar as it lead to you believe people were firing bullets through a sniper rifle as a means to hack cell-phones, yes, it was misleading. However, I think it was only intended to draw the obvious metaphorical comparison between what these guys were doing and what a sniper does.

  23. Re:Sniper rifle?! by LuxFX · · Score: 2, Informative

    How much does it resemble a rifle?

    From even a moderate distance, very closely. I think part of it is simply the stance, the way it's held. But it's also colored like a rifle, the same length as a rifle, and has a similar handle on one end. It's very convincing. Actually aiming the thing, and pointing it at somebody, would be more than enough to create some seriously panicked people.

    Concept is cool, but anybody that uses this thing in public would be in serious danger of being shot by a SWAT team.

    --
    Punctanym: alternate spelling of words using punctuation or numerals in place of some or all of its letters; see 'leet'
  24. Yeah but then.... by dmorin · · Score: 2, Funny

    ...somebody tk'd them for hogging the AWP and being all sux0r with it.

  25. Not really. A camera tripod would be better or .. by Libertarian_Geek · · Score: 2, Insightful

    A telescope or transit tripod. You're going to be a little obvious pointing any object that looks like a rifle at someone only 50' away. Especially in an urban area. I would also imagine that the weight is more than it needs to be, since the stock and grip are designed to resist the kick. It still gets "cool points" in my book though. Parhaps it would work out better to build a directional antenna within a telescope or transit, so as to be a little more inconspicuous.

    --

    www.facebook.com/DareDefendOurRights

    www.fairtax.org
  26. They missed something by tyrani · · Score: 2, Funny

    "The BlueSniper rifle for capturing data from Bluetooth-enabled phones is constructed from a Choate Ruger Mini-14 stock, 14dbi semi-directional Yagi antenna, standard rifle scope, electrical tape, zip ties and cardboard."

    They really should have used duct tape rather then electrical tape. It would have been much more Chic!

    --
    rejected (19) accepted (0)
    Is there a psychological term related to getting your stories rejected on slashdot?
  27. Blue War Walking....? by d474 · · Score: 3, Interesting
    He conducted a similar test at Britain's House of Parliament, carrying a laptop in his backpack. After going through security, he wandered the ground floor for 14 minutes looking at paintings and passing politicians while the attack ran automatically from his backpack. Of 46 Bluetooth devices he found, eight phones were vulnerable to attack.
    Using this hack in the 'research' stage of a social engineering attack would be quite useful. Between this and the photos of the blue tooth sniper rifle, why hasn't MI5 highered these guys? Honestly! The guy in the photo reminded me of 'Q' in James Bond. Brilliant work.
    --
    Authority questions you. Return the favor.
  28. Re:Can there be buildings between? by Anonymous Coward · · Score: 2, Informative

    Yagi si pretty much line of sight. Objects in the way cause a huge degradation in signal and aften make a unidirectional antenna better.

    Also, with a yagi antenna you best be right on where you aim it. A feew degrees also causes a huge signal degridation.

  29. Yet another reason to get the *cheap* phones by NineNine · · Score: 5, Insightful

    This is yet another reason NOT to buy those stupid phones with 14 different features. Every time I buy a cell phone, I buy the cheapest one available, so it doesn't have all of this crap associated with it. I just want a cell phone that *works*. The last thing I want is a phone with so many useless features that it actually has *security* holes! That's insane. So if it comes to the point where the only phone I can get has this stupid Bluetooth stuff, then I have to worry about feds wiretapping me AND kids hacking in? Great. I'm going back to cans and string.

  30. That explains a lot. by Mr.+Bad+Example · · Score: 4, Funny

    I wondered why my phone's display kept changing to "OMG PWN3D U FAG". I thought it was Verizon getting uppity.

  31. Re:Yet another reason to get the *cheap* phones by rokzy · · Score: 2, Informative

    It surprises me how retarded people on a technology site can be.

    Do you avoid those stupid computers and just buy 4-function calculators to avoid all those viruses, trojans, spam and all the other crap associated with the internet and modern computing? I guess not.

    If you look closely, people being hax0r3d are almost always the ones who don't understand what they're doing.

    -Don't enable full read/write access to all files while using broadband without a firewall.
    -Don't leave bluetooth enabled when not using it.
    -Don't park your car with the keys in the ignition and the doors open.

    If any of the above didn't seem blatantly obvious to you, you are ignorant about the technology involved. Any problems you have are your own fault and do not make the technology bad.

  32. Ignorant Users make this possible by JawFunk · · Score: 2, Interesting
    Laurie said most people don't think they have valuable data on their phones, but many people store passwords, PINs and financial account numbers in their phones.

    Where there's a will, there is a way. This is similar to the spam issue. Many arguethat spam would be reduced adn sys admins would have an easier life if curious people did not impulsively click on evrey ad that they see, nor respond to every question about income or dick size that landed in your email.

    In the caseof bluetooth, people need to realize that these are phones, not safes with locks. tThe average person takes data security for granted, because they don't understand or care to consider the functionality of the device or the technology they are carrying. "If it's in my pocket, it's safe." BS. If you can send signals with it, it can receive signals. Similarly, if you park your car for three days with the driver side door open, most likely it will not be there when you come back (Unless you live on an island where yours is one of five cars, easily recoverable). Getsmart people!

    --
    [Please sign here]
  33. In other news ... by cccpkgb · · Score: 5, Funny

    Some researchers found a way to completely destroy bluetooth-enabled cellphones from up to a mile away with a sniper rifle by failing to RTFA.

  34. Re:Sniper rifle?! by Pirow · · Score: 2, Funny

    Wonder what their defense would be if they got caught pointing the rifle at someone.
    Hopefully kevlar.

  35. Re:Sniper rifle?! by tehcyder · · Score: 3, Funny
    What about a "snooper rifle"?

    I thank you.

    --
    To have a right to do a thing is not at all the same as to be right in doing it
  36. Yeah, by Duhavid · · Score: 2, Funny

    I would be more worried about him taking the contacts out of my eyes!

    --
    emt 377 emt 4
  37. Less conspicuous in wild.. cans and cameras by mattr · · Score: 3, Interesting

    I'd think a pringles or coke can would be a bit less conspicuous..

    On the other hand you know those security video cameras used in public places which can be remote controlled to rotate and zoom in on someone's face? They are usually hidden in smoked glass domes in ceiling or, I suppose, in less conspicuous ways in places like casinos or board rooms. Sounds like another good aiming device, I saw one $500 dollar model in Akihabara recently you can operate from a web page. Same shop for a few hundred bucks also sold remote cameras accessible via UHF.

    I'd be worried if I carried anything with Bluetooth (so far I've resisted..) The more it penetrates it seems the more tiny yagi antennas you'll see. Only saving grace I could imagine is if the yagi antenna is left powered up maybe you could detect it as the camera pans across you... IANA EM Engineer but would not a yagi antenna also transmit towards you any noise from say the video camera's motor or power supply? If so a detector might be in order..

  38. Re:Yet another reason to get the *cheap* phones by dave420 · · Score: 2, Informative
    I hear ya! I'd never want a cellphone I could wirelessly connect up to my PDA to give me the internet whereever I am anywhere in Europe. That sounds horrible.

    If you would run around with your bluetooth turned on and advertising itself, of course there's a risk. Lots of features on phones are silly, but bluetooth is genuinely useful. I sit at my PC at work, and my address book syncs with my phone while it's still in my pocket. When I'm listening to music from my computer on my headphones, I can make calls on my phone, and use my microphone and headphones as a headset. I already mentioned the networking.

    Bag on polyphonic ringtones if you want, but bluetooth is an excellent technology.

  39. Re:Yet another reason to get the *cheap* phones by NineNine · · Score: 2, Informative

    Don't leave bluetooth enabled when not using it? Jesus christ... we're talking about a PHONE here? That's entirely too complicated. That's like saying that you should disconnect your computer from the Net when you're not using it. It's very simple... bluetooth is insecure, and is not used by probably 99% of people with cellphones. Thus, the smart thing to do is to avoid it like the plauge.

  40. James Bond by dfj225 · · Score: 3, Funny

    As I was reading the only thing I could think about was James Bond standing on top of a building and spying on someone's conversation using the Bluetooth rifle...now that is an awesome hack.

    --
    SIGFAULT
  41. If you really must hear... by IronChefMorimoto · · Score: 4, Funny

    I could care less if you hack my BlueTooth phone.

    If some asshat need in you arises that demands that you must listen in on a conversation with my wife as she bitches at me for buying ROMA TOMATOES instead of CHERRY TOMATOES (they're fucking red, for Christ's sake), you go right ahead.

    And if it gets your lollies off to hear that, wait until she calls me to inform me that I, once again, forgot to let the dog shit before going to work. And I must clean up what ensued.

    Yeah -- hack that. All you want. :-[

    IronChefMorimoto

  42. Re:Sniper rifle?! by DansnBear · · Score: 2

    The pic for this was posted on Tom's Hardware the other day. It was included in the article for DefCon.

    Pictue and description of rifle here.

    --

    -= Who are The Headlocks? =-
  43. Followup story by fhic · · Score: 2, Funny

    In a related story, Las Vegas police department sharpshooters shot two men who they say were preparing to assassinate random pedestrians from an 11th floor window of the Aladdin Hotel. When the concept of the "Bluetooth rifle" was explained to the police spokesman, he said, and we quote, "what a pair of f***ing idiots." Since the pair was shot approximately 10,000 times by the nice policemen with *real* rifles, only splinters of the "Bluetooth rifle" remain. Film at 11.

  44. forget colors, redesign it. by Tired_Blood · · Score: 2, Interesting

    For hunters safety class, you're told to carry binoculars. Sure there's a scope on your rifle, but most things (also read: people) that you want to see up close also run the risk of getting shot.

    You get a different vibe when someone is "just looking" at you with binoculars than with a rifle scope. Also, the environment you're in (hunting season) means that the person you'd be aiming at ALSO has a decent weapon and would be very interested in observing you in the same manner. The person reacting would also be more likely to want to "feel safer" while looking.

    The picture in the article: he looks like he's holding a chainsaw or a seriously bayonetted rifle. Basically, it LOOKS dangerous.

    Point that thing at someone's head (it's for cell phones - right?) and you're ASKING for trouble.

    As for painting it bright colors: it would be better to just use a less threatening design - an orange weapon is still a weapon.

    --
    This is not my sig.
  45. Re:i'm suspect at the lack of details. by carbolic · · Score: 4, Informative
    I was there - holding the Nokia out in front of me. TechTV was there filming the test from both sides. It will appear on The Screen Savers at some point.

    We used a high gain, 19dBi, panel antenna attached to a Linksys Class 1 Bluetooth adapter - picture.

    Using this equipment, last week we transferred a few pictures from 3300 feet (1 km). This week we bluesnarfed from about 5300 feet (1.08 miles).

    The whole point of these experiments is to show that Bluetooth can go a lot further than previously suspected. Witness the 55.1 mile link using 30 mw wifi.

    Lack of details is because it's in Wired News. Look for a writeup on www.wifi-toys.com later today.

    --
    Carbolic
    wifi-toys.com
    bluedriving.com

  46. Re:Yet another reason to get the *cheap* phones by autocracy · · Score: 2, Insightful

    Yeah, but all I want my phone to do is store numbers and call numbers. Seriously. I'll get a seperate PDA for the rest of the crap. And no f'ing way I want a camera on there either. If I wanted a camera, I'd get a nice slim digital, or a real SLR camera.

    --
    SIG: HUP
  47. But you do gain karma by Aexia · · Score: 2, Funny

    for reminding people that they don't gain karma for a funny mod.

    Funny how that works.