[Bluez-devel] Set security level?

[Bluez-devel] Set security level?

[Manuel Naranjo]

Hello everyone,

I'm working on an Open Source Proximity marketing solution. And I need
to know something, I know that there's a way to send files over obex
without the need to pair (depending on the phone capabilities off
course, and user acceptance). I know that this can be used for spamming,
but that's not my intention.

The question would be, is there any way to change the security level of
a connection via dbus? I know this has to be handled at a very low
level, before you can even get the rfcomm connection, and I don't think
this should be handled for the hole hci device because this would be a
security issue.

Thanks,
Manuel

-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel

Re: [Bluez-devel] Set security level?

[Matthias Becker]

Most phones don't require pairing when using obex push (not obex ftp). =


-----Urspr=FCngliche Nachricht-----
Von: bluez-devel-bounces@lists.sourceforge.net [mailto:bluez-devel-bounces@=
lists.sourceforge.net] Im Auftrag von Manuel Naranjo
Gesendet: Mittwoch, 28. November 2007 14:22
An: BlueZ development
Betreff: [Bluez-devel] Set security level?

Hello everyone,

I'm working on an Open Source Proximity marketing solution. And I need
to know something, I know that there's a way to send files over obex
without the need to pair (depending on the phone capabilities off
course, and user acceptance). I know that this can be used for spamming,
but that's not my intention.

The question would be, is there any way to change the security level of
a connection via dbus? I know this has to be handled at a very low
level, before you can even get the rfcomm connection, and I don't think
this should be handled for the hole hci device because this would be a
security issue.

Thanks,
Manuel

-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel


-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel

Re: [Bluez-devel] Set security level?

[Manuel Naranjo]

I know, that's because the phone is using security level 0. I want to
know how to set it from the bluez side.
> Most phones don't require pairing when using obex push (not obex ftp). =

>
> -----Urspr=FCngliche Nachricht-----
> Von: bluez-devel-bounces@lists.sourceforge.net [mailto:bluez-devel-bounce=
s@lists.sourceforge.net] Im Auftrag von Manuel Naranjo
> Gesendet: Mittwoch, 28. November 2007 14:22
> An: BlueZ development
> Betreff: [Bluez-devel] Set security level?
>
> Hello everyone,
>
> I'm working on an Open Source Proximity marketing solution. And I need
> to know something, I know that there's a way to send files over obex
> without the need to pair (depending on the phone capabilities off
> course, and user acceptance). I know that this can be used for spamming,
> but that's not my intention.
>
> The question would be, is there any way to change the security level of
> a connection via dbus? I know this has to be handled at a very low
> level, before you can even get the rfcomm connection, and I don't think
> this should be handled for the hole hci device because this would be a
> security issue.
>
> Thanks,
> Manuel
>
> -------------------------------------------------------------------------
> SF.Net email is sponsored by: The Future of Linux Business White Paper
> from Novell.  From the desktop to the data center, Linux is going
> mainstream.  Let it simplify your IT future.
> http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
> _______________________________________________
> Bluez-devel mailing list
> Bluez-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bluez-devel
>
>
> -------------------------------------------------------------------------
> SF.Net email is sponsored by: The Future of Linux Business White Paper
> from Novell.  From the desktop to the data center, Linux is going
> mainstream.  Let it simplify your IT future.
> http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
> _______________________________________________
> Bluez-devel mailing list
> Bluez-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bluez-devel
>
>   =



-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel

Re: [Bluez-devel] Set security level?

[Marcel Holtmann]

Hi Manuel,

> I know, that's because the phone is using security level 0. I want to
> know how to set it from the bluez side.

a security level 0 doesn't exist. So I would propose that you read the  
specification first before making some untrue claims.

BlueZ is using security mode 1/2 by default. The difference depends on  
the running services. Again, check the specification to understand the  
difference.

Regards

Marcel


-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel

Re: [Bluez-devel] Set security level?

[Manuel Naranjo]

Hi Marcel,
> a security level 0 doesn't exist. So I would propose that you read the  
> specification first before making some untrue claims.
>   
Sorry you are right. There is 1 2 and 3 right?
I'll try to get a book that explains this things, actually I want to get
more into the bluetooth specs, so this is a good time.

> BlueZ is using security mode 1/2 by default. The difference depends on  
> the running services. Again, check the specification to understand the  
> difference.
>   
Ok thanks a lot,
Regards,
Manuel

-------------------------------------------------------------------------
SF.Net email is sponsored by: The Future of Linux Business White Paper
from Novell.  From the desktop to the data center, Linux is going
mainstream.  Let it simplify your IT future.
http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel