Re: [Bluez-users] Limit communication to serveral devices

Michael Schmidt
2004-08-26T08:05:30Z

Hi Philip,

> Call me paranoid but I would like to know if there is any way to limit
> all types of communication to just several devices by checking with the
> hardware addresses.
>
> I understand that in principle not being discoverable and the pin
> challenge should help you with being secure but to me this is not enough.
>
> I'm currently running 2 class 1 devices to serve my flat with rfcomm for
> dial in and I for sure do not want anyone besides me to get access to
> these com ports.
>
> Is there anything I can do to tighten security and limit all
> communication to just some devices?
>
> I do understand that even this is no guarantee for anything, but I'd for
> sure feel better :)

When assessing your level of security (and evaluating address
filtering), keep in mind that it's not too difficult to masquerade BT
device addresses. You only neeed to look up the Axis OpenBT stack source
code to figure out how to adjust the device address of certain Ericsson
and CSR-based modules.

Clearly, your main line of defense should be a strong BT PIN.

Cheers,

Michael

--
===========================================
Michael Schmidt
-------------------------------------------
Institute for Data Communications Systems
University of Siegen, Germany
===========================================