Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is it possible for someone to remotely/covertly scan for Bluetooth devices? If so, what is the operational range of this scanner?

My concern is that a Bluetooth based door lock will emit a signal that will draw too much attention to my home.

share|improve this question
    
There are two factors here: 1- Does your lock advertise itself as a normal Bluetooth device, or does it only respond to requests specific to it? (i.e. hidden or visible). 2- What Bluetooth class is it? Class 3 Bluetooth can send signal for a little further than 100 meters. –  Adnan Aug 13 '13 at 12:06
    
Slight correction: Class 1 is up to 100 meters, class 2 up to 10, class 3 up to 1 meter. Wikipedia link. Those are the normal operation ranges. Objects in between will reduce that distance. Non standard devices/radios can increase the range. –  Hennes Aug 13 '13 at 12:18
    
@Hennes Thanks for the correction, I meant Class 1 –  Adnan Aug 13 '13 at 12:37
    
@Adnan They say "Bluetooth 4" ... does that mean Class 4, or is Class for radio-frequency terminology –  makerofthings7 Aug 13 '13 at 12:44
    
@makerofthings7 Unfortunately, the number next to Bluetooth doesn't indicate which class it is. It's just the version of the specs, if you may. Bluetooth 2 for example can be Class 1, 2, or even 3. –  Adnan Aug 13 '13 at 13:30
add comment

3 Answers

Well bluetooth scanner apps do exist (e.g. like this one ), so if the lock is broadcasting it will likely be discoverable.

As to range, as @adnan says in comments depends on the class, however there have been examples of specialist antennas picking up signals over a mile away.

share|improve this answer
add comment

As far as I know the range doesnt depend on the device scanned, but on the device that is scanning. With an antenna it is possible to detect a class 2 device one mile away if you point your antenna in the right direction.

Anyway the question is about wardriving for bluetooth devices. You can use Bluediving loop mode for that (see http://bluediving.sf.net) and I suppose the range will be 100m if you have a usual class 1 device in your laptop. Of couse you could possibly use the greenplague mode and attach a dozen of antennas at the same time. Please send a picture if you do so ;)

share|improve this answer
add comment

If the device isn't normally discoverable, it won't necessarily transmit unless a paired device transmits to it first (depending on how it is implemented.) Range will depend on the devices involved and if you need one or two way communication.

It's also worth noting that even if discovered, a bluetooth lock is unlikely to draw additional attention to you. It is far more likely to discourage attention. When using secure pairing and encryption, if properly implemented, it should be far harder to bypass the bluetooth lock than almost any normal lock (assuming it doesn't also use a pin and tumbler, which is generally fairly trivial to bypass at the consumer level.)

The only information I could really see it leaking is that you are a geek and thus there may be goodies inside, but that isn't necessarily a safe assumption to make either, so I personally wouldn't worry too much about it as long as the lock is proven to use secure pairing and an encrypted challenge/response that is replay proof.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.