5

I'm thinking of using my iPhone as a device combined with a low power bluetooth usb key. So when the phone is gone the workstation locks. (I don't want it to unlock the workstation though, I'd prefer if the workstation only unlocked if the phone was in range (there is a backup account of course))

However how best can I security the bluetooth stack on Windows against attacks, eg. EMET?

No data should be transferred between the phone and my computer I won't be using the Bluetooth for anything bar just seeing if the device is in range.

Yes I'm aware you can spoof the device

Improve this question
3
  • What is it you want specifically? The ability to use a bluetooth device (like your phone) to lock the computer when it leaves? What kinds of attacks do you want to secure the stack from? You acknowledge that devices can be spoofed, so the other thing that might need to be secured is the data, but you also acknowledge that you don't need to transmit data for this scenario. Could you please clarify?
    – McKay
    Dec 8, 2011 at 15:16
  • I'd like to use my phone so when I leave my desk but accidentally forget to lock it, it will lock because the phone is out of range. I'm trying to protect against these types of flaws: technet.microsoft.com/en-us/security/bulletin/ms11-053
    – Steven
    Dec 9, 2011 at 5:44
  • I have noticed that Rohos can use RFID tokens for a simlar thing, in my testing my phone didn't work so well sadly. (Just a note for in 2 years from now when someone Googles this page and needs help)
    – Steven
    Dec 9, 2011 at 5:45

2 Answers 2

Reset to default
2

http://btprox.sourceforge.net/ has some code that does this. It is an application you can install that I believe is what you're looking for.

Improve this answer
4
  • >However how best can I security the bluetooth stack on Windows against attacks, eg. EMET?
    – Steven
    Dec 8, 2011 at 4:15
  • Microsoft EMET doesn't really apply here, it should be compatible with BTProx.
    – McKay
    Dec 8, 2011 at 15:16
  • Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference.
    – Scott Pack
    Jan 2, 2012 at 20:42
  • @ScottPack While I understand what you're saying in general, (give him the answer, not a link to the answer) I fail to see how to better supply a more direct answer in this case. I presume that he's looking for something that will allow him to lock his machine when he walks away. The application I linked to does precisely that. I didn't say "If you do this google search, you can find things like that" I essentially said "you can install this application." Should I include the source code here? A copy of the executable to host here? No, go get it at the source. That link is the answer.
    – McKay
    Jan 3, 2012 at 15:37
0

It is possible that the Blackberry Smartcard reader could do this for you, possibly with some 3rd party code. I have not tried it myself, but am very interested if you get this to work in combination with the benefits of a smartcard reader

enter image description here

Improve this answer
2
  • Wouldn't it just be easier to use a normal smart code reader?
    – Ramhound
    Mar 26, 2012 at 12:52
  • A normal smart card reader has a physical connection to the PC. If you want to share your SMIME or other PKI keys between multiple devices (phone, laptop, tablet) this should allow you to walk away from your PC and make it lock
    – makerofthings7
    Aug 11, 2012 at 13:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.