On 27 Jan 2010, at 12:28, Neil Bothwick wrote:
On Wed, 27 Jan 2010 08:33:57 +0000, Stroller wrote:
You mentioned that the headset's PIN can't be changed. Couldn't
anybody pair with it if they enter 0000?
They can't because you have to hold the button down to initiate the
pairing process.
Even if they could, what's the point? It would only mean that you
would
be able to make and receive calls using their phone :-O
I have this notion that the security implications are a little wider
than this.
If one could pair with any arbitrary headset, without the requirement
to hold the button down, one could surely (?) pair with that headset
and use it as a bugging device when it wasn't in use by the owner.
Stroller.
