http://www.theregister.co.uk/2005/08/02/car_whisperer/

Someone please correct me if I'm wrong but this should affect the TL as it uses a standard passkey and as the article mentions, once you have the passkey all bets are off. Don't get me wrong, the odds of this happening to one of us are about a billion to one (and if they want to listen to the woman tell me to pick up milk they're welcome to) but it's scary none the less.

 

The TL doesn't use a standard passkey. The step in the pairing process where you are required to state a 4 digit code is the passkey that is used. So, the passkey is decided by the user. A device like a Jabra 250 uses a standard fixed passkey and cannot be changed by the user. However, in the case of the TL, the passkey is decided by the user so this attack will only work once the system has accepted the user's passkey, and the car has entered 'pairing mode' and while the car is in discovery (pairing) mode, the 'car whisperer' is able to brute force it. By default, the TL's bluetooth system is not in discovery mode, so unless the hacker knows the bluetooth address (like an IPv6 address) of the car, there's no easy way for him to detect the presence of the HFL and attempt to connect to it.

 

Whatever he ^^^^^ said! Didn't understand it all, but it certainly sounds convincing!

 

Basically, to sum it all up, the TL rocks

 

This is the kind of B.S. that has been around for a while.

Even heard that from my Cell phone provider before they offered Bluetooth enabled cell phone claiming that there was a security issue and viruses.

Unless you leave the door open(Discovery mode) it is not easy to hack your way on a wireless Bluetooth connection that is moving all the time.

There were even urban legends claiming that some cars where infected with viruses over bluetooth and that affected the engine.

I guess some Anti-Virus companies are salivating, trying to convince every Bluetooth device owner that thet need some kind of Anti-Virus protection that they would provide for a fee.