HFL Bluetooth secrets
#1
TL hacker
Thread Starter
HFL Bluetooth secrets
So here I am sitting in my TL with my laptop. I attached my BT dongle to my laptop and started searching for BT devices.
Interesting...
Device I got:
HandsfreeLink TM
Audio device
Right click on icon, properties and I get
Device address 00:0a:30:10:7b:43
Ok... lets see what services this has...right click on icon, discover available services.
1 - OBEX file transfer on handsfreelink TM
2 - OBEX Object push on handsfreelink TM
Well well... isn't that interesting. Knowledgable BT people will know that "OBEX Object push" is what you need for bluejacking.
So... I can bluejack a TL's HFL? Hmmmm.... I wonder. I also wonder what other objects I can push onto the HFL?
I use OBEX Object push all the time to install java games onto my v635 cell phone. That's because the cell phone reconnizes .jar files as java apps to b installed. On a v635 if you try to object push a .jad file instead, it says unknown object and fails the transfer.
So it's interesting to see that it has object push, now to find out how to exploit this thing. hehehehe
PS: Look up Bluejacking on google if you don't know what it is.
PPS: Yes, I'm typing this from my laptop in my TL right now. Gotta love built-in WiFi on these new laptops.
Interesting...
Device I got:
HandsfreeLink TM
Audio device
Right click on icon, properties and I get
Device address 00:0a:30:10:7b:43
Ok... lets see what services this has...right click on icon, discover available services.
1 - OBEX file transfer on handsfreelink TM
2 - OBEX Object push on handsfreelink TM
Well well... isn't that interesting. Knowledgable BT people will know that "OBEX Object push" is what you need for bluejacking.
So... I can bluejack a TL's HFL? Hmmmm.... I wonder. I also wonder what other objects I can push onto the HFL?
I use OBEX Object push all the time to install java games onto my v635 cell phone. That's because the cell phone reconnizes .jar files as java apps to b installed. On a v635 if you try to object push a .jad file instead, it says unknown object and fails the transfer.
So it's interesting to see that it has object push, now to find out how to exploit this thing. hehehehe
PS: Look up Bluejacking on google if you don't know what it is.
PPS: Yes, I'm typing this from my laptop in my TL right now. Gotta love built-in WiFi on these new laptops.
![Wink](https://acurazine.com/forums/images/smilies/wink.gif)
#2
TL hacker
Thread Starter
Woah!
I've just successfully paired my laptop to the HFL.
On the HFL I started the pairing process. Then on my laptop I simply tried to OBEX object push a file onto the the HFL. As I did that the laptop complained that it wasn't paired with the device. So it asks me the pairing code. I simply enter the code as I said to the HFL and voila. The HFL "lady" voice says "A new phone has sucessfully been paired".
But the object push failed however.
Ok... next test. Since the laptop sees the HFL as an audio device I'm going to try to see if I can use it as such via the laptop. If all goes well I can probably output sound to the HFL from my laptop.
be back in a bit, i'll keep this post updated with my findings.
I've just successfully paired my laptop to the HFL.
On the HFL I started the pairing process. Then on my laptop I simply tried to OBEX object push a file onto the the HFL. As I did that the laptop complained that it wasn't paired with the device. So it asks me the pairing code. I simply enter the code as I said to the HFL and voila. The HFL "lady" voice says "A new phone has sucessfully been paired".
But the object push failed however.
Ok... next test. Since the laptop sees the HFL as an audio device I'm going to try to see if I can use it as such via the laptop. If all goes well I can probably output sound to the HFL from my laptop.
be back in a bit, i'll keep this post updated with my findings.
#3
Originally Posted by Zeuser
Woah!
I've just successfully paired my laptop to the HFL.
<snip>
Ok... next test. Since the laptop sees the HFL as an audio device I'm going to try to see if I can use it as such via the laptop. If all goes well I can probably output sound to the HFL from my laptop.
be back in a bit, i'll keep this post updated with my findings.
I've just successfully paired my laptop to the HFL.
<snip>
Ok... next test. Since the laptop sees the HFL as an audio device I'm going to try to see if I can use it as such via the laptop. If all goes well I can probably output sound to the HFL from my laptop.
be back in a bit, i'll keep this post updated with my findings.
#5
Originally Posted by pilozm
Wouldn't it be cool to be able to pair a BT I-pod (idea to Apple) to the HandFreeLink....
#7
TL hacker
Thread Starter
Progress? hahaha... I fucked up royally!
Here's what happened:
I object push a .jar file onto the HFL. Success! My laptop said the copy was sucessful. What? Weird. That .jar file was a java game for a cell phone.
So I try to enable services on my laptop that te HFL will recconize. That way mayb the HFL will accept audio from my laptop. So my laptop scan for the HFL. Can't find it. Damn. So I re-pair the HFL to the laptop. uh oh!
This is where it went bad. The pairing failed on my laptop. Ok fine. So I pess the cancel button on the HFL. nothing. MID is stuck on "Pair" display. Ok... i'll just shut off the car and re-start. Nothing... MID display is still stuck. Hmmmm.... weird. Just out of curiosity I scan for BT devices. Bingo... there's the HFL. What? The car is off and the bluetooth is still on? Probably a result of my fuck up.
So now I can't get the MID out of he "pair" screen. No matter what I do. Only one option left... a "hard" reboot! That's disconnecting the TL's battery for the un-initiated.
Disconnect the battery, wait about 2 mins. Reconnect. Ahhh.... that's better.
Car starts up. 0:00 on the clock. Trip computer 0 both A and B. The navi software reloads from the DVD disc. Damn... that's the factory one, not my hacked version. Ah well, I'll reload my hacked version later I guess.
The the navi asks for the unlock code. So I run back inside and get the card. Punch in the numbers... voila. All is fine.
Wait a minute... nothing is lost? My seat/mirror memory settings are fine. My remote is still linked to driver 1. Check the personallized settings (auto door lock, lights out etc.), still set as I last set them. Check the radio. All my AM/FM presets are fine. Check the navi system (home address, personal addresses), still there. Check the HFL. Damn... I got to re-pair wit my phone. No problem, phone pairs up just fine. What's this? My phone book is still intact? No way!
So I checkd through all the systems and it's all fine. Except for the loss of my trip computer all the settings and data are just fine.
Ouffff.... this will save me a lot of data entry time.
Well, enough for tonight. Although I wasn't really scared about my fuck up, it's easy to reset, I was concerned about re-entering all my settings. So I wasted about an hour, learned some new lessons and had a good "fright". LOL!
I'll do a bit of research and try again tomorrow. I want to get the damn laptop to play audio through the HFL. It's a BT audio device. I'm sure there's a way to pull it off!
Here's what happened:
I object push a .jar file onto the HFL. Success! My laptop said the copy was sucessful. What? Weird. That .jar file was a java game for a cell phone.
So I try to enable services on my laptop that te HFL will recconize. That way mayb the HFL will accept audio from my laptop. So my laptop scan for the HFL. Can't find it. Damn. So I re-pair the HFL to the laptop. uh oh!
This is where it went bad. The pairing failed on my laptop. Ok fine. So I pess the cancel button on the HFL. nothing. MID is stuck on "Pair" display. Ok... i'll just shut off the car and re-start. Nothing... MID display is still stuck. Hmmmm.... weird. Just out of curiosity I scan for BT devices. Bingo... there's the HFL. What? The car is off and the bluetooth is still on? Probably a result of my fuck up.
So now I can't get the MID out of he "pair" screen. No matter what I do. Only one option left... a "hard" reboot! That's disconnecting the TL's battery for the un-initiated.
Disconnect the battery, wait about 2 mins. Reconnect. Ahhh.... that's better.
Car starts up. 0:00 on the clock. Trip computer 0 both A and B. The navi software reloads from the DVD disc. Damn... that's the factory one, not my hacked version. Ah well, I'll reload my hacked version later I guess.
The the navi asks for the unlock code. So I run back inside and get the card. Punch in the numbers... voila. All is fine.
Wait a minute... nothing is lost? My seat/mirror memory settings are fine. My remote is still linked to driver 1. Check the personallized settings (auto door lock, lights out etc.), still set as I last set them. Check the radio. All my AM/FM presets are fine. Check the navi system (home address, personal addresses), still there. Check the HFL. Damn... I got to re-pair wit my phone. No problem, phone pairs up just fine. What's this? My phone book is still intact? No way!
So I checkd through all the systems and it's all fine. Except for the loss of my trip computer all the settings and data are just fine.
Ouffff.... this will save me a lot of data entry time.
Well, enough for tonight. Although I wasn't really scared about my fuck up, it's easy to reset, I was concerned about re-entering all my settings. So I wasted about an hour, learned some new lessons and had a good "fright". LOL!
I'll do a bit of research and try again tomorrow. I want to get the damn laptop to play audio through the HFL. It's a BT audio device. I'm sure there's a way to pull it off!
Trending Topics
#8
TL hacker
Thread Starter
Well, no good news to report. The HFL didn't give me the audio gateway or headset service so I can't output audio to it.
Strangely enough, pusshing .jar objects to the HFL seems to work but nothing happens on the HFL after. I wonder is the object push is there for upgrading the software?
The OBEX file transfer, sort of like windows explorer, allows me to connect but doesn't show any files. Damn, I thought I had a way to download the HFL software for possible reverse engineering.
At this point I can't confirm if the bluetooth link for the iPod will work or not. My oppinion is that it won't. But I guess we'll have to wait until someone actually tries it to know for sure.
Oh... for some reason bluejacking also doesn't work.
Strangely enough, pusshing .jar objects to the HFL seems to work but nothing happens on the HFL after. I wonder is the object push is there for upgrading the software?
The OBEX file transfer, sort of like windows explorer, allows me to connect but doesn't show any files. Damn, I thought I had a way to download the HFL software for possible reverse engineering.
At this point I can't confirm if the bluetooth link for the iPod will work or not. My oppinion is that it won't. But I guess we'll have to wait until someone actually tries it to know for sure.
Oh... for some reason bluejacking also doesn't work.
#10
Not surprised by the results
Nice try Zeuser. Too bad it didn't work.
Out of curiosity, has your laptop ever successfully broadcasted MP3 over BT to any BT stereo headphone or other BT receiver? If not, perhaps that Audio device reported by your laptop was bogus?
Out of curiosity, has your laptop ever successfully broadcasted MP3 over BT to any BT stereo headphone or other BT receiver? If not, perhaps that Audio device reported by your laptop was bogus?
#11
Here's an blog from someone who tried 'sniffin' TL's BT from a phone:
http://bluetoothcar.typepad.com/main...n_the_blu.html
http://bluetoothcar.typepad.com/main...n_the_blu.html
#12
Originally Posted by MeltdowN
Here's an blog from someone who tried 'sniffin' TL's BT from a phone:
http://bluetoothcar.typepad.com/main...n_the_blu.html
http://bluetoothcar.typepad.com/main...n_the_blu.html
#13
TL hacker
Thread Starter
Originally Posted by MeltdowN
The OBEX push is probably for transferring contacts and not games ;-) Also, maybe you need to establish a secure connection?
#14
TL hacker
Thread Starter
Originally Posted by Parker75
Nice try Zeuser. Too bad it didn't work.
Out of curiosity, has your laptop ever successfully broadcasted MP3 over BT to any BT stereo headphone or other BT receiver? If not, perhaps that Audio device reported by your laptop was bogus?
Out of curiosity, has your laptop ever successfully broadcasted MP3 over BT to any BT stereo headphone or other BT receiver? If not, perhaps that Audio device reported by your laptop was bogus?
#15
TL hacker
Thread Starter
Originally Posted by MeltdowN
Here's an blog from someone who tried 'sniffin' TL's BT from a phone:
http://bluetoothcar.typepad.com/main...n_the_blu.html
http://bluetoothcar.typepad.com/main...n_the_blu.html
#16
Originally Posted by mobilezen
Wonder why he used a Series 60 phone to do the sniffing...P910a would've been more fun and robust...much more you can do when you snarf around.
#17
TLover
Join Date: Feb 2004
Location: Brooklyn, New York
Age: 41
Posts: 723
Likes: 0
Received 1 Like
on
1 Post
Originally Posted by MeltdowN
I've actually tried that program on my P910a, and it's pretty cool. Only wish the P910a would actually work better with the TL.
#18
Do you guys think that this product for the ipod will work with what you found with HFL?
http://www.tentechnology.com/product...s_naviplay.php
I want a way to pipe music through bluetooth if possible.
http://www.tentechnology.com/product...s_naviplay.php
I want a way to pipe music through bluetooth if possible.
#19
TLover
Join Date: Feb 2004
Location: Brooklyn, New York
Age: 41
Posts: 723
Likes: 0
Received 1 Like
on
1 Post
Originally Posted by Anubus12
Do you guys think that this product for the ipod will work with what you found with HFL?
http://www.tentechnology.com/product...s_naviplay.php
I want a way to pipe music through bluetooth if possible.
http://www.tentechnology.com/product...s_naviplay.php
I want a way to pipe music through bluetooth if possible.
Bluetooth
Bluetooth 1.2 certified
Advanced Audio Distribution Profile (A2DP)
Audio Video Remote Control Profile (AVRCP)
Headset Profile (HSP)*
Handsfree Profile (HFP)*
* Not in initial product release. May require firmware update.
#20
Originally Posted by Anubus12
Do you guys think that this product for the ipod will work with what you found with HFL?
http://www.tentechnology.com/product...s_naviplay.php
I want a way to pipe music through bluetooth if possible.
http://www.tentechnology.com/product...s_naviplay.php
I want a way to pipe music through bluetooth if possible.
#21
Originally Posted by mobilezen
This could possibly work but it requires a firmware revision on both sides of the party.
#22
Originally Posted by mobilezen
This could possibly work but it requires a firmware revision on both sides of the party.
Does anyone know what company provided Acura with the HFL BT technology? Or is it all integrated into the (Panasonic?) DVD-A system ?
#23
Originally Posted by Parker75
Correct, Acura needs to add the BT profiles for (stereo) headset and/or audio gateway. Presently all we have in HFL is the BT hands-free profile, as Zeuser has verified.
Does anyone know what company provided Acura with the HFL BT technology? Or is it all integrated into the (Panasonic?) DVD-A system ?
Does anyone know what company provided Acura with the HFL BT technology? Or is it all integrated into the (Panasonic?) DVD-A system ?
http://www.qnx.com/news/pr_159_1.html
The system uses Boradcom's BCM2033 bluetooth chip, I think.
#24
Originally Posted by MeltdowN
Johnson Electronics did the HFL setup for the TL:
http://www.qnx.com/news/pr_159_1.html
The system uses Boradcom's BCM2033 bluetooth chip, I think.
http://www.qnx.com/news/pr_159_1.html
The system uses Boradcom's BCM2033 bluetooth chip, I think.
Now, if we can just find an engineer at Johnson Electronics to ask the question about adding BT audio via their supplied HFL infrastructure. That way we can determine if an aftermarket tweak/hack can use their electronics for BT audio.
#25
Originally Posted by Parker75
Thanks MeltdowN!
Now, if we can just find an engineer at Johnson Electronics to ask the question about adding BT audio via their supplied HFL infrastructure. That way we can determine if an aftermarket tweak/hack can use their electronics for BT audio.
Now, if we can just find an engineer at Johnson Electronics to ask the question about adding BT audio via their supplied HFL infrastructure. That way we can determine if an aftermarket tweak/hack can use their electronics for BT audio.
So...to wirelessly transmit audio to TL's system (without any modifications), the best option would be to use one of those FM transmitters that plug into the stereo out port. You get decent quality and moreoever, its stereo.
Thread
Thread Starter
Forum
Replies
Last Post
MetalGearTypeS
3G TL Audio, Bluetooth, Electronics & Navigation
6
08-29-2016 08:28 PM
InFaMouSLink
Car Parts for Sale
3
10-30-2015 09:43 AM
SUPRMN84
3G TL Audio, Bluetooth, Electronics & Navigation
5
10-07-2015 09:46 PM
phillyguerrilla
3G TL Audio, Bluetooth, Electronics & Navigation
0
09-26-2015 11:27 AM