Avishai Wool and Yaniv Shaked have found out how to pair a bluetooth device whenever they want without knowing the security pin key. Hackers will be able to eavesdrop on conversations and charge their own calls to someone else’s cellphone.

Now Avishai Wool and Yaniv Shaked of Tel Aviv University in Israel is able to force devices to pair whenever they want. “Our attack makes it possible to crack every communication between two Bluetooth devices, and not only if it is the first communication between those devices,” says Shaked.

Wool and Shaked have managed to force pairing by pretending to be one of the two devices and sending a message to the other claiming to have forgotten the link key. This prompts the other device to discard the link key and the two then begin a new pairing session, which the hacker can then use to work out the pairing key.

Read