BlueTooth at work

[[GSV]Trig]

Got this from an old work collegue, sounds a bit OTT to me...

This e-mail is to remind you of a couple of important information security issues. Please read all of this mail.

Blue Tooth
Blue Tooth is a type of wireless connection that allows devices to communicate without being connected together with wires. Many phones, PDAs and laptops have Blue Tooth and it can be very useful for transferring phone numbers, photos and files between devices.

If you have a phone, laptop or any other device with Blue Tooth capability there are two ways that this could allow the introduction of malicious code such as viruses and worms to spread onto the Council's computers. This could stop computers working and destroy the information stored on them. Although the risk is small at the moment, the introduction of malicious code into the Council's computer network could have such a serious impact on Council services that the risk of this happening must be reduced as much as possible.

Firstly, if you have any device that is ever connected to the Council's computer network, the Blue Tooth capability must be switched off at all times unless you have explicit permission from ICT Services to use it. This is because the device could pick up malicious code from another Blue Tooth device which it connects to anywhere, inside or outside Council offices, and then transfer the malicious code to Council's computers when you connect to the Council's network. This includes PDAs.

Secondly, Blue Tooth must be switched off on all devices when you are in any of the Council's offices unless you have explicit permission from ICT Services to use it. This is because there are a small number of legitimate Blue Tooth users, which are carefully controlled. If your device has Blue Tooth switched on and contains malicious code, this could be transferred to the Council's computer network via one of the legitimate switched on Blue Tooth devices.

There is also the risk of someone being able to see any information stored on the device if you leave Blue Tooth switched on. This could lead to disclosure of personal, sensitive or confidential information.

And finally for Blue Tooth, thieves can check for active Blue Tooth devices in public places and this could increase the chances of devices being located and stolen. There are reports of this happening with laptops hidden in car boots, which highlights the need for these two rules: switch off Blue Tooth and never leave equipment in a unattended vehicle.

If you are not sure if your phone, PDA, laptop or other device has Blue Tooth or if you don't know how to ensure it is switched off, please check the manual. If the device was provided by ICT Services, they will be able to help you. ICT Services will be making routine checks for devices with Blue Tooth switched on. It is your responsibility to ensure the Blue Tooth is switched off on your devices unless you have explicit permission from ICT Services to use it.

[aidanjt]

Originally Posted by [GSV]Trig

Got this from an old work collegue, sounds a bit OTT to me...

More than a bit OTT, how many worms exist that can jump architectures and/or platforms?.. a far more likely secnario is a Wifi laptop connecting to the network infecting other all hosts on the network.. nevermind super intelligent multi-arch/platform bluetooth worms that only exist in someone's head as a theory.

[[GSV]Trig]

Yeah thats what I thought, ok so theres a possiblilty of something on a windows based phone/PDA maybe but surely if he's setup the BT onsite properly things will be paired and have passcodes...

[Agent]

There has been a few mobile device to mobile device worms, but ive not seen a mobile device to desktop one yet (thats not saying it doesnt exist though).

"There are reports of this happening with laptops hidden in car boots"

How many people leave their laptop powered on in the boot of their car ?

[aidanjt]

Originally Posted by Agent

How many people leave their laptop powered on in the boot of their car ?

It's the civil service remember?

[[GSV]Trig]

People that are trying to infect people I guess, wonder where these reports are or if its something he heard down the pub..

[aidanjt]

Originally Posted by [GSV]Trig

People that are trying to infect people I guess, wonder where these reports are or if its something he heard down the pub..

Probibly pub piss talk.. a car boot is like a loosely sealed metal box, not really a homing beacon for any laptops left switch on in the boot of a car (wouldn't the laptop over heat in its carry bag?). Sounds rediculous even for civil servants, dispite their ability to drive network admins to the point of suicide.

[Atomic]

This has gotta be in the same league as 'don't answer any 0704******* numbers they will pass you onto a £50 per minute line' *yawn*