Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Bluetooth Spam In Public Spaces

Posted by kdawson on Sun Jan 28, 2007 05:31 PM
from the unwelcome-intrusions dept.
mrwireless writes with a bellwether from The Netherlands of a problem that is bound to spread. Judging by the CAN SPAM Act, the US would be even less likely than the EU to classify Bluetooth-borne commercial spam as spam. "The Dutch OPTA, a national telecommunications watchdog, has decided not to label commercial Bluetooth messages as spam (in Dutch, but Babelfish works). These messages seem to fall through a loophole in European laws against spam since they do not travel through an 'intermediary network.' The issue was raised last week when a Dutch broadcasting agency outfitted a number of bus stops so they would send a promotional video of an upcoming show to passersby. Although the messages first asked if people wanted to watch the video, the article quotes a lawyer who believes that this does not qualify as 'opt-in' advertising. As more and more people leave Bluetooth turned on to make use of their Bluetooth headsets, Bluetooth close-range messaging, such as through bluejacking, is increasingly being exploited for commercial purposes."
+ -
story

Related Stories

[+] Spammed by Bluetooth 311 comments
An Anonymous Reader writes "BBC News is reporting a new craze - using Bluetooth to send unsolicited messages. Apparently lots of phone owners are leaving Bluetooth switched on, meaning that anyone within range can send a short message. The phenomenon is known as "bluejacking". It's not clear at present that this is being done by anyone other than pranksters, but one can't help wondering, how long before commercial spammers catch on."
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • whoa there (Score:4, Funny)

    by macadamia_harold (947445) on Sunday January 28 2007, @05:35PM (#17792770) Homepage
    As more and more people leave Bluetooth turned on to make use of their Bluetooth headsets, Bluetooth close-range messaging, such as through bluejacking, is increasingly being exploited for commercial purposes.

    I only engage in bluejacking if I get pr0n spam. and certainly not in public.
  • Basically you can bluetooth chat with someone in a public place (like a train), then arrange for sex when you reach your destination, or in the train en route. And maybe they're even hot...
  • CAN SPAM? (Score:4, Insightful)

    by E IS mC(Square) (721736) on Sunday January 28 2007, @05:40PM (#17792810) Journal
    Yeah, we all know how effective CAN SPAM has been. My mailbox receives only 1000+ more spam emails a week now then before.
    • by Rosco P. Coltrane (209368) on Sunday January 28 2007, @05:43PM (#17792844)
      Yeah, we all know how effective CAN SPAM has been. My mailbox receives only 1000+ more spam emails a week now then before.

      There's a reason it's not called CAN'T SPAM...
    • Legislation around bluetooth spam might be more effective, as the people who are doing it have to physically present in the country in order to carry out bluetooth spam, so it is actually possible to catch them. An email spammer, on the other hand, can move to any country that will allow him to carry out his activities.
  • No intermediary (Score:5, Insightful)

    by debrain (29228) on Sunday January 28 2007, @05:40PM (#17792814) Journal
    These messages seem to fall through a loophole in European laws against spam since they do not travel through an 'intermediary network.'

    Well, the reason for anti-SPAM legislation being written that way is that SPAM passes over an anonymous intermediary network. If you know who sent it, and can identify the sender, you can thus take legal action against them directly, so it probably should be handled in a different way. If it becomes a big enough problem, something will be done about it.

    My 2 cents. :)
    • Meh, legal action... for communicating.. right. Sounds like a great world you're advocating there.
    • If you know who sent it, and can identify the sender, you can thus take legal action against them directly, so it probably should be handled in a different way. If it becomes a big enough problem, something will be done about it.

      Great logic - because you know who did it and can do something about it, the existing laws should not be enforced and you can't do anything about it. Legally, that is.

      Spam kiosks will be vandalized. Some kind of EMP device would be nice but the kiosks won't last long enou

      • Spam kiosks will be vandalized. Some kind of EMP device would be nice but the kiosks won't last long enough. If the pure psychic energy of spam hatred does not destroy the kiosk instantly, it will be kicked over, smashed by a vehicle or burnt within seconds of being turned on.
        Hehe, like those pesky automatic police speed radar boxes. It's amazing how many of these have been on the receiving end of a shotgun lately...
    • you can thus take legal action against them directly,

      Ok Great idea. I'll use that then...

      One little problem. If it's not illegal, what do I sue them for? The 30 seconds it takes me to get my phone out of my pocket, to hit "no"? That's about EUR 1.- , provided I can convince the judge that I should be earning EUR 120.- an hour....

      There is no problem if I get bothered by a bluetooth ad once every year. Then I'll cover the costs myself. But as spamming is so very cheap per "delivered message", the same is lik
  • by Rosco P. Coltrane (209368) on Sunday January 28 2007, @05:41PM (#17792822)
    This is bound to be counterproductive: how do you think people will react when they get one, two, three, dozens of unwanted messages? just look at how they react when they get unwanted phone calls...

    I for one never buy anything from any company that practices obnoxious in-your-face advertisement, unless I have absolutely have no choice. Advertisement is bad enough, but I just can't stand when they try to shove it down my throat. I'm sure I'm not alone.
    • Can you say "Head on! Apply directly to the forehead!"
    • Re: (Score:3, Insightful)

      Yep, cause people handing out leaflets in the streets, that's *never* been effective.
      • by Mike89 (1006497) on Sunday January 28 2007, @08:12PM (#17793876)

        Yep, cause people handing out leaflets in the streets, that's *never* been effective.
        I don't know about in the past, but at least now (in Melbourne, Australia), it's extremely ineffective. People handing out pamphlets are completely shunned, all they do is block up the sidewalks.

        For further proof, you should watch this video [youtube.com] from 'The Chaser's War On Everything' (comedy show over here) - they go to busy areas with $20 notes, calling "Free money? Free money?" waving it in people's faces - everyone ignores them, says no, or tries extremely hard to avoid them.

        Also, here's another video [youtube.com] related to advertising from them which may give you all a laugh ;-).
        • Yeah, Chaser rocks.
        • Is there a "nice", polite, socially-acceptable way to leaflet? What if I simply circled a block with my arm outstretched, holding a leaflet?
          • Re: (Score:2, Insightful)

            by Anonymous Coward
            twitter [slashdot.org], please read this carefully. Following this advice will make Slashdot a better place for everyone, including yourself.
            • As a representative of the Linux community, participate in mailing list and newsgroup discussions in a professional manner. Refrain from name-calling and use of vulgar language. Consider yourself a member of a virtual corporation with Mr. Torvalds as your Chief Executive Officer. Your words will either enhance or degrade the image the reader has of the Linux community.
            • Avoid hyper
            • That describes the majority of Windoze users

              Not only offtopic, but also stupid.

              ... and also phunny. Please grow a sense of humor! Not everything you read on Slashdot is to be taken dead-seriously.
    • Re: (Score:3, Insightful)

      I for one never buy anything from any company that practices obnoxious in-your-face advertisement...

      And yet somehow, all those big companies manage to stay in business without your support.

      Why do Slashdotters find it so hard to get past the assumption that everybody thinks they way they do?

  • by Tore S B (711705) on Sunday January 28 2007, @05:42PM (#17792836)
    ...a jam-packed train in Öresund, Sweden. A middle-aged man in a suit is sitting down, reading business documents. But occasionally, beeps come from his cellphone. He is visibly more annoyed for each time, and looks around him.

    Finally, he's had enough, and gets up and yells...
    "WHO THE HELL KEEPS BLUETOOTHING ME GAY PORN ALL THE TIME?!"
    • by Rosco P. Coltrane (209368) on Sunday January 28 2007, @05:45PM (#17792864)
      And what did you say to him?
      • He probably got that from the site tjuvlyssnat [tjuvlyssnat.se] (eavesdropped). Some pretty hilarious and/or tragic stuff there. For instance:

        Bus, Västerås

        Two guys ~17 talking. Girl ~14 sits down next to them.
        Guy 1: Ey, what the hell is 56 minus 34?
        Girl starts giggling.
        Guy 2: What the hell, that's impossible! Hang on I'll check on my cellphone...
        Girl (laughing): You don't have to do that. It's 16!
        Elderly man (shakes head angrily): Your math teachers should be burned at the stake!
        Everyone is suddenly silent on the
  • by LiquidCoooled (634315) on Sunday January 28 2007, @05:46PM (#17792874) Homepage Journal
    It would be beneficial if people started getting random spammings.
    Hopefully it will reach the mainstream press and people would get taught how to disable the promiscuous phone settings.

    I just recently picked up a bluetooth adapter for this computer and I am getting quite good at recognising people who arrive at the house (before they even knock on the door!).

    Your Bluetooth personal area network should not operate like RFID, at the moment, businesses can see who comes and goes.
    • It worked with computers so well, so this is a good plan.
    • "taught how to disable the promiscuous phone settings."

      My Treo 650 requires me to whitelist any bluetooth devices I want to use. Is this not standard with other phones? Or should I hold on to this phone, because it protects me from BlueSpam?
      • it doesn't really. it'll require you to *pair* with another device to allow you to send/receive without explicit authorisation, but there's nothign to stop bored kids finding your device (if you have it set to "discoverable") and sending you vcards with abusive text, as an example. some phones notably were sold that automatically accepted transfers to/from non-paired devices without any interaction, however - e.g. early bluetooth nokias.
        this is why programs like BTCrawler for Windows Mobile devices are p
    • by quasinfinity (788971) on Monday January 29 2007, @12:39AM (#17795996)
      I find the discussion for this article a little out of touch with reality... except the post before this which made mention to disabling settings.

      All devices (cell phones, PDAs, computers, etc) with bluetooth have two sets of options when you turn the bluetooth in them on. You can choose to make your device discoverable or not, and connectable or not. For any two devices to continually connect to each other they both have to have connectivity enabled (well duh), and they both have to be paired [wikipedia.org](one exception to the pairing rule, below). To pair devices, at least one must be discoverable, then the other searches for "discoverable devices." When the discovering device finds the discoverable one you exchange a passkey (so you know it's not Joe Blow's phone across the room), and they're paired. Paired devices will always connect to each other so long as connectivity is enabled on both devices. Discoverability never needs to be turned on unless a new device is being paired or you want to receive a business card or something else that uses the object push profile (which is the exception to the pairing rule).

      So the way bluetooth transmits information is different depending on the information being sent. Music for instance needs to be continually streamed, while connecting to the net over bluetooth is more sporadic transmission. To acknowledge this, the bluetooth standard has several different profiles [wikipedia.org] that transmit the data in different ways depending on what is being sent. Devices will only have access to the profiles that the manufacturer decides that device needs. As earlier stated, the object push profile is special, it can transmit data to any discoverable (or already paired) device. This is because the object push profile is only used to send short text-based messages, such as that business card I mentioned.

      Thus, I'm going to make the safe assumption that these ads are being sent using bluetooth's object push profile as well.

      So let's say you want your bluetooth phone to always be connected to its headset but you don't ever want to receive these ads, the solution is simple. Leave your bluetooth turned on, just don't make it discoverable. It's that easy.
  • Not for long! (Score:5, Insightful)

    by OpenGLFan (56206) on Sunday January 28 2007, @05:53PM (#17792930) Homepage
    This sounds like a wonderful idea. Either it's automated, or there's a person doing it, and in both cases, bluetooth is short-range. If it's a little automated box, take a hammer to it.

    And if it's a person doing it, dude, I've still got the hammer.

    I expect this to be a short-lived phenomenon.
    • I don't think juries take kindly to the LART defense.
      • I don't think juries take kindly to the LART defense.

        You don't have to hurt anyone, you just need to destroy the spam device. Given the level of hatred most people have for spam, you will never be arrested much less convicted by a jury. The local police will probably help you hold the loser down as you happily hammer the device into bent pieces.

    • Re: (Score:2, Informative)

      blue-jacking is a worse threat than spam is.. i saw a british video on you-tube latly that shows a guy with a PDA automatically dialing peoples blue-tooth phones to pay-per-minute #'s.. costing them apparently almost $100 each, depending on how long it takes them to notice their phone is connected.
  • I've got to wonder... is there ANY wireless technology that's worth a damn? Cell phones are finally, after several decades, starting to work well, but even those have massive security holes. (My parents had their personal info stolen on a trip to NYC a year ago via their cell phone, and the cell phone company told them that it's very common, and that there's nothing my parents could have done to prevent it).

    I'm not so sure, due to the very nature of data floating around where anybody can grab it, that
    • reliable (Score:3, Informative)

      if you really want to push the reliable button, amateur radio is about the only form of communication you can rely on when the chips are down. (hurricanes are a great example) Cell reception is spotty in many places and the loss of a single tower could easily disable several square miles of service.
      • And with mandatory station identification, a blanket ban on commercial traffic, and a subset of people who make a sport out of locating rogue transmitters, spam can be suppressed.
    • My parents had their personal info stolen on a trip to NYC a year ago via their cell phone, and the cell phone company told them that it's very common, and that there's nothing my parents could have done to prevent it

      Er, I'm gonna have to call BullShit on this one. My celphone, for example, doesn't know any of my personal info (other than that related to making phone calls). That's by far the easiest way to prevent it from being stolen. Why are you putting banking/SS#/whatever into your phone in the fir

  • by stud9920 (236753) on Sunday January 28 2007, @06:00PM (#17792980)
    0a) rename your BT identity to something not recognizeable
    0b) download grossout.jpg, rename to "ctu.mp3"
    1) detect someone who might have a BT phone, in a crowded place.
    2) send "ctu.mp3". Many people will accept this unconditionally, even if manually
    3) enjoy the recipent's face.
  • Thank you Verizon (Score:5, Informative)

    by weave (48069) on Sunday January 28 2007, @06:32PM (#17793194) Journal

    Thank God Verizon cares so much about their customers that they have so crippled bluetooth on their phones that the only thing possible with them is headsets and dial-up networking -- maybe.

    /sarcasm

      • They may not actually, depending on the brand. Some phones come set with bluetooth discoverable mode turned off, others default to on. And when on, it will prompt before letting someone send stuff to it. That mode is supposed to be for just the one-off transfer between people of a contact card or file. The RAZR you have defaults to off and you can't even pair unless you set it to discoverable, and then it times out like after 30 seconds and goes back to being invisible. Anyway, Verizon's motive is greed
  • the second-to-last paragraph in that article notes something important.. the EU directive does not mention anything about needing to be a subscriber - the Dutch version, however, does.

    Also, the Opta have already mentioned to NU.nl in a later article that it will be up to the financial department of the government to fix this or not.. a great hint that although Opta would love to label this spam and put a stop to it, their hands are tied, and are asking for them to be untied.
  • Given the short range of Bluetooth, I would think it would be fairly easy to locate the piece of equipment responsible and give it a quick kicking.
  • There is a solution to the problem that will owrk most of the time. If you already have your phone and headset paired, then just turn off your phone's and headset's Bluetooth visibility setting. When this is turned on, basically, the device is broadcasting its ID so that you can pair or send stuff to that device. You only need this turned on when you are pairing devices or trying to send data to/from devices that don't know each other (for example, sending contact information or pictures).
  • "The Dutch OPTA, a national telecommunications watchdog, has decided not to label commercial Bluetooth messages as spam"

    The OPTA hasn't formally decided anything. In TFA an OPTA spokesperson (when asked by a reporter) claims that bluetooth spam is probably not covered by current Dutch legislation, but it DOES "go against the spirit of the law". The OPTA so far hasn't investigated matters further, because it (apparentely) needs a formal complaint to be able to do so, and no one has filed one yet.
  • They claimed last week that they hadn't gotten any complaints. So I complained.

    I also offered to forward my spam to them. Not immediately the commercial messages themselves, only just the subject and a question wether they want to recieve the full message. They only have to hit "NO" or "Delete" not recieve the full message.

    Funny how they didn't seem to be interested in my offer.... ;-)
  • Any time I looked at my phone during the day, there'd be an alert on it asking if I wanted to accept the transfer. Of course, by then, the perp trying to spam me was out of range so I couldn't take the message just to figure out whose ass needed kicking.

    Still, I think this is a great opportunity! How often do you have a spammer close enough to strangle them?

    -jcr
     
    • Re: (Score:2, Informative)

      Technically, these options exist - as "Off," "On but hidden," and "On and visible to all."
      The Bluetooth devices I've seen come with BT on and visible, but the access to the setting is somewhat complicated (my cellphone has at least "BT on/off" in the quick menu).

      Note that the "On but hidden" state is far from foolproof - it just stops the device from broadcasting its presence (which has (so far) been enough for me in most cases - security by obscurity?).