Also we're going to tell you about that hands-free
technology. Many of us who have BlackBerrys, other
wireless phones, may use a Bluetooth technology in the car.
But the problem is could that technology be compromised?
Could somebody actually eavesdrop on your conversation?
We'll give you some warning signs and some things you can
do if that's the case.

* * *

(Unrelated Segments)

* * *

GREGORY: Have you ever seen someone who you thought was
talking to themselves, only to pass them and notice that
they were wearing one of those wireless earpieces? Well,
that's Bluetooth technology at work. It lets people use
cell phones and other electronic devices hands-free. But
is there a downside?

With 1.5 billion served, Bluetooth is one of the hottest
communication devices on the market.

Unidentified Man #1: Typically I use it in the car, just
to make sure that I'm able to focus on the road.

Unidentified Woman #1: I put it on in the morning when I'm
leaving for work and I take it off when I get home.

Unidentified Man #2: It's a lot more convenient.

GREGORY: It's simple. Insert earpiece, and talk away.
And with many cities and states now requiring that you use
a hands-free device while driving, the amount of people
installing these Bluetooth devices is on the rise.

Mr. MIKE FOLEY (Bluetooth Special Interest Group): A very
high percentage of the time people speak on a mobile phone
is in the car.

GREGORY: But how easily could someone listen in to your
private conversation? Jim Stickley of Trace Security says
you're more vulnerable than you think.

Mr. JIM STICKLEY (Trace Security): Oh, it's extremely
easy.

Ms. ANGIE STOCKSTILL (Bluetooth User): Are you dating
anybody?

Unidentified Man #3: No. Do you like anybody?

Ms. STOCKSTILL: Yeah, I'm kind of married.

Unidentified Man #3: Oh, OK, sweet. That's good.

Mr. STICKLEY: And if that device is turned on, I could
hook up to it. I don't have to push any buttons on that
device. I don't have to do anything.

GREGORY: Your phone conversations are safe, but when
you're not using the device, Jim can actually activate it
and listen to any conversation going on in the car. With
their permission, we hacked into several Bluetooth car
devices and eavesdropped just a few car lengths away.

Unidentified Man #3: Wow.

Ms. STOCKSTILL: (Unintelligible)

Mr. DON POWERS (Bluetooth Users): I'm absolutely blown
away. I didn't realize the Bluetooth device was
transmitting all of the time where somebody could actually
pick that signal up.

Ms. STOCKSTILL: Totally surprised. I never thought
that--you think your car is like your home, that you--it's
a private, you know, environment.

GREGORY: In another test from a Baton Rouge parking lot,
we were able to connect to 10 more Bluetooth car devices in
just 30 minutes.

Mr. STICKLEY: We got another one. Who do you think it is?
I bet that car that just pulled up right there.

GREGORY: The Bluetooth Special Interest Group says
security measures are in place, but it's up to the user to
activate them.

Mr. POWERS: Like any security, it's as good as you make
it. And too, if you have an alarm in your house and don't
turn it on and use it, then the security doesn't help you.

GREGORY: And Jim Stickley is the founder of Trace
Security. You saw him in the piece and he's here with us
now.

Good morning, Jim.

Mr. STICKLEY: Good morning.

GREGORY: How are you doing?

Mr. STICKLEY: I'm hanging in there.

GREGORY: The real question here, to narrow it down, we're
talking about hacking into the technology, not when you're
in the middle of a phone call, but when it's simply in your
ear and you might be having a conversation in the car.

Mr. STICKLEY: Exactly. When you're in the car driving
around talking to a passenger next to you.

GREGORY: So you heard in the piece that the Bluetooth
Special Interest Group says that there are security devices
here, they just have to be activated by the user. Do you
agree with that?

Mr. STICKLEY: No. No, that's not accurate. The main
reason is that these vulnerabilities have been around a
number of years. And some devices nowadays have a lot of
security in them. But the devices we found with the
vulnerabilities did not have the security available. So
you couldn't turn anything on. So it just--it doesn't make
sense to say that.

GREGORY: So, what should the user then do?

Mr. STICKLEY: Well, the user--if they have one of these
devices, it's vulnerable.

(Graphic on screen)

Bluetooth
To keep device secure,
always change your pin

Mr. STICKLEY: And basically, that's what these devices
that have things like no PIN, or you can't change the PIN,
or they're always listening, they're always activated so
they can always communicate with your phone, those types of
devices are very at risk. And to really do anything, you'd
have to turn it off. And that's it.

(Graphic on screen)
Bluetooth

Stay secure: Turn Bluetooth on
only when using it

GREGORY: It kind of--it defeats the purpose in a lot of
cases, as well.

Mr. STICKLEY: Absolutely.

GREGORY: All right, but you--we were just pointing out,
some of the smaller devices are not the ones that are at
risk. So, point out the ones that people should be more
worried about.

Mr. STICKLEY: Sure. Larger devices, the ones that are
hands-free that you put into your automobile itself.

GREGORY: Right.

Mr. STICKLEY: It sits, like, in the consul, plugs into the
cigarette lighter. That type of thing are at risk. The
little devices that you have, these ones that hook on your
ear, these are great. These are very secure. They hold up
really well. They're difficult to tap into.

GREGORY: And you know that they're secure because they'll
ask for the PIN number, or they ask you for some
confirmation to be paired?

(Graphic on screen)

Bluetooth Facts
Bluetooth allows devices to "talk"
to each other without wires

Mr. STICKLEY: Sure. Not only that, but, like, when you
walk up for the first time with your phone--like on this
one. I have to hold a little button down.

GREGORY: Right.

Mr. STICKLEY: And then it'll allow me to sync up with it.
Well, on these larger ones--now, these here are actually
good devices that are being shown here.

(Graphic on screen)

Bluetooth Facts
1.5 billion Bluetooth devices
have shipped worldwide

Mr. STICKLEY: But on a lot of them that are out there, you
don't have to push anything. I just walk up with my phone
and I can connect right to it. And now I'm hooked into
that phone. So it's really simple to just take it over.

GREGORY: All right. So in the piece, we were talking
about car kits and hacking in when you're having a
conversation in your car.

(Graphic on screen)

Bluetooth Facts
Bluetooth was named after a late
Denmark king Harald Bluetooth

GREGORY: So, talk about the car kits that are available,
and which are secure and which are not.

Mr. STICKLEY: Sure. For example, all that are listed here
are secure.

(Graphic on screen)

Bluetooth Facts
Bluetooth was invented in 1994
as cable replacement technology

Mr. STICKLEY: What we found is--Motorola, for example,
they did not have a single one that was vulnerable. Most
of the brands, some of them were a little bit less quality
and those had vulnerabilities. Their higher quality ones
were generally more secure. It's just kind of luck of the
draw when you're looking at these devices. And really,
what you want to be looking for is something that forces to
you press that button for it to pair with your phone. And
that's really your only safety.

GREGORY: Otherwise, it's an open microphone in many ways.

Mr. STICKLEY: That's exactly what it is.

GREGORY: Yeah. And do people need to realize that this
kind of technology comes with this downside? Will we be at
a time and place where it's automatically more secure? Or
it's kind of buyer beware for now?

Mr. STICKLEY: For now, it's apparently buyer beware. It
should get to the point where you just press the button,
you're secured and everything's great. It's just not
there.

GREGORY: Just not there yet. Jim Stickley, good advice.
Thank you very much for coming in.

Mr. STICKLEY: Thank you.

# # #

For a videocassette(TV) or audiocassette(radio) of this
news segment contact your nearest VMS office
Material supplied by Video Monitoring Services may only be
used for internal review, analysis or research.
Any publication, re-broadcast or public display for profit
is forbidden.