Does the iphone need to be in the car??ShiftTab wrote:Just wanted to confirm it works!!!!
All you have to do is -pair your iphone to your car-(car) goto setup, downloaded phonebook, update-bring your laptop as well turn on the bluetooth on the laptop and send file .vcf (addressbook)-and you're all set!!!
Although your laptop isn't connected, the car thinks it's receiving from the phone when you're sending data from the laptop.
Yep, if he downloaded the address book via his laptop then his laptop's bluetooth was connected to the car.spockrock wrote:
Does the iphone need to be in the car??
Also this is a huge security flaw, blue tooth is supposed to sync with with the bluetooth mac address. Just because your iphone is paired should not mean your laptop should pair and sync with the nissan bluetooth.
It's not a security flaw because data will only be sent when the car is requesting for it, you can't just sent data when the car isn't requesting for it during the update. You HAVE to be in update mode in order to send data.spockrock wrote:
Does the iphone need to be in the car??
Also this is a huge security flaw, blue tooth is supposed to sync with with the bluetooth mac address. Just because your iphone is paired should not mean your laptop should pair and sync with the nissan bluetooth.
Technically No, my laptop never made a firm connection. My phone was the one that was paired to my car. My laptop knew of the existence of my car's bluetooth but it failed to connect.maxentropy wrote:
Yep, if he downloaded the address book via his laptop then his laptop's bluetooth was connected to the car.
if you have an iphone, it's complicated, if you have a blackberry, it should be very easy. What phone do you have?bina12834 wrote:so wait...how exactly do you do this? I have a laptop that has bluetooth, but i turned the bluetooth off because i never use it for anything.
Ok I just tried this, my iphone is already paired, however setup>download phone book does not work. I went tried adding an new entry using this method, phone book, add new entry, say their name then transfer entry. Go on the laptop send the vcf file and no dice.ShiftTab wrote:Just wanted to confirm it works!!!!
All you have to do is -pair your iphone to your car-(car) goto setup, downloaded phonebook, update-bring your laptop as well turn on the bluetooth on the laptop and send file .vcf (addressbook)-and you're all set!!!
Although your laptop isn't connected, the car thinks it's receiving from the phone when you're sending data from the laptop.
That is exactly the security flaw, what you are doing is similar to a man in the middle attack on a network, except in a man in the middle attack you tell the victim computer you are the dhcp server and the dhcp server you are the computer. The way the bluetooth and the iphone communicate is both have a bluetooth mac address a 'finger print' that being said, if the nissan bluetooth is not checking for that the mac address than that is a security flaw, but basically you are jumping in between the transfer and transferring the phone book.ShiftTab wrote:
It's not a security flaw because data will only be sent when the car is requesting for it, you can't just sent data when the car isn't requesting for it during the update. You HAVE to be in update mode in order to send data.
You have to manually get to update mode and when you're updating it will ask for you to punch in a code, when you're sending from your laptop, it just sends it directly without having to punch anything in.
i have an iPhoneShiftTab wrote:
if you have an iphone, it's complicated, if you have a blackberry, it should be very easy. What phone do you have?
exactly but you can't send or receive if you're not specifically on the "Update Mode" which you physically have to be on in order to send data. You can't transfer anything unless you're in the update mode. So you can't really be a victim unless you intentionally leave that thing on 24/7 which wouldn't make sense.spockrock wrote:
That is exactly the security flaw, what you are doing is similar to a man in the middle attack on a network, except in a man in the middle attack you tell the victim computer you are the dhcp server and the dhcp server you are the computer. The way the bluetooth and the iphone communicate is both have a bluetooth mac address a 'finger print' that being said, if the nissan bluetooth is not checking for that the mac address than that is a security flaw, but basically you are jumping in between the transfer and transferring the phone book.
-so goto your car with your iphone, bring your laptop with you.-try and pair your laptop and car together. (most likely it will not work) your computer will detect the car but not be able to pair-now pair your phone to your car-on your navi, press setup, phone, downloaded phonebook, download all, yes and it will ask to put in a code-on your computer, look for your .vcf file and send that to your car and it that should be it.bina12834 wrote:
i have an iPhone
hmm, so you don't have the options to hit the setup button -> phone -> downloaded phonebook ->download all ?spockrock wrote:ahh there is the catch it only works on the navigation package. I only have the premium package :\
Basically its poor coding, and I imagined the people who coded the bluetooth system never thought what if another third party would would upload anything. That being said pretty clever of you figuring it out. Kudos.ShiftTab wrote:*note that you're not really connecting your laptop to your car because I don't think it allows it, but SOMEHOW, you can have your iphone paired and the car will think that the data is coming from the phone when really it's coming from a laptop. I don't know why it works, it just does... and that's all I care about.
However it will be pretty annoying everytime I get a new contact, I'll have to do the same process each time... better than nothing...
I can do phone book > add entry and manually add the entries, but I just don't the the non navi unit has this flaw.ShiftTab wrote:
hmm, so you don't have the options to hit the setup button -> phone -> downloaded phonebook ->download all ?