Android Bluetooth Bluejacking Possible?

Question

Reading from http://developer.android.com/guide/topics/wireless/bluetooth.html,

The current Android Bluetooth API's require devices to be paired before an RFCOMM connection can be established. (Pairing is automatically performed when you initiate an encrypted connection with the Bluetooth APIs.)

However, to my knowledge, the Bluetooth protocol allows .vcf (vCard) files to be sent without having paired two devices. This is what makes Bluejacking possible on older phones like Sony Ericsson k7** series, Nokia 63** series etc.

In the interests of writing an android bluejacking application I would like to be able to send vCard files from Android without having to first pair with the device. Does anyone know if this is possible?

Answer 1

Bluejacking is really only sending unsolicited messages to other bluetooth users. Which is usually confused with Bluesnarfing. Most of the older phones I have worked with in android do not even have Bluetooth discovery turned on which is really the only way someone can do Bluejacking, if they aren't already paired with your phone, they have to see your bluetooth before they can send it. Usually this discovery mode is only on for 2 minutes , once selected. Newer phones its a little easier with the easy pairing but I've still had issues making connections.

Answer 2

You can make the phone discoverable for an unlimited period of time, this might be start point for bluejackign to be possible:

EXTRA_DISCOVERABLE_DURATION Intent extra. The maximum duration an app can set is 3600 seconds, and a value of 0 means the device is always discoverable.