2

I am preparing a project for a client. It is a wireless device to be used inside a factory so the workers can interact with the factory without having to go to a terminal. In order to connect the device to the system easily I see two main possibilities: Bluetooth or Wi-Fi.

The client prefers to use bluetooth because it claims that it is safer, but I believe that it is quite the oposite (plus, it is much easier for me to use Wi-Fi).

The network to use will be al new, so I have complete control over what tecnology/protocols to use.

So what is safer, Bluetooth or Wi-Fi? How can I show it to the client?

Daniferrito
  • 123
  • 1
  • 3

1 Answers1

1

Wifi hacking has more scene. So maybe this is because your client thinks is safer... but it is not. Anything can be hacked if you don't take the appropiate security measures. Both of them can be victim of DoS too.

Advantages of using wifi

  • Higher range, so if the factory is large, less hardware will be needed to cover all, son less money I guess.
  • More compatible hardware.

Advantages of using bluetooth

  • I don't know! maybe they are less people focused on bluetooth hacking, so less tools.

Anyway, I think (personal opinion) A wifi network can be a good idea if you do well the configuration. Some standard security advices:

  • Disable WPS
  • Use WPA2 AES encryption, is the strongest of the standard available for now.
  • Use certificates or if not possible, use very long non-existing in dictionaries passwords using lowercase, uppercase, symbols and numbers.
  • Use if possible Radius instead of PSK (if possible).
  • Use "clients isolation" if possible. Only if not needed to connect from clients to clients.
  • Your wifi network should be in a different network subrange with port filtering to assure only accessing to the minimum required services.
  • If your money is ok, use hardware WIPS (wireless intrustion prevention systems) to try to prevent DoS. This is not usual, is not cheap.

With that standard security measures, you have a good wireless networks. Anyway, always everything can be hacked, you know :)

EDIT Regarding the key exchange on wireless networks and on bluetooth...

Bluetooth security is limited to key matching. In wireless networks the security standards have been raised with inclusion of new versions from the old-easy-to-hack WEP until complex key exchanges or certificate validation like on EAP-TLS.

Some other opinions supporting this on this article.

So finally my opinion too is Wireless is more secure, or at least, has more security mechanisms.

OscarAkaElvis
  • 5,185
  • 3
  • 17
  • 48
  • While I appreciate your answer, and all the points are great recommendations, this doesn't answering the question I asked. I wanted to know which of the two is safer, and a way to show it to the client. – Daniferrito Feb 05 '17 at 13:30
  • 1
    I edited my answer. Check it out. – OscarAkaElvis Feb 05 '17 at 18:34
  • The article you share is more than 10 years old. I beleive that since this time there was huge update on the bluetooth protocole. But you can find a more up to date article here https://www.verypossible.com/blog/bluetooth-vs-wifi-iot-which-is-better In any case, if the security matter, it is not the job of BT or Wifi to take care of this, you have to handle security on a software layer using encryption like SSL or AES. – Alexandre Apr 23 '20 at 16:02