4 ms·
iPhone zero-click Wi-Fi exploit
- giuliomagnifico 6y agoIt's a bit hard to use because you need two Macs plus an iPhone that's airdropping something to one of them and a lot of time, but I place a reminder: "don't airdprop anything to your Mac in an airport/square/crowded streets/google labs/etc..." =) Just kidding, hope Apple will fix it but it's not easy.
- Bud 6y agoApple patched it 7 months ago.
- yokaze 6y agoHave we looked at the same article/video? "The attack uses a laptop, a Raspberry Pi, and some off-the-shelf Wi-Fi adapters". And the user of the iPhone did not need to initiate anything (or was notified about anything).
- giuliomagnifico 6y agoOh sorry wrong thread!
- kolinko 6y agoWhat? The bug was fixed months ago, and iPhone didn't need to do anything to be hacked.
- reilly3000 6y agoI’ve wanted to work on a BLE mesh project for a while but it’s things like these that make bootstrapping such a project so risky. BLE pairing in painful on its own, but having it open up a pathway for a kernel exploit with a bad packet is terrifying.
- strogonoff 6y agoThread: https://news.ycombinator.com/item?id=25270184 https://news.ycombinator.com/item?id=25270184
- baybal2 6y agoA filesharing system right in the kernel? A bad design decision it is!
- saagarjha 6y agoI fail to see how this is bad design?
- miohtama 6y agoHaving a bug in a network kernel component that could be outside kernel can cause non-interactive wormable exploit that steals all passwords of all iPhone users in the world.
- lifty 6y agoThe AWDL driver is running in the kernel, so most likely not the whole file sharing system.
- 1vuio0pswjnm7 6y ago"Wi-Fi Direct allows two devices not already on the same network to establish an encrypted peer-to-peer Wi-Fi network, using WPS to bootstrap a WPA2-encrypted ad-hoc network. Apple's AWDL doesn't require peers to already be on the same network to establish a peer-to-peer connection, but unlike Wi-Fi Direct, AWDL has no built-in encryption." https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-click-radio-proximity.html https://googleprojectzero.blogspot.com/2020/12/an-ios-zero-c... I have always wondered why Apple does not enable WiFi Direct so we can have peer-to-peer connections via WiFi Direct between Android and iOS phones.
- tremon 6y agoExactly because then we would have peer-to-peer connections between Android and iOS phones, reducing the lock-in Apple has on its consumers.
- miohtama 6y agoMy monthly remainder that sooner we get rid of C less everything will have less attack surface. There is a cost of old knowledge base vs. security, but unfortunately those software developing companies have externalised the cost of security issues to consumers.
- ChuckNorris89 6y agoAs if switching to other programing languages would magically prevent all security flaws.
- Corrado 6y agoActually, there are several languages that make these types of flaws difficult or impossible to create. So, while rewriting software in another language is not a magical fix, but it does actually help in the long run.
- miohtama 6y agoMemory safety issues are 70% of all security flaws. Here is a good study from Google https://www.chromium.org/Home/chromium-security/memory-safety https://www.chromium.org/Home/chromium-security/memory-safet... This is Google codebase, so it would be the safest of the safest in the world, with least prone to human error and having all kind of ceremony and processes just to avoid these in C/C++. I assume the % is much higher e.g. for your average software engineer working with IoT devices.