6 ms·
This could have been an immensely powerful covert communications channel for field operators of military and intelligence services
by fiberoptick 5y ago
This could have been an immensely powerful covert communications channel for field operators of military and intelligence services
- airstrike 5y agoI think it still can...
- tyingq 5y agoIt feels like Apple's ability to fix this is somewhat limited, since they can't change anything about Airtags that have already been produced.
- thebean11 5y agoCouldn't a software change on the iPhone side prevent it?
- tyingq 5y agoI can't find anything that shows OTA firmware updates of the tags themselves happening. Yes, you could tweak the iPhone, but if a "emulated tag" looks exactly like a "real tag that can't be updated", you're somewhat limited.
- thebean11 5y agoI was thinking something more along the lines of rate limiting, doesn't this exploit depend on lots of spammy requests?
- tyingq 5y agoRate limiting would help with the "hijacking the network to send your own data" piece in the original article. It wouldn't do much for other uses, like tracking people without their knowledge. A "faked AirTag", could, for example, rotate it's serial number to avoid triggering Apple's "AirTag Found Moving With You" feature. Or the opposite of that. You could stick a fake device on someone's car and trigger the "AirTag Found Moving With You" warning over and over by periodically changing the serial number after the user suppressed the warning for a particular AirTag.
- varenc 5y agoPresumably a valid serial number for each AirTag is something that can't be guessed? That's how it is with Apple's other products. Each serial number has some entropy in it and there's no way to generate a valid new one.
- tyingq 5y agoThey are sequential: https://itechbrand.com/purple-iphone-12-is-the-first-apple-product-with-a-randomized-serial-number/ https://itechbrand.com/purple-iphone-12-is-the-first-apple-p...
- tinus_hn 5y agoAirTags run firmware that can be remotely upgraded.
- tyingq 5y agoAny more info on "can be"? For existing AirTags, they would have to already have that functionality (polling for updates). I can't find anything that says they do.
- sgerenser 5y agoI’d be surprise if Apple fielded AirTags without any way to update their firmware. I doubt it would be automatic though, you’d have to push an update to them from an iDevice.
- tyingq 5y agoIt would have to be automatic for it to be used to kill off "fake AirTags". Unless Apple is willing to take the hit of all the complaining.
- meepmorp 5y agoWhy couldn't they update the firmware automatically? They already do that with AirPods, iirc.
- tyingq 5y agoIt's a much cheaper device than Airpods, harder to manage battery life, and there's not yet evidence that they can update them automatically. As far as I can tell, competitor products (Tile, for example) don't update firmware automatically...it's a user-initiated thing.
- ALittleLight 5y agoThen you'd have the problem of new air tags not working until they'd been updated. It's something of a minor problem, but unless people actually misuse this enough to be a worse problem, I don't see why Apple would update to disable this.
- imwillofficial 5y agoNo, they have other less detectable methods. Your idea shows an awesome train of thought though. Ever thought about switching careers? As far as this method, the IC has thought about this very method for a long time. I’d be surprised if it wasn’t been used in the past.