3 ms·
I was thinking something more along the lines of rate limiting, doesn't this exploit depend on lots of spammy requests?
by thebean11 5y ago
I was thinking something more along the lines of rate limiting, doesn't this exploit depend on lots of spammy requests?
- tyingq 5y agoRate limiting would help with the "hijacking the network to send your own data" piece in the original article. It wouldn't do much for other uses, like tracking people without their knowledge. A "faked AirTag", could, for example, rotate it's serial number to avoid triggering Apple's "AirTag Found Moving With You" feature. Or the opposite of that. You could stick a fake device on someone's car and trigger the "AirTag Found Moving With You" warning over and over by periodically changing the serial number after the user suppressed the warning for a particular AirTag.
- varenc 5y agoPresumably a valid serial number for each AirTag is something that can't be guessed? That's how it is with Apple's other products. Each serial number has some entropy in it and there's no way to generate a valid new one.
- tyingq 5y agoThey are sequential: https://itechbrand.com/purple-iphone-12-is-the-first-apple-product-with-a-randomized-serial-number/ https://itechbrand.com/purple-iphone-12-is-the-first-apple-p...