3 ms·
The article is from 2020 so I’m curious: how much of this is still valid today? Especially: > Broadband BLE requests contain your data, namely, SHA256 hashes
by thih9 3y ago
The article is from 2020 so I’m curious: how much of this is still valid today?
Especially:
> Broadband BLE requests contain your data, namely, SHA256 hashes of your phone number, AppleID, and email. Only the first 3 bytes of the hashes are sent, but that's enough to identify your phone number
Is that a viable way of accessing someone’s phone number in 2023?
- wkat4242 3y agoIt's doable. Out of 100 million numbers here in Spain and 16 million possible 3-byte hashes, there will be 6 possible numbers for each 3-byte hash on average. That's low enough for trial and error.
- parker_mountain 3y agoYes. Brute forcing it takes at most a few seconds on modern consumer hardware. Probably under a second, tbh.