5 ms·
Apple Shuts Down Flipper Zero's Ability to Shut Down iPhones
- er4hn 3y agoA better title might be "Apple fixes iOS bug that would let a single Flipper Zero perform Denial of Service attacks against every iPhone in it's radius."
- atlas_hugged 3y agoSeriously. What a generous title.
- Someone 3y agoIf you don’t know beforehand what “Flipper Zero” is, you can also see it as disingenuous towards Apple (“Big Evil Apple harassed another small company”, rather than “Apple fixed a security issue”)
- filterfiber 3y agoI don't know why the title even mentions the flipper. The attack can be done from any device that can send crafted BLE packets including laptops/android phones, etc. Apple just fixed a BLE DOS attack.
- atlas_hugged 3y agoRight exactly what I was thinking. It’s just weird that it was worded with the vibe of: “Apple defeated a nefarious adversary for the good of mankind. Thank you Tim Apple!” I’m not an Apple hater, don’t get me wrong. I’m writing this from my iPhone. I guess I’m just finally starting to get a little bothered by the ring kissing stuff that has to be done to remain on the FAANG+ allow list. I’ve started using ChatGPT to summarize the articles for me more and more lately. So this will be less and less of an issue for me once I find a way to do it more reliably.
- 2OEH8eoCRo0 3y agoMore like "Apple patches easily exploitable bug after two years."
- atlas_hugged 3y agoActually yeah, I vote for this one.
- slowhand09 3y agoi prefer "Gizmodo sensationalizes Apple bug fix by naming FlipperZero"
- rtev 3y agoWeeks after defcon, I saw they had a job listing asking for someone with Bluetooth experience and experience preventing denial of service attacks. Sounds like they finally hired someone that knew what was going on here.
- whycome 3y agoDoes someone scrape and analyse Apple's job postings simply to make guesses about what's going internally?
- trillic 3y agoI’d be surprised if there weren’t multiple independent teams doing this type of work across the entire NYSE/NASDAQ.
- dr_kiszonka 3y agoI know that some tech journalists do it.
- xkcd-sucks 3y agoit's like kind of shocking that an org as large as apple would need to hire externally for fixing a security bug in existing stuff
- Scoundreller 3y agoYes, but it also encourages orgs to put up/keep up non-existent job postings to look like they’re growing/expanding.
- calamari4065 3y agoIt's wild that they'd hire someone to fix one very specific issue. I guess that's what you get when you can just throw gobs of money at a problem.
- mordae 3y agoI love how cheap those CC1101 are! How come they are not more widespread?! https://jlcpcb.com/partdetail/TexasInstruments-CC1101RGPR/C29953 https://jlcpcb.com/partdetail/TexasInstruments-CC1101RGPR/C2... Spamming at 2.4GHz is boring.
- filterfiber 3y agoBetter title: "Apple fixes BLE DOS attack". I'm tired of media acting like the flipper is some kind of "super special hacking tool", it is very literally getting it banned in some places when all of it's internals are easy and common radios (Not to knock the flipper, it is conveniently well packaged). You just needed to be able to send crafted BLE packets, this attack doesn't have anything specific to the flipper at all. It didn't even originate on the flipper: https://github.com/ECTO-1A/AppleJuice https://github.com/ECTO-1A/AppleJuice > To run these scripts you need a Linux machine with an internal Bluetooth card or a USB Bluetooth adapter. Versions also exist that run on the ESP32, android, etc.
- matthewdgreen 3y agoPortable devices like the Flipper make it very easy to distribute working RF-layer exploits that don’t get hung up on all the non-standard hardware in phones and laptops. And frankly, that’s a good thing! Because manufacturers have, for some reason, decided that if there’s a radio-layer protocol involved somehow they’ll be protected by the obscurity of it. The Flipper lets devs turn those vulns into push-button exploits, which is finally inspiring companies to clean up the crapware in those stacks. (And I bet there is scarier stuff in there that researchers just haven’t found yet.)
- RockRobotRock 3y agoIs this really a battle worth picking? Many friends and coworkers are going to bring up the Flipper to you in passing conversation, might as well get used to it.
- smoldesu 3y agoIn my opinion, yeah. If anyone tries to deify or demonize the concept of a Flipper, you just remind them that everyone has a smartphone with even wilder SDR capabilities. The biggest difference is that the Flipper is weak hardware with wide-open software, and your smartphone is strong hardware with weak-ass software configuration. Reminding people of that is important, even if you don't think the FCC is about to change their mind. Crucify us for being a nerd if you must, but someone has to be the voice of reason and point out that the Flipper is the most optional part of the exploit.
- poulpy123 3y agoI'm wondering what interesting things you can do with the flipper zero beside shutting off phones and TV ?
- al_borland 3y agoYou could use it as a universal Amiibo for the Nintendo Switch or as a backup garage door opener.