What you need to know
- A new AirDrop vulnerability can let malicious third parties acquire critical information.
- Among some of the info they can get are phone numbers and Wi-Fi passwords.
- About the only defense against this is turning off Bluetooth.
A newly discovered AirDrop security flaw can let anyone with a computer and the right software access critical information such as phone numbers and Wi-Fi passwords. The Hexway report, first spotted by Ars Technica, says users just have to have Bluetooth turned on broadcast to fall prey to the vulnerability.
Simply having Bluetooth turned on broadcasts a host of device details, including its name, whether it's in use, if Wi-Fi is turned on, the OS version it's running, and information about the battery. More concerning: using AirDrop or Wi-Fi password sharing broadcasts a partial cryptographic hash that can easily be converted into an iPhone's complete phone number. The information—which in the case of a Mac also includes a static MAC address that can be used as a unique identifier—is sent in Bluetooth Low Energy packets.
There's also a video showing the vulnerability in action. It's a fairly simple process for malicious third parties. With a proof-of-concept trial, the report was able to gather dozens of iPhones and Apple Watches within range. All that was needed was a computer and sniffer dongle.
In general, the information being acquired isn't as important as say, social security numbers or bank information. However, it is still important information that users don't want to be sharing around, especially if third parties can weaponize them to gather more information about you.
Hexway calls this issue more of a "behavior" than a "vulnerability" as it is baked into iOS. About the only security measure you can take against this flaw is turning off Bluetooth entirely.
Analyst sticks finger in the air, decides there are 40m Apple TV+ viewers
Wedbush analyst Dan Ives is known for being keen on Apple and he's had his guessing stick out again.
We review Kokoon Headphones which are designed to help you relax and sleep
Kokoon Headphones feature active noise cancellation and an accompanying relaxation app. The Kokoon experience may help you get some much-needed relaxation and sleep.
Apple Music's 'Stream Local' initiative will support South African artists
Apple is hosting a 'Stream Local' initiative to support South African artists impacted by the coronavirus.
Help your baby sleep through the night with a smart nightlight
Sometimes simple is best, but there are some nightlights out there with very cool features if you want something more. Here are our favorite smart nightlights that can both entertain and protect your children.