Araştırmacılar, Apple’ın kablosuz dosya paylaşım protokolünde, bir kullanıcın e-posta adresleri ve telefon numaraları gibi iletişim bilgilerinin açığa çıkmasına neden olabilecek kişisel verileri sızdırılabileceğini belirtti.
AirDrop, IoS and MacOS It enables file transfer between devices by taking advantage of the close-range wireless communication available in operating systems. With this feature, the user's phone number and e-mail address,<span data-contrast= A vulnerability discovered Wi-Fi it can bypass such protections b.
GermanyDarmstadt An academic from the Technical University team”A AirDrop si possible. All that malicious attackers need is Wi-Fi enabled device and a IoS or MacOS Physical proximity to a target that starts the discovery process by opening the sharing pane on the device.” /span>
The cause of the vulnerability is Apple's exchanged data-contrast="auto"> person identifiers(eg phone uses hash functions to mask numbers and email addresses. A malicious recipient hashing applied person collect their identifiersbrute force</span decrypts it for milliseconds using techniques such as include and also a malicious sender's phone number. data-contrast="auto"> hashing no prior knowledge requiredit is possible to learn the information of the receiver without doing.
Fix Apple privacy leakk any updatesmore than 1.5 billion Apple devices due to non-publishing is vulnerable to this attack. Users can only protect themselves by disabling AirDrop discovery from system settings and without opening the share menu.
Source:
youtube.com
