Apple Shuts Down Flipper Zero’s Ability to Shut Down iPhones::IOS 17.2 cut off Flipper Zero users running the Xtreme third-party firmware from mass-spamming popups at iPhones.

  • @Player2@lemm.ee
    link
    fedilink
    English
    1061 year ago

    This is why it’s important these devices are available. Got to find and fix these sorts of vulnerabilities

  • N3Cr0
    link
    fedilink
    English
    211 year ago

    This reads pretty much misleading to me.

    They say the flipper could bomb phones within 30 ft range. Via NFC! I would even doubt them stating a range of 30 mm.

    • aard
      link
      fedilink
      English
      311 year ago

      That attack is via bluetooth, not NFC. And the article states exactly that (just checked).

    • @Tetsuo@jlai.lu
      link
      fedilink
      English
      11 year ago

      It mostly depends of the antenna setup.

      I’m fairly sure you can get several meters of range with an external antenna.

      • @Death_Equity@lemmy.world
        link
        fedilink
        English
        21 year ago

        I think a meter is pretty much the limit with most NFC. There is a longer range NFC+ that can reach further, but nowhere near 30ft.

        • aard
          link
          fedilink
          English
          21 year ago

          Long range stuff typically is UHF RFID in the 860-960MHz band.

          HF NFC at 13.56 MHz can be done up to roughly 20cm, though with passive sniffing you might pick up parts at longer range.

          LF NFC is just a mess. I think there were some pretty long range readers available, but nobody should be using that stuff anymore, it’s just horrible. Unfortunately there still are companies using that for access control, so I’m now and then handing out copies of their keys to friends. The main security on those things is that sometimes it takes a few tries to get the your reader detect the tag.

    • Billegh
      link
      fedilink
      English
      91 year ago

      It’s Bluetooth here, and possibly. Apple was handling a class of pairing attempts poorly. Android could do the same thing. It currently seems like that’s not the case, and there are a lot of eyes looking at what’s open source.

      • @ozymandias117@lemmy.world
        link
        fedilink
        English
        31 year ago

        Maybe, but Android keeps rewriting its Bluetooth stack from scratch

        Android’s current Bluetooth stack has only been around for like 2.5 years

        So it’s also less battle tested, probably, although less likely to have memory corruption bugs

      • @batmaniam@lemmy.world
        link
        fedilink
        English
        31 year ago

        I don’t know the ins and outs. But I have a flipper and an android. It looks like the issue is on the UI more than overwhelming the hardware like a DDOS. My android gets a bunch of bogus connect attempts for random Bluetooth headphones that don’t exisit, but there’s enough time in between each to go in and turn off Bluetooth if you wanted. The iPhone made it so you just always had one, so you couldn’t do anything else with the phone.

  • Ghostface
    link
    fedilink
    English
    41 year ago

    Is this another tale of script kiddies ruining a good thing. Jumping the bluebox