Wired
Security researcher Fabian Bronline has announced that AirTag has succeeded in sending arbitrary messages to surrounding devices using a “find” network that communicates with surrounding Apple devices.
Deliver messages on the “Find” network
Apple’s loss-prevention tag, AirTag, features encrypted communication with the “find” network formed by surrounding Apple devices to protect user privacy and locate it.
Security researcher Fabian Bronline has blogged that he has succeeded in sending arbitrary messages to surrounding Apple devices using a “find” network, pretending to be the encrypted communication that AirTag exchanges. did.
On his blog, he was able to deliver a short message to his Mac at home via a “find” network.
Not sure if it will be abused soon
Sending messages using the “search” network published by Mr. Bronline can only communicate with a very small amount of data of a few kilobytes, and it is unclear whether there is a risk of immediate misuse, US media 9to5Mac points out. I am.
He points out that the “find” network communications are end-to-end encrypted, which can make it difficult for Apple to take action.
There is also a report that the AirTag built-in program can be rewritten
The other day, security researchers report that by rewriting AirTag’s built-in program, you can change the website displayed when you hold your iPhone or Android smartphone over AirTag in lost mode.
Source: Fabian Bräunlein via 9to5Mac
(hato)
Source: iPhone Mania