What an attacker gets from Apple devices if they sniff Bluetooth traffic

Re:What an attacker gets from Apple devices if they sniff Bl... by thedanbob on Thursday July 25, 2019 @04:20PM (#20529195)

And for the phone number part, “If Bluetooth is ON on your Apple device AND you’re trying to Airdrop something (which you’d expect to send some identifying information) or connect to a new WiFi network (same)...”

To be fair I wouldn’t necessarily expect those actions to send out a hash of my phone number, but the threat indicated by the title is definitely overblown.

[ Parent | on HN ]

Re:What an attacker gets from Apple devices if they sniff Bl... by eridius on Friday July 26, 2019 @12:42AM (#20532403)

AirDrop has to send out a hash of you so that way the surrounding devices that are set to "contacts only" can use it to determine if you're in their contacts list (and therefore that it should respond).

I'm not sure why WiFi has to send a hash of your phone number, I thought it just prompted nearby devices to ask if they wanted to share it. Maybe there is some functionality there relating to determining if the sender is in your address book, I'm not sure.

[ Parent | on HN ]

Re:What an attacker gets from Apple devices if they sniff Bl... by mrunkel on Friday July 26, 2019 @01:59AM (#20532710)

Yes, it will only share the WiFi password with devices in your contacts.

[ Parent | on HN ]

Re:What an attacker gets from Apple devices if they sniff Bl... by lloeki on Friday July 26, 2019 @05:59AM (#20533605)

> I'm not sure why WiFi has to send

AirDrop operates on both Bluetooth and WiFi

[ Parent | on HN ]