News for hackers. Stuff that matters.

A comment on What an attacker gets from Apple devices if they sniff Bluetooth traffic. Parent comment

Re:What an attacker gets from Apple devices if they sniff Bl... by snarf21 on Friday July 26, 2019 @10:37AM (#20535102)
I'm missing what you are saying, sorry. If I know your email already, nothing is getting leaked. If I don't know your apple ID email, I have to brute force all combinations of email concatenated with your phone number to figure it out. If a stranger doesn't know either piece, they'd have to pre-image the entire space which is nigh impossible (all phone #s X all email addresses)
[ Parent | on HN ]
Re:What an attacker gets from Apple devices if they sniff Bl... by Operyl on Friday July 26, 2019 @12:07PM (#20535822)
It’s convenient to just have a phone number be the piece both sides know. It’s not as magical if you need to also give your AppleID to every single contact manually, and if you have some sort of Phone Number to AppleID lookup service it’d be abused just as badly is what I’m saying here.
[ Parent | on HN ]
Re:What an attacker gets from Apple devices if they sniff Bl... by wool_gather on Friday July 26, 2019 @11:10AM (#20535361)
You're right, but they probably have/want to cover the case where you've given someone just your phone number (or just your email).
[ Parent | on HN ]