Apple AirDrop shares more than files

Re:Apple AirDrop shares more than files by mstute on Wednesday April 21, 2021 @01:02PM (#26892304)

There is no need to brute force. We can build a rainbow table with valid phone numbers, which we can use to lookup a phone number hash in real time (about 50ms on a regular desktop machine). PoC available here: https://github.com/seemoo-lab/opendrop/blob/poc-phonenumber-...

[ Parent | on HN ]

Re:Apple AirDrop shares more than files by dannyw on Wednesday April 21, 2021 @04:01PM (#26894680)

Can't believe Apple doesn't understand rainbow tables.

[ Parent | on HN ]

Re:Apple AirDrop shares more than files by fomine3 on Thursday April 22, 2021 @01:36AM (#26899112)

It's not a problem of existence of rainbow table or not salted, but the problem is that hash is not very meaningful for secret on small space, like phone number (something like 10^13 even larger?).

[ Parent | on HN ]