Re:EU Gives Final Approval to Law That Will Force iPhone to ...
by transpute on Tuesday October 25, 2022 @12:11AM
(#33326118)
> wireless is secure if you do it right.
WiFi and bluetooth basebands and drivers have been repeatedly compromised, via public and non-public exploits. WPA3, despite promises of security improvements, remains vulnerable to deauth attacks. 5G LTE, despite promises of tower authentication improvements, remains vulnerable to IMSI catchers.
> FragAttacks (fragmentation and aggregation attacks) ... is a collection of new security vulnerabilities that affect Wi-Fi devices. An adversary that is within range of a victim's Wi-Fi network can abuse these vulnerabilities to steal user information or attack devices. Three of the discovered vulnerabilities are design flaws in the Wi-Fi standard and therefore affect most devices. On top of this, several other vulnerabilities were discovered that are caused by widespread programming mistakes in Wi-Fi products. Experiments indicate that every Wi-Fi product is affected by at least one vulnerability and that most products are affected by several vulnerabilities.
WiFi and bluetooth basebands and drivers have been repeatedly compromised, via public and non-public exploits. WPA3, despite promises of security improvements, remains vulnerable to deauth attacks. 5G LTE, despite promises of tower authentication improvements, remains vulnerable to IMSI catchers.
Oct 2022, Over-the-Air remotely exploitable Linux WiFi vulnerabilities (5 CVEs), https://news.ycombinator.com/item?id=33200171
July 2021, iOS WiFi RCE 0-day vuln, https://news.ycombinator.com/item?id=27868487
May 2021, https://news.ycombinator.com/item?id=27121918 & https://www.fragattacks.com/
> FragAttacks (fragmentation and aggregation attacks) ... is a collection of new security vulnerabilities that affect Wi-Fi devices. An adversary that is within range of a victim's Wi-Fi network can abuse these vulnerabilities to steal user information or attack devices. Three of the discovered vulnerabilities are design flaws in the Wi-Fi standard and therefore affect most devices. On top of this, several other vulnerabilities were discovered that are caused by widespread programming mistakes in Wi-Fi products. Experiments indicate that every Wi-Fi product is affected by at least one vulnerability and that most products are affected by several vulnerabilities.
July 2017, Broadpwn bug affects millions of Android and iOS devices, https://news.ycombinator.com/item?id=14727400