News for hackers. Stuff that matters.

A comment on Wi-Fi hack creates 'no iOS zone' that cripples iPhones and iPads. Parent comment

Re:Wi-Fi hack creates 'no iOS zone' that cripples iPhones an... by uxp on Thursday April 23, 2015 @08:43AM (#9426274)
> When combined with an earlier vulnerability, named “Wi-Figate”, which lets attackers force a device to automatically connect to a given WiFi network

I'm not fully up on exploitable iOS tricks, but it sounds like they're spoofing a BSSID to be one that the iOS device has already connected to (because iOS devices broadcast this when scanning for networks IIRC?), but has RADIUS authentication with a specially crafted server certificate that manages to crash the network stack.

[ Parent | on HN ]
Re:Wi-Fi hack creates 'no iOS zone' that cripples iPhones an... by HackinOut on Thursday April 23, 2015 @09:44AM (#9426584)
> (because iOS devices broadcast this when scanning for networks IIRC?)

Not anymore, Apple fixed that in recent iOS versions. Probe requests are not divulging SSIDs anymore. However WifiGate uses common SSIDs and network operators preloaded ones as honeypots.

[ Parent | on HN ]
Re:Wi-Fi hack creates 'no iOS zone' that cripples iPhones an... by 000086 on Thursday April 23, 2015 @10:33AM (#9426932)
Seems that wasn't fixed reliably. Still seeing lots of probe requests. Is there a https://support.apple.com/HT... talking about it?
[ Parent | on HN ]
Re:Wi-Fi hack creates 'no iOS zone' that cripples iPhones an... by HackinOut on Thursday April 23, 2015 @11:04AM (#9427194)
Not aware of anything from Apple about this issue. It was just an assumption, sorry. What I did is test up to date devices (i think i even tested an up to date iOS 6) and couldn't get any specific SSID. The probe requests were still there, but SSID parameter was always set to Broadcast.

However I did see a lots of probe requests WITH a SSID parameter set but those were not coming from my devices :). I assumed they were not up to date.

I am very interested to know if the probe requests you're seeing are also coming from unknown devices: if they aren't, could you provide us with the iOS version you're using/testing with?

[ Parent | on HN ]
Re:Wi-Fi hack creates 'no iOS zone' that cripples iPhones an... by 000086 on Thursday April 23, 2015 @11:38AM (#9427442)
The devices I know are several iPhones 6/6+ running iOS 8.3.
[ Parent | on HN ]