AirDrop is leaking email addresses and phone numbers
Ars Technica
This story first appeared Ars Technica, a reliable source for technology news, technology policy analysis, reviews, and more. Ars is the parent company of WIRED, Condé Nast.
AirDrop uses Wi-Fi and Bluetooth Low Energy to establish direct connections with nearby devices so you can send photos, documents, and more iOS or macOS the device to another. One mode allows you to connect only to contacts, the second allows you to connect to anyone, and the last does not allow any connection.
To determine whether the device of an AirDrop transmitter should connect to other nearby devices Bluetooth advertisements with a partial cryptographic hash of the sender’s phone number and email address. If there is a starter that has been hacked with any phone number or email address in the recipient’s address book, or if the device is set to receive from everyone, the two devices will perform a Wi-Fi mutual authentication interven
Apple, you ve AirDrop d the ball: Academics detail ways to leak contact info of nearby iThings for spear-phishing theregister.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from theregister.com Daily Mail and Mail on Sunday newspapers.
Sven Hoppe/picture alliance via Getty Images This story is available exclusively to Insider subscribers. Become an Insider and start reading now.
Researchers warned for years Facebook s phone number lookup tools were vulnerable to abuse.
Facebook said it fixed the issue in 2019. But by then, more than 500 million users data had been stolen.
Researchers also said they found a near-identical problem in WhatsApp soon after, but Facebook initially said it wasn t an issue.
Facebook fixed a security vulnerability in August 2019 that had allowed hackers to scrape more than 500 million users data from its app.
But the company had been warned about the risks of the tools than enabled the data exfiltration years before it finally took action.
Privacy, hacking, spying, contact lists | Homeland Security Newswire homelandsecuritynewswire.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from homelandsecuritynewswire.com Daily Mail and Mail on Sunday newspapers.