11–20 of 36 posts
“Moreover, while sending crafted packets and attempting all sorts of things, I’ve discovered several vulnerabilities in the Apple custom made parsers. I will not discuss them here (exception made for the session spoofing) but at the same time I’m not interested in reporting them to Apple…” Erm, hope they’re not super serious I guess?
From a comment in the article: > This gives me chills, the shared clipboard also uses this protocol, right? This means that everything we copy goes through the network via Bluetooth without encryption and can be captured by any Bluetooth sniffer? The shared clipboard uses this protocol?... on what basis is this claim plausible?
The article shows the author holds some grudges against Apple. Those grudges probably influence their judgement.
“Moreover, while sending crafted packets and attempting all sorts of things, I’ve discovered several vulnerabilities in the Apple custom made parsers. I will not discuss them here (exception made for the session spoofing) but at the same time I’m not interested in reporting them to Apple…” Erm, hope they’re not super serious I guess?
[flagged]
"custom (and as typical of Apple, undocumented) TCP protocol" Pretty much all custom protocols are undocumented. Not sure why he feels the need to shit on Apple. And any custom protocol parser will be riddled with errors, because they always expect values to be in range.
I hope you're not working on any products I rely on.
From a comment in the article: > This gives me chills, the shared clipboard also uses this protocol, right? This means that everything we copy goes through the network via Bluetooth without encryption and can be captured by any Bluetooth sniffer? The shared clipboard uses this protocol?... on what basis is this claim plausible?
> The individual messages are encrypted much like messages in iMessage are. After the devices are paired, each device generates a symmetric 256-bit AES key that gets stored in the device’s keychain. This key can encrypt and authenticate the BLE advertisements that communicate the device’s current activity to other iCloud-paired devices using AES256 in GCM mode, with replay protection measures.
[1]: https://support.apple.com/en-gb/guide/security/secf78dbe639/...
From a comment in the article: > This gives me chills, the shared clipboard also uses this protocol, right? This means that everything we copy goes through the network via Bluetooth without encryption and can be captured by any Bluetooth sniffer? The shared clipboard uses this protocol?... on what basis is this claim plausible?
I thought it was clear it ran through iCloud: https://support.apple.com/en-au/HT209460 It only works between devices signed in with the same Apple ID
I understand it's in fashion to kick Apple (and not without reason) but mDNS and DNS-SD is their protocol. They made it and they market it combined with link-local addressing, etc as Bonjour. To me writing like this is naff and makes the author seem needlessly salty.
From a comment in the article: > This gives me chills, the shared clipboard also uses this protocol, right? This means that everything we copy goes through the network via Bluetooth without encryption and can be captured by any Bluetooth sniffer? The shared clipboard uses this protocol?... on what basis is this claim plausible?
To be clear, it's a comment on the article, in the public comments section appended to the article. The comment was not made by the article author.
From a comment in the article: > This gives me chills, the shared clipboard also uses this protocol, right? This means that everything we copy goes through the network via Bluetooth without encryption and can be captured by any Bluetooth sniffer? The shared clipboard uses this protocol?... on what basis is this claim plausible?
> on what basis is this claim plausible? The article shows the author holds some grudges against Apple. Those grudges probably influence their judgement.
“Moreover, while sending crafted packets and attempting all sorts of things, I’ve discovered several vulnerabilities in the Apple custom made parsers. I will not discuss them here (exception made for the session spoofing) but at the same time I’m not interested in reporting them to Apple…” Erm, hope they’re not super serious I guess?
[flagged]