Flipper Zero can be used to crash iPhones running iOS 17

Post by stuckkeys » Tue, Oct 17, 2023, 9:43 PM UTC

chatmasta wrote: post #4

AshamedCaptain wrote: post #2

I mentioned this in the past -- that apparently Apple puts more effort in authenticating replacement parts for the iPhone than it does for authenticating wireless devices which pretend to be an Apple device.

That's fine. I'm more concerned that the (replacement) hardware on my own device is not malicious, than I am with the hardware on other devices that are already outside my control. My trust model doesn't include them to begin with. And to the extent that my OS trusts those devices, at least any bugfixes can be pushed via software update. As the article notes, there is a simple way to stop this attack, which is to dis…

Post by [deleted] » Tue, Oct 17, 2023, 9:58 PM UTC

AshamedCaptain wrote: post #16

chatmasta wrote: post #15

Earlier quoted context omitted.

I'm assuming I can opt-into the threat, i.e. it's possible for me to disable Bluetooth to remove my exposure to this class of attacks. When I turn on my WiFi I know that I'm subjecting myself to de-auth attacks, for example. I can't opt out of a hardware attack once a malicious repair shop has replaced a critical module in my phone with their own. Like I said, I'm more concerned with the latter. It doesn't mean I'm n…

> can't opt out of a hardware attack once a malicious repair shop So apparently you forever disable Bluetooth out of concern but at the same time think it is unavoidable to leave your iPhone unattended at random repair shops? At least the maid stuff (even if astronaut-level engineering) is remotely plausible.

Post by [deleted] » Wed, Oct 18, 2023, 4:02 AM UTC

AshamedCaptain wrote: post #7

chatmasta wrote: post #4

Earlier quoted context omitted.

That's fine. I'm more concerned that the (replacement) hardware on my own device is not malicious, than I am with the hardware on other devices that are already outside my control. My trust model doesn't include them to begin with. And to the extent that my OS trusts those devices, at least any bugfixes can be pushed via software update. As the article notes, there is a simple way to stop this attack, which is to dis…

> That's fine. I'm more concerned that the (replacement) hardware on my own device is not malicious, than I am with the hardware on other devices that are already outside my control. You are more concerned with someone opening your iPhone and putting a replacement malicious part than with someone pwning your iPhone with a $5 wireless device while in his car just driving by ? Your threat model is upside down.

Post by climb_stealth » Wed, Oct 18, 2023, 4:31 AM UTC

ramraj07 wrote: post #27

vuln wrote: post #25

Earlier quoted context omitted.

Do you have the same outlook on Hak5 “tools”? I feel like you’re giving it an unfair shake. They didn’t just _build a toy_ those of us who originally supported through kickstarter saw a huge chunk of the work that went into building this device, the flipper team (10ish people?) has and continues to overcome so many crazy things (Covid, chips, supply chains, shipping) just to have the flipper device available world wi…

Can you mention some legal things you solved with it? Just curious!

Post by 15457345234 » Wed, Oct 18, 2023, 9:38 AM UTC

climb_stealth wrote: post #28

ramraj07 wrote: post #27

Earlier quoted context omitted.

Can you mention some legal things you solved with it? Just curious!

I'm not GP but I have used it to debug my car remote. It was unlocking but not locking. Used the Flipper to confirm that the remote wasn't sending anything on lock button presses. Solved it with opening up the key and some cleaning of the PCB. Was very helpful there as it was otherwise quite tricky to work out where the problem was. Otherwise haven't found any use for it. I wanted to use it to clone my garage remote…