New Threat Can Auto-Brick Apple Devices

  • 12 April 2016
  • 3 replies
  • 2 views

Userlevel 7
Badge +54
12th April 2016
 
If you use an Apple iPhone, iPad or other iDevice, now would be an excellent time to ensure that the machine is running the latest version of Apple’s mobile operating system — version 9.3.1. Failing to do so could expose your devices to automated threats capable of rendering them unresponsive and perhaps forever useless.
 
http://krebsonsecurity.com/wp-content/uploads/2016/04/Jan1.pngZach Straley demonstrating the fatal Jan. 1, 1970 bug. Don’t try this at home!
 
On Feb. 11, 2016, researcher Zach Straley posted a Youtube video exposing his startling and bizarrely simple discovery: Manually setting the date of your iPhone or iPad all the back to January. 1, 1970 will permanently brick the device (don’t try this at home, or against frenemies!).
 
Now that Apple has patched the flaw that Straley exploited with his fingers, researchers say they’ve proven how easy it would be to automate the attack over a network, so that potential victims would need only to wander within range of a hostile wireless network to have their pricey Apple devices turned into useless bricks.
 
Full Article

3 replies

Userlevel 7
Now thatis not good news for Apple users or for Apple for that matter given the recent spate of issues that they have sufferred. 
Userlevel 7
Badge +62
Wow more good news! Not:@!
Userlevel 7
Badge +54

Party like it's 1970

  14 Apr 2016 at 01:45, Richard Chirgwin Back in February, Apple nearly fixed the “1970” date bug that bricked iDevices running 64-bit iOS 8 or higher when their clocks were set to January 1, 1970.
 
Apple blushed red and issued a patch, but according to PacketSled's Matt Harrigan and Critical Assets' Patrick Kelley, “you missed a spot”: the bug can still be triggered remotely.
 
The problem is that the network time protocol (NTP) hasn't caught up with sensible paranoia, and malicious parties can spoof time server domains.
 
Full Article

Reply