• Home
  • iOS
  • News
  • Researchers Use SSL Security Bug to Crash iOS Devices via Fake Wi-Fi Hotspot

Researchers Use SSL Security Bug to Crash iOS Devices via Fake Wi-Fi Hotspot

Researchers Use SSL Security Bug to Crash iOS Devices via Fake Wi-Fi Hotspot

Researchers have used a bug in the iOS secure sockets layer (SSL) library to cause both iOS apps, as well as the devices themselves, to crash when connected to a malicious Wi-Fi hotspot.

Researchers Use SSL Security Bug to Crash iOS Devices via Fake Wi-Fi Hotspot

AppleInsider:

The attack, discovered by Skycure researchers Yair Amit and Adi Sharabani, takes advantage of an issue with iOS’s parsing of SSL certificates. By sending a specially-crafted certificate to a device via a Wi-Fi hotspot, the duo was able to repeatedly crash both individual apps and iOS itself.

A modified version of the attack was able to put an iOS device into a perpetual reboot cycle for as long as the device was in range of the malicious hotspot.

Reserchers were able to force the devices to connect to the malicious hotspot, using an older exploit known as WifiGate:

iOS devices are pre-programmed by the carrier to automatically connect to certain networks. For example, US customers on the AT&T network will auto-connect to any network called ‘attwifi’. There’s no way to prevent your phone from doing this, short of turning Wi-Fi off altogether. – Gizmodo, via 9to5Mac

The researchers have declined to reveal the exact details of their attack method, and contacted Apple about the issue, and are reported to be working with the company on a fix.

Researchers suggest the following until a fix is developed:

  1. Users should disconnect from the bad Wi-Fi network or change their location in case they experience continuous crashing or rebooting.
  2. The latest iOS 8.3 update might have fixed a few of the mentioned threats–users are highly advised to upgrade to the latest version.
  3. In general, users should avoid connecting to any suspicious “FREE” Wi-Fi network.

  1. 133814 163805Beging with the entire wales well before just about any planking. Our own wales can easily compilation of calculated forums those thickness analysts could be the similar to some of the shell planking along with a lot more significant damage so that they project following dark planking. planking 290758

  2. 478878 532277It can be difficult to write about this subject. I believe you did an exceptional job though! Thanks for this! 167025

  3. 663171 601660Someone essentially lend a hand to make critically articles Id state. That could be the first time I frequented your web site page and so far? I amazed with the research you created to create this actual post extraordinary. Fantastic activity! 463740

  4. 480382 721790I ought to test with you here. Which is not 1 thing I normally do! I enjoy studying a submit that will make people think. Also, thanks for permitting me to comment! 828340

  5. 333851 523136Very fascinating details!Perfect just what I was looking for! 991564

  6. 273932 613793Thanks for the sensible critique. Me and my neighbor were just preparing to do some research about this. We got a grab a book from our location library but I believe I learned more from this post. Im really glad to see such great info being shared freely out there. 984902

  7. 206306 389477I want to admit that that is one fantastic insight. It surely gives a company the opportunity to have in around the ground floor and genuinely take part in making a thing special and tailored to their needs. 603865

Leave a Reply

Your email address will not be published. Required fields are marked *