Apple's AirDrop is cerita lucah isteri curang terlampauundeniably convenient for sending photos, videos, links, and more between iPhones, iPads, and Macs. But there's one thing you probably didn't know AirDrop's sharing: part of your phone number, which in the wrong hands, could be used to recover your full digits.
Security researchers at Hexway (via Ars Technica) have discovered a "flaw" in AirDrop that can used to obtain unsuspecting iPhone users' phone numbers using software installed on a laptop and a Bluetooth and WiFi adapter to sniff them out.
Because of the way AirDrop works — it uses Bluetooth LE (Low Energy) to create a peer-to-peer WiFi network between devices for sharing — it broadcasts partial hashesof an iPhone user's phone number in order establish the device as a sending/receiving contact when sending a file.
SEE ALSO: 9 hidden iOS 13 features you need to know aboutMore serious is if you use Apple's WiFi password sharing feature, you're exposing hashed parts of your phone number, but also your Apple ID and email address.
Now, although AirDrop's only beaming partial hashes – a.k.a. some numbers and letters that have been scrambled (Hexway says only the "first 3 bytes of the hashes" are broadcast) — the researchers concluded that there's "enough to identify your phone number" if somebody really wanted to do it.
The researchers shared one scenario in which a hacker could secretly sniff out iPhone users' phone numbers:
- Create a database of SHA256(phone_number):phone_number for their region; e.g., for Los Angeles it’s: (+1-213-xxx-xxxx, +1-310-xxx-xxxx, +1-323-xxx-xxxx, +1-424-xxx-xxxx, +1-562-xxx-xxxx, +1-626-xxx-xxxx, +1-747-xxx-xxxx, +1-818-xxx-xxxx, +1-818-xxx-xxxx)
- Run a special script on the laptop and take a subway train
- When somebody attempts to use AirDrop, get the sender’s phone number hash
- Recover the phone number from the hash
- Contact the user in iMessage; the name can be obtained using TrueCaller or from the device name, as it often contains a name, e.g., John’s iPhone).
Errata Security CEO Rob Graham confirmed to Ars Technica Hexway's software, shared to GitHub, does indeed work. "It’s not too bad, but it’s still kind of creepy that people can get the status information, and getting the phone number is bad."
Scary as this "flaw" appears, it's very unlikely anyone will go through these lengths to recover your phone number. Hexway's researchers even admit that the partially-shared — and we can't stress this enough — information is a necessity to how AirDrop works.
"This behavior is more a feature of the work of the ecosystem than vulnerability," reports Hexway. The researchers further explained that they've "detected this behavior in the iOS versions starting from 10.3.1 (including iOS 13 beta)."
Scary as this "flaw" appears, it's very unlikely anyone will go through these lengths to recover your phone number.
Older iPhones, pre-iPhone 6S, however, appear to be safe based on their findings.
"Old devices (like all before iPhone 6s) are not sending Bluetooth LE messages continuously even if they have updated OS version," reports Hexway. "They send only limited number of messages (for example when you navigate to the Wi-Fi settings menu) probably Apple does that to save battery power on an old devices."
So, how can you stop potential snoopers from sniffing your Bluetooth information out? Turn off Bluetooth. Yes, that means you won't be able to connect AirPods or an Apple Watch to your iPhone, but if that's what will help you sleep at night, then it's the only option.
We've reached out to Apple for comment on Hexway's security findings and will update this story if we receive a response.
Topics Apple Cybersecurity iPhone Privacy
Legend Behind the Camera
Alibaba yields “good results” from three
Wordle today: The answer and hints for May 24, 2025
Fans of Black Myth: Wukong surprise Luckin Coffee amid rush buying · TechNode
Reaching Out, Reuniting
20% of NIO’s battery swap stations approach breakeven point · TechNode
Advertising growth fuels Bilibili's Q2 earnings, loss narrows to $83.7 million · TechNode
Tesla’s Full Self
‘Ponyo’ Kicks Off Studio Ghibli Fest
What's new to streaming this week? (May 23, 2025)
Heritage Source Open House This Saturday
Apple smart glasses could come as soon as 2026
iRobot Roomba (Y0110): $99.99 at Amazon
SpaceX's Starlink satellite launch in pictures
Persimmon Talk at Gardena Valley JCI on Sunday
Wordle today: The answer and hints for May 24, 2025
D6 Pro Plus massage gun deal: $60 off at Amazon
Best TV deal: Get the 85
‘Art of Shinkansen’ Exhibition This Weekend
20% of NIO’s battery swap stations approach breakeven point · TechNode
The Ioniq 5 is Hyundai’s first electric car that can charge other EVsWhat to do when you get stuck in a masturbation rutHow to see a map of all the photos you take on your iPhoneApple's WWDC 2021 keynote event will be livestreamed June 7'Plan B' is a winning bestie road trip adventure: Movie review'Friends: The Reunion': The One With The Irish Uncle Matt LeBlanc Meme'Biomutant' is the most bizarre video game I have ever played: ReviewEverything Coming to Amazon in Prime in JuneSpotify and Apple Music will offer lossless audio. Here's what you need to know.Here's how to apply for Twitter account verification You probably think your dog is cool and yet, can it even shop for groceries? Trump's new poll is A) dumb B) pointless C) laughable D) all of the above Pornhub helped a best man create a very special wedding video KFC is now teaching its employees to fry chicken with a super creepy VR game All the best memes about Trump's choice to look directly at the eclipse An underage woman paid by R. Kelly to remain silent about sexual relationship speaks out Dozens of pro Elon Musk, others sign open letter to UN asking to ban killer robots A German news magazine just gave us the most shocking Donald Trump cover yet The odds on Trump resigning just shifted, and not in his favor
0.1991s , 10024.03125 kb
Copyright © 2025 Powered by 【cerita lucah isteri curang terlampau】Researchers discover AirDrop is leaking part of your phone number,Feature Flash
