Researcher finds sure community names can disable Wi-Fi on iPhones


A safety researcher has discovered that sure Wi-Fi networks with the p.c image ({2d266c2b7f7b21b9d5247541775384085ff4c78fbe34d1f6195ea0b207eacd24}) of their names can disable Wi-Fi on iPhones and different iOS gadgets. Carl Schou tweeted that if an iPhone comes inside vary of a community named {2d266c2b7f7b21b9d5247541775384085ff4c78fbe34d1f6195ea0b207eacd24}secretclubpercentpower, the machine received’t be capable of use Wi-Fi or any associated options, and even after resetting community settings, the bug might proceed to render Wi-Fi on the machine unusable.

Just a few weeks in the past, Schou and his not-for-profit group, Secret Membership, which reverse-engineers software program for analysis functions, discovered that if an iPhone linked to a community with the SSiD title {2d266c2b7f7b21b9d5247541775384085ff4c78fbe34d1f6195ea0b207eacd24}ppercentspercentspercentspercentspercentn it will trigger a bug in iOS’ networking stack that might disable its Wi-Fi, and system networking options like AirDrop would change into unusable.

9to5 Mac provided a doable rationalization for the bizarre bug:

the ‘{2d266c2b7f7b21b9d5247541775384085ff4c78fbe34d1f6195ea0b207eacd24}[character]’ syntax is usually utilized in programming languages to format variables into an output string. In C, the ‘{2d266c2b7f7b21b9d5247541775384085ff4c78fbe34d1f6195ea0b207eacd24}n’ specifier means to save lots of the variety of characters written into the format string out to a variable handed to the string format perform. The Wi-Fi subsystem in all probability passes the Wi-Fi community title (SSID) unsanitized to some inner library that’s performing string formatting, which in flip causes an arbitrary reminiscence write and buffer overflow. It will result in reminiscence corruption and the iOS watchdog will kill the method, therefore successfully disabling Wi-Fi for the consumer.

We’ve reached out to Apple to see if it’s engaged on a repair, and can replace if we hear again from them. However as 9to5 Mac notes, the bug can doubtless be prevented by not connecting to Wi-Fi networks with p.c symbols of their names.

Source link

Next Post

Assessment: Warmly satirical Werewolves Inside is comedian horror with a coronary heart

Veep‘s Sam Richardson stars as park ranger Finn Wheeler within the comedy/horror/whodunnit Werewolves Inside. After so a few years of zombies dominating the horror style, it is good to see the basic werewolf making a comeback. Final 12 months’s sleeper indie movie The Wolf of Snow Hole was a wry, intelligent take that […]

Subscribe US Now