Brick unpatched iPhones through WiFi

[niofalpha]

http://www.redmondpie.com/wi-fi-networks-can-brick-pre-ios-9.3.1-devices-with-new-version-of-1970-bug/

 

Quote

To use Starbuck’s free Wi-Fi service, you’ll have to connect to a network called “attwifi”. But once you’ve done that, you won’t ever have to manually connect to a network called “attwifi” ever again. The next time you visit a Starbucks, just pull out your iPad and the device automatically connects.

This lack of any real authentication allows attackers to create a network with the name of one that is widely available in public hotspots, such as the “attwifi” example above. If broadcasted in a public arena, the likelihood is that some devices would have previously seen this network and would connect to it without fuss. The attackers can then “inspect, modify, or redirect any network traffic” for any connected devices.

This doesn't effect updated devices that have the time brick fix. This is dangerous, I know I'm not updated (past 8), so I'm gonna go through and forget public networks. I see no reason why people would do this rather than being a dick.

[unidentical]

For anyone too lazy to look. The exploit is basically just to run an open wifi network. Device connects, NTP traffic is redirected to a controlled service that tells the device it is locally 1970. This causes encryption certs on the device to stop working correctly, bricking the phone.

[dditty]

In the comments in the article, someone suggests turning off the setting for Automatic Date and Time. Does that really fix this issue? 

[dalekphalm]

@niofalpha No offense, but your news post is confusing and really doesn't do a good job of summarizing the issue. The title doesn't match your summary (No mention of "bricking" at all. I'd recommend adding some more detail so it's a better summary.

 

On Topic: Yeah that sucks. More reason people should keep their devices up to date, to get the latest security patches.

[NateGSR117]

That pretty scary, I would hate for that to happen especially on a 500+ dollar device. 

[Bensemus]

haha thats some top level trolling