Latest in Apple

Image credit:

Researchers find another terrifying iOS flaw

Share
Tweet
Share
Save

Sponsored Links

It can't have escaped your attention that security experts have declared open season on Apple products over the last few weeks. At San Francisco's RSA conference, an even more terrifying exploit has been revealed that has the power to send your iPhone or iPad into a perpetual restart loop. Mobile security firm Skycure has discovered that iOS 8 has an innate vulnerability to SSL certificates that, when combined with another WiFi exploit, gives malicious types the ability to create "no iOS zones" that can render your smartphones and tablets unusable. Before you read on, grab a roll of tinfoil and start making a new case for your iPhone.

Broadly speaking, any app that uses SSL certificates - which is almost all of them - can be fed a dummy certificate that causes it to crash. If, however, you can feed that same dodgy data into the operating system itself, then the hardware will be thrown into a perpetual loop of failed restarts. That can be easily achieved if you can set up a WiFi network to behave like one of the trusted setups that iOS automatically tries to connect to. So, as Gizmodo says, all it takes is for someone to build a nefarious network, name it "attwifi" and they've got a honeytrap.

Skycure has already reported its findings to Apple and won't give away any more details should it give hackers free reign to brick thousands of devices. Until the problem is fixed, users are advised not to trust free WiFi networks, keep iOS updated and, should they wander into a "no iOS zone," get out, quickly.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share
Save

Popular on Engadget

Engadget’s guide to Home Entertainment

Engadget’s guide to Home Entertainment

View
Girl Scouts can earn five STEM badges through Microsoft partnership

Girl Scouts can earn five STEM badges through Microsoft partnership

View
Phonocut will let you make your own vinyl records

Phonocut will let you make your own vinyl records

View
Google teams up with Yubico to build a USB-C Titan Security Key

Google teams up with Yubico to build a USB-C Titan Security Key

View
Razer's Blade 15 Advanced gets an optical mechanical keyboard

Razer's Blade 15 Advanced gets an optical mechanical keyboard

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr