Skip to content

Installation empfohlen: Apple schließt mit iOS 13.3 schwere AirDrop-Sicherheitslücke

Geschrieben von Florian Schimanke am

Seit gestern Abend stehen iOS und iPadOS inzwischen schon in Version 13.3 zur Verfügung. Und auch wenn man nach der Updateflut der diesjährigen iOS-Version schon ein wenig updatemüde werden konnte, sollte man die aktuellste Version dennoch installieren. Grund hierfür ist, dass Apple damit eine schwere Sicherheitslücke in AirDrop schließt, durch die ein Angreifer in der Nähe befindliche iPhones dermaßen mit gesendeten Dateien überfluten kann, dass diese sich komplett aufhängen, wie TechCrunch berichtet. Während Apple die Lücke mit iOS 13.3 geschlossen hat, sind die Details zu dem Angriff nun öffentlich, so dass Geräte mit älteren iOS-Versionen potenziell gefährdet sind.

Entdeckt wurde der Fehler durch Kishan Bagaria, der bemerkte, dass er andere iPhoens durch das Überschwemmen mit AirDrop-Dateien unter iOS 13.2.3 zum Absturz bringen konnte. Sobald ein Gerät eine Datei per AirDrop entgegennimmt, wird das Display des Geräts von einem Bildschirm blockiert, bis diese Datei vom Nutzer angenommen oder abgelehnt wurde. Bislang war die Anzahl der Dateien dabei offenbar nicht begrenzt. Schickte man also über einen längeren Zeitraum einen kontinuierlichen Strom von AirDrop-Dateien, konnte man das iPhone auf diese Weise komplett ausschalten.

Während man den Erhalt von AirDrop-Dateien in den Einstellungen auf bekannte Kontakte begrenzen kann, sind vor allem Geräte gefährdet, bei denen diese Einstellung so gesetzt ist, dass prinzipiell jeder einem Dateien senden kann. Diese Einstellung ist generell nicht zu empfehlen, wofür die nun entdeckte Lücke, der Apple eine spezielle Erwähnung im Security Dupport-Dokument zu iOS 13.3 gewidmet hat, ein gutes Beispiel ist.



YouTube Direktlink

Trackbacks

Keine Trackbacks

Kommentare

Ansicht der Kommentare: Linear | Verschachtelt

Anderer am :

Naja - Sicherheitslücke - eher eine DDOS Anfälligkeit. Und wenn ich das richtig sehe, muss der Angreifer ja direkt in der Nähe sein.

Da kann man auch den DDOS-Angriff durch verbalen oder physischen ( :-) ) Hinweis beenden.

professional resumes caledon am :

Almost all hiring decision-makers view the Duties-and-Responsibilities resume format, as boring and inferior. Instead, employers wish to read what sets you apart from other competitors, including actual examples of contributions you made for past jobs.

resumes kitchener am :

Resume terms like "professional", are a problem. They sound cliche and don't put you in a positive way. Similarly for text such as "hard worker". The correct statements target what you did at your previous occupations and how useful you would be to this future employer.

MYTHOSmovado am :

Erst mal danke, dass diese superduper schwerwiegende, ich m\366chte fast sagen lebensbedrohende Sicherheitsl\374cke geschlossen wurde, ABER\u2026

...wenn ich sowas lese [... Entdeckt wurde der Fehler durch Kishan Bagaria, der BEMERKTE, dass er andere iPhoens durch das \334berschwemmen mit AirDrop-Dateien unter iOS 13.2.3 zum Absturz bringen konnte...\u201c], dann frage ich mich schon, ob die heute beinahe unvermeidbaren Shitstorms immer die richtigen treffen?!

Ulf am :

Auch f\374r iPhone 5s und 6 sowie f\374r iPadAir 1 gibts hierzu ein Update auf 12.4.4

Anonymous am :

Ulf low und Ulf low min
Jetzt gibts auch mal wieder ein Update F\374r deine Ger\344te... \ud83d\ude02

Porn Now am :

Your expressed viewpoints are in agreement with my opinions almost unanimously. This is valuable reading material for the readers.

professional resume writing services toronto am :

The lion's share of organizations rate the duties and responsibilities resume technique, as outdated and inferior. Instead, organizations wish to discover what distinguishes you from other resumes, and actual examples of contributions you have made for former employers.

resume st catharines am :

Resume terms like "professional", hurt your resume. They look cliche and don't position you in a positive way. Ditto for a phrase like "dedicated". The correct text focus on things you did for your previous occupations plus how useful you are going to be to this future company.

resume writing services montreal am :

A surprising fact is that 4 out of 5 available jobs (including almost all of the most wanted occupations), are only accessible inside the "hidden" career market. Thus the secret to improving your success, is to learn about the leading reasons the best-paying occupations are "posted" inside this hidden job market, instead of the laughable public or internet job market.

resume writing canada am :

You need to verify that a professional cover letter hooks your future hiring decision-maker, verifies your suitability for the job, plus convinces them to review the resume so they will want to select you for the interview. Due to the immense flood of resumes submitted to every job offer nowadays, a professional cover letter frequently becomes the leading deciding factor as to whether you are awarded an interview - or get thrown into the garbage!

resume writer sarnia am :

When you are looking for hired, first impressions are everything! And the most frequent first impression organizations see of you - is an expert-written cover letter.

resume writing services thunder bay am :

Employing the duties/responsibilities resume approach, will ensure that your resume is thrown into the garbage! Employers no longer care what you were assigned to do at previous employment. Instead, they have to see what unique added value you have made.

Matthias am :

Hallo!

Bei mir sind mit dem neuen iOS pl\366tzlich alle selbsterstellten Fotoordner verschwunden. Ich drehe durch, alles weg.
Hat das noch jemand?!?

Karli am :

Bei mir ist es ok

resume manitoba am :

Insisting on the Duties-and-Responsibilities resume approach, will guarantee that your resume is dropped on top of the garbage pile! Employers don't care anymore about what you did at past companies. In today's hiring market, they want to see the Points Of Difference you have made.

executive resume writing chicago am :

You will want to ensure that the cover letter peaks the interest of your prospective hiring decision-maker, confirms their interest in you, plus encourages them to go through the resume so they decide to choose you for an interview. Given the overwhelming number of resumes sent to every employment offer currently, your cover letter often becomes the key distinguishing factor between if you score an interview - or get discarded into the garbage!

resume writing service aurora am :

You must confirm that your cover letter peaks the interest of your future company, verifies your suitability for the job, and also encourages them to pay attention to the resume so they will contact you for an interview. With the overwhelming amount of resumes received for every employment offer in today's market, an expertly-written cover letter often becomes the foremost selection factor as to whether you win an interview - or get dumped into the garbage!

professional resume writers vancouver am :

Don't lose the job being hired by sending them a general resume! All a general resume does, is tell them how you fade into the crowd - not how you outmatch your rivals for the same job.

executive resume writing whitby am :

Today's organizations won't go through each of the 500 or more resumes sent to them - for just one employment opening! In reality, they'll immediately throw away ninety percent of them, if any resume fails to seize the reader's attention.

Richard am :

Alles gut und sogar besser

executive resume canada am :

A quarter-century ago, people were lectured that each resume has to include a list of point-form duties and responsibilities required by every occupation we've ever occupied - and the more the better. Not anymore! These days, employers are going to only take 15 seconds (maybe even less) when scanning through your resume. Don't choose the duties/responsibilities resume technique!

MYTHOSmovado am :

Immer noch weg? Oder mittlerweile alles gut?

Robertoxl am :

Ich hab seit IOS 13 Probleme mit Bluetooth , Verbindungsprobleme gab es davor nicht

undress vip am :

Really enjoyed this blog post.Really thank you!

professional resume writer calgary am :

Resume snippets like for instance "accomplished", are damaging. They appear cliche and fail to put you in a positive way. This is also true for text such as "self-motivated". The best terms point out things you achieved at your previous occupations and in addition how valuable you could be to this potential hiring decision-maker.

professional resume writing services thunder bay am :

Resume text such as "accomplished", have no value. They look cliche and don't position you in a positive light. This is also true for a statement like "reliable". The best statements point out things you did while at your previous organizations and how beneficial you can be to this potential employer.

resume writing service vaughan am :

Long ago, the standard resume commenced by presenting an Objective Statement - but not any more! Current career professionals all confirm, such resume sections contribute nothing when judging your occupation abilities. Which means, make sure to not write an Objective Statement!

professional resume writing services am :

Today's organizations will not look at every one of the 500 or more resumes dumped on them - for a single job offering! In actual fact, they will immediately discard 90 of them, if any resume does not manage to capture their interest.

Kommentar schreiben

Die angegebene E-Mail-Adresse wird nicht dargestellt, sondern nur für eventuelle Benachrichtigungen verwendet.
Umschließende Sterne heben ein Wort hervor (*wort*), per _wort_ kann ein Wort unterstrichen werden.
Formular-Optionen