267
AirDrop cracked by China, revealing phone number & email (9to5mac.com)
submitted 2 years ago by to c/privacy@lemmy.ml
38 comments fedilink hide all child comments
 

The Beijing institute developed the technique to crack an iPhone’s encrypted device log to identify the numbers and emails of senders who share AirDrop content, the city’s judicial bureau said in an online post. Police have identified multiple suspects via that method, the agency said, without disclosing if anyone was arrested. “It improves the efficiency and accuracy of case-solving and prevents the spread of inappropriate remarks as well as potential bad influences,” the bureau said.

Further read: https://sfj.beijing.gov.cn/sfj/sfdt/ywdt82/flfw93/436331732/index.html

you are viewing a single comment's thread
view the rest of the comments
[–] 22 points 2 years ago* (3 children)

It would be easy for apple to debunk this if it wasn't true. I'd stay away from it and use proven secure means.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 7 points 2 years ago (3 children)

    There’s no way to prove that something is secure. (It reduces to the halting problem.)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 5 points 2 years ago* (last edited 2 years ago) (1 child)

    How can Apple debunk it?

    If I told you I know of a way by which I can "hack" the lock of your house to enter it, how can you prove whether I'm lying or not? Specially if I'm not willing to show you how I do it, and I haven't given you any proof of having actually done it that you can try to dispute.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago (2 children)

    sending email and phone number with each airdrop doesn't sound right. Apple isn't a good company but they aren't dumb. Why would you send that info?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 5 points 2 years ago* (last edited 2 years ago)

    They aren't saying that the email/number is part of the message. What the are saying is that they are able to decrypt the logs in order to identify the senders .

    It could be they cross-reference matching some internal ids / tokens / physical addresses of the devices together with all the data the Chinese government already has (or can obtain) ...or it could be a bluff.. who knows... there's not enough information, and what we know is probably distorted.

  • permalink
  • fedilink
  • source
  • parent