A flaw in iOS that bricked iPhones and iPads by resetting the internal clock to 1970 has been resurrected
Security researchers from PacketSled found that they were able to trick Apple devices into downloading a malicious update that changed the date, by setting up rogue Wi-Fi networks and exploiting flaw that connects Apple devices automatically to previously accessed hotspots.
Looking to see if the flaw was still active, PacketSled researchers Patrick Kelley and Matt Harrigan set up a fake open Wi-Fi network that, when connected, would automatically force devices to download time and date updates from their own NTP time server, setting the clocks back to January 1, 1970.
Apple devices are set up to automatically connect to Wi-Fi networks that they have previously encountered without needing a lengthy log in process, meaning that all the researchers needed to do was label their malicious network with a common name.
Tests of this network found that any device brought within range rebooted before beginning to slowly self-destruct.
Harrigan and Kelley told Krebs on Security that encryption certificates included with iOS apps are to blame, as they stop working correctly if the set date on the device is set to a year that predates the certificate’s issuance.
The ensuring panic caused by a full range of apps all struggling to operate correctly then overwhelms the CPU of the device, causing it’s a heat surge that results in a reboot and eventual slow death.
Apple has not commented on the flaw, but was quick to fix the initial bug, recommending that users upgrade to the latest version of iOS, 9.3.1, as soon as possible.
How much do you know about the iPhone? Take our quiz!
Denial from TSMC, after multiple reports it was in talks with Intel over a joint…
CEO Tim Cook talks to Trump official, as IDC notes China's smartphone market growth, and…
Another big name chip maker expects a hefty financial charge, after the US tightened rules…
More bad news for Google. Second time in less than a year that some part…
Federal office that tackled misinformation and disinformation from hostile nations is closed down, after criticism…
After Nvidia admits it will take $5.5 billion charge as Trump export limits of slower…