If You Don't Update To Apple Ios 13.3, You May Be Locked Out Of Your Iphone

By Author: Handset Recycle
Total Articles: 271
Comment this article

There are many reasons why you might want to upgrade your iPhone with the newly released iOS 13.3 update. Maybe you are concerned that your child has better parental control over screen time when using FaceTime or Message. Support for security keys such as YubiKey 5Ci may be important on your list. Although not as good as the coverage of these feature updates, in my opinion, what is more important is a minor issue with iOS 13.3, which fixes a bug that may force nearby people to prevent loops through unavoidable display blocking loops. You are locked out of your iPhone. It may not have been well reported because Apple has not categorized it as a common vulnerability and disclosure (CVE) security vulnerability that deserves attention. In its place, Apple's iOS 13.3 Security Content Update Advisory chose to simply thank the security researcher who found the error for help, but did not provide more details about this fix or the errors involved .

According to a report released by TechCrunch, the name of security researcher Kishan Bagaria revealed a bug in the AirDrop file transfer feature introduced in iOS 7. Bagaria's denial-of-service ...
... error, called AirDoS, allowed attackers to effectively spam all nearby iPhones via AirDrop sharing pop-up boxes.

This is the case, because iOS blocks the display on the iPhone until files sent through the AirDrop service are accepted or rejected, and if AirDoS attackers keep sending files repeatedly, it locks the user out of their device. Neither locking nor unlocking your iPhone will get you back on track, as AirDoS attacks continue to be frustrating.

This pop-up loop-locking attack is not even limited to a single target iPhone. Bagaria found that he could attack all iPhones in wireless range using easy-to-use open source tools.

For the attack to be successful, Bagaria noted that the target iPhone will need to configure AirDrop settings to receive files from "everyone" instead of "contacts only." Therefore, there are mitigations first, setting it to contacts only. However, this will not prevent someone in your contacts from locking you out of your iPhone.

Bagaria also said that assuming you have the option to get out of range, the escape will stop the attack. It is also effective to turn off AirDrop or disable Wi-Fi and Bluetooth. You would think that if you were locked out of your iPhone, there could be problems. However, if you can access the Device Control Center from the lock screen, you can do so. Disabling the connection using Siri should also work.

The best solution is to update to iOS 13.3, as it has fixed the bug by applying a rate limit, which automatically rejects AirDrop requests after a user has successively rejected three devices from the same device. If your iPhone is compatible with iOS 13.3, you can choose to use it. At least for users of the latest iOS devices, this update will be available without any glitches. Android users have found that some new flagship flagship smartphones are not immediately available with security fixes against current camera application security threats, or are different from Windows 10 users who were told by Windows 10 users not to install the update they just released.

"Given the complexity of iOS and the application ecosystem, such vulnerabilities will inevitably be discovered and fixed," said Jonathan Knudsen, senior security strategist at Synopsys. Even before an important operating system is indeed released, even if Apple insists it is not the case Apple also doesn't always find vulnerabilities such as AirDoS. I worry that it will take Apple a long time to resolve this particular "bug", as Bagaria first reported in August 2019. The fix is ​​finally available in the iOS 13.3 public beta 2 release in November. "If there is a silver lining to this vulnerability, it is that it requires physical proximity, which at least means that you cannot be attacked from anywhere on the Internet," Knudson said.

Handsetrecycle is the best place where you can buy, sell or repair your phone. Sell your phone on Handsetrecycle, and get most of the cash today.