Vratislav Holub Iyo AirTag smart locator haisati yatombove pamusika kwemavhiki maviri uye yakatobiwa. Izvi zvakachengetwa neGerman chengetedzo nyanzvi Thomas Roth, uyo anoenda nezita remadunhurirwa rekuti Stack Smashing, akakwanisa kupinda akananga mukati meiyo microcontroller ndokuzogadzirisa firmware yayo. Iyo nyanzvi yakazivisa nezve zvese kuburikidza nekutumira pa Twitter. Kwaive kupindira mune microcontroller kwakamubvumira kuti achinje kero yeURL iyo iyo AirTag inobva yareva mukurasikirwa.
Yesss!!! Mushure memaawa ekuyedza (uye kuvaka zvidhinha 2 AirTags) ndakakwanisa kupaza mukati meiyo microcontroller yeAirTag! 🥳🥳🥳
/cc @colinoflynn @LennertWo pic.twitter.com/zGALc2S2Ph
- stacksmashing (@ghidraninja) Dai 8, 2021
Mukuita, inoshanda kuitira kuti kana akadaro locator ari mukurasikirwa, mumwe munhu anoiwana uye anoisa kune yavo iPhone (yekutaurirana kuburikidza neNFC), foni inovapa kuti vavhure webhusaiti. Aya ndiwo mashandiro anoita chigadzirwa kazhinji, kana zvichizoreva ruzivo rwakapinda zvakananga nemuridzi wepakutanga. Zvakadaro, shanduko iyi inobvumira hackers kusarudza chero URL. Mushandisi anozowana iyo AirTag anogona kuwana chero webhusaiti. Roth akagoverawo vhidhiyo pfupi pa Twitter (ona pazasi) inoratidza mutsauko pakati peyakajairwa uye yakabiwa AirTag. Panguva imwecheteyo, hatifanire kukanganwa kutaura kuti kupaza mukati meiyo microcontroller ndicho chipingamupinyi chikuru pakubata dhizaini yemudziyo, izvo zvave kuitwa zvakadaro.
Photogallery
Chokwadi, kusakwana uku kunoshandiswa nyore nyore uye kunogona kuva nengozi mumaoko asina kururama. Hackers vaigona kushandisa maitiro aya, semuenzaniso, kune phishing, kwavanokwevera data rakavanzika kubva kune vakabatwa. Panguva imwecheteyo, inovhura musuwo kune vamwe vateveri vanogona ikozvino kutanga kugadzirisa iyo AirTag. Kuti Apple ichaita sei neizvi hazvizivikanwe parizvino. Iyo yakaipisisa mamiriro ezvinhu ndeyekuti iyo locator yakagadziridzwa nenzira iyi icharamba ichishanda zvizere uye haigone kuvharika kure muTwana My network. Yechipiri sarudzo inonzwika zviri nani. Sekureva kwake, hofori yeCupertino inogona kubata chokwadi ichi kuburikidza nekuvandudza software.
Yakavakwa inokurumidza demo: AirTag ine yakashandurwa NFC URL 😎
(Tambo dzinoshandiswa chete kune simba) pic.twitter.com/DrMIK49Tu0
- stacksmashing (@ghidraninja) Dai 8, 2021
Zvinogona kudaro kufarira iwe
Kungonzwa chete, furo rakaputirwa zvisina basa. Izvi hazvina kukanganisa kukuru pachinangwa chekutanga cheAirTag. Ini handifunge kuti isu tinofanirwa kunetseka nezve kumwe kubirwa kwehuwandu hwemakiyi fobs edu zvachose.
Uye chii chaakawana? Handioni kuti zvinganakire chero munhu.
Ehe, ndiko kuchengetedzeka kweApple kwakakurumbira :-(
Kwandiri, AirTag chishandiso chisingabatsiri zvachose! Kune mamwe akawanda pamusika, ane mabasa akafanana, uye sebhonasi chetatu chemutengo :-)