"No iOS Zone" vulnerability in iOS 8 forces iPhones and iPads to crash

A report states that a vulnerability in iOS 8 can crash users' iPhones and iPads when the devices are connected to a malicious hotspot. The "No iOS Zone" attack can make iOS devices completely unusable by forcing numerous reboots. The only thing that iOS users can do when they find themselves in this situation is to run away from the hotspot's range.

The malicious hotspot uses the Wi-Fi connection to manipulate SSL certificates sent to iOS handsets, forcing a denial-of-service which causes apps and iOS to crash. Speaking at the RSA Conference in San Francisco, Skycure's Adi Sharabani and Yair Amit said that they have yet to see the "No iOS Zone" in the wild, but predict that it could happen in the future. Skycure is a mobile security company, and they have produced videos showing the DoS bug in action.

Both Sharabani and Amit said that they are talking to Apple about fixing the vulnerability. The pair praised he company for its quick response in working on a fix. 


source: Skycure via TheRegister

FEATURED VIDEO

12 Comments

1. gaming64 unregistered

Thank god I still have iOS 7.1.2 on,

2. AlikMalix unregistered

I'll be sure to let everyone know when it happens to my iDevices. In the meantime any real news?

3. PapaSmurf

Posts: 10457; Member since: May 14, 2012

So basically the chances of this happening right now is 0%. Click bait article #924749104746 on PA.

5. JaneChenLong

Posts: 374; Member since: Mar 18, 2015

No. It was #68512

9. Mxyzptlk unregistered

They're running out of article ideas.

10. Finalflash

Posts: 4063; Member since: Jul 23, 2013

Yea, pointless garbage, throwing mud against the wall.

4. Saioofi

Posts: 344; Member since: May 23, 2014

iOS 8.3 fixed 39 bugs so is this one of them?

6. dzennon

Posts: 6; Member since: Jan 18, 2015

Isn't this dangerous? If someone was in a 'zone' where some moron had set this up for a laugh but wanted to make an emergency call?

7. Scott93274

Posts: 6040; Member since: Aug 06, 2013

Excellent point. Having something like this setup could have some legal ramifications. That being said, it's always a good practice not connecting to an unknown network.

11. Crispin_Gatieza

Posts: 3157; Member since: Jan 23, 2014

Voice and text are not bound by data. I have a simpler solution: turn off the Wi-Fi when you're not home.

12. dzennon

Posts: 6; Member since: Jan 18, 2015

This is causing the phone to reboot constantly whilst in the zone These people are muppets

8. Scott93274

Posts: 6040; Member since: Aug 06, 2013

I couldn't help but laugh when I read this article, not because of the stupid exploit of iOS, but because the nature of the exploit reminded me of this issue with Chromecast. http://mashable.com/2014/07/21/chromecast-rickroll-hack/ I've been looking for a project to justify buying a raspberry pi for, I think screwing with my brother's chromecast would be an excellent excuse especially because his TV will automatically turn on if it isn't already on as well as change the source to the proper input.

Latest Stories

This copy is for your personal, non-commercial use only. You can order presentation-ready copies for distribution to your colleagues, clients or customers at https://www.parsintl.com/phonearena or use the Reprints & Permissions tool that appears at the bottom of each web page. Visit https://www.parsintl.com/ for samples and additional information.