Best to disable Airdrop, at least for now

[Drew]

Found this on MacInTouch

https://macintouch.com/post/13561/airdro...unpatched/

[cbelt3]

Security researchers determined that the hashed phone number and email address in the airdrop handshake process can be extracted.

OP link has been hugged to death... Here is a similar story.

https://mashable.com/article/apple-airdr...rity-flaw/

[jonny]

To be honest, I only use Airdrop at home and I'm not that concerned about someone stealing my email/phone number.

[jdc]

jonny wrote:
To be honest, I only use Airdrop at home and I'm not that concerned about someone stealing my email/phone number.

this, x1000.

[Article Accelerator]

Drew wrote: Best to disable Airdrop, at least for now

A bit harsh, I think. Just limit AirDrop to "Contacts Only".

[RAMd®d]

A bit harsh, I think. Just limit AirDrop to "Contacts Only".


That's what I do.

And I seldom have occasion to use AD with contacts, mostly just between a 'Phone and a Mac.

[Drew]

From what I read, it seems that even a non-contact person could access your device through Airdrop. I've decided to turn it off on my devices and only use when needed.

"As an attacker, it is possible to learn the phone numbers and email addresses of AirDrop users – even as a complete stranger. All they require is a Wi-Fi-capable device and physical proximity to a target that initiates the discovery process by opening the sharing pane on an iOS or macOS device."

https://mashable.com/article/apple-airdr...rity-flaw/

[C(-)ris]

It should be off by DEFAULT when you aren't on your home network. That is just basic being safe 101.

[Drew]

C(-)ris wrote:
It should be off by DEFAULT when you aren't on your home network. That is just basic being safe 101.

Makes sense. But I never really thought about it until I saw the info. Thus, thought it was good to share here.