Psst, community names together with ‘%’ can brick your iPhone’s Wi-Fi

Are you in your iPhone? And may you see an alluring public Wi-Fi community with a great deal of share symbols within the title? DON’T JOIN IT, PAL! OH GOD NO.

Why? Nicely, Carl Schou — a safety researcher based mostly in Denmark — has unearthed a zero day that may scramble the Wi-Fi on iPhones or different iOS units. Right here’s what he posted:

In accordance with Schou, becoming a member of this community knocked out his iPhone‘s Wi-Fi. He tried resetting community settings and pressure restarting the machine, however nothing labored till he manually edited the iPhone backup.

This expertise might not be common although. When this was shared on Reddit, some customers on the location joined a community with this title with none difficulties.

What’s worrying is that this concern with the proportion image in Wi-Fi networks names isn’t new. Schou himself reported an analogous concern a number of weeks again the place becoming a member of a community known as “%ppercentspercentspercentspercentspercentn” on the iPhone disabled Wi-Fi:

The rationale share symbols are inflicting a difficulty with the iPhone‘s Wi-Fi is right down to the C laptop programming language. The “%” image is a C string format specifier. It’s possible that the title of the community is triggering a string format course of on the iPhone and that’s crashing the Wi-Fi performance.

When you’d like extra technical element, this piece on The Register breaks down what possible occurred with the “%ppercentspercentspercentspercentspercentn” community talked about above. We will assume one thing comparable’s happening with the “%secretclubpercentpower” title.

I’ll say it’s shocking that Apple hasn’t carried out something to repair this but. Although this concern doesn’t appear harmful, it’s embarrassing.

So right here’s the query: What are you able to, an iPhone person, do to keep away from having your Wi-Fi tanked by a mysterious community?

Nicely, it’s fairly easy: don’t be a part of any random ass public networks. And be particularly cautious of any which have share symbols of their title.

Do you know we’ve a e-newsletter all about client tech? It’s known as Plugged In –
and you’ll subscribe to it proper right here.

Source link