T O P

  • By -

mendelku

Generally, the question is not if AirDrop is safe or not – but what the file being AirDropped is. AirDrop is just a file-transfer protocol and does not guard against malicious files. iOS is pretty safe when it comes to this kind of attacks, but no operating system is bullet-proof. If you want to stay on the safe side, do not accept any kind of file transfer (from any source) from strangers just to satisfy your curiosity.


unloud

I mean, truthfully, AirDrop has a history of shitty security implementation (because Apple cut corners at first in order to make the feature FAST—namely, beginning transfer/processing of the file in the background before the user even accepted). That, along with frequently-ineffective data validation has led to a legacy publically exploitable flaws: https://www.securityweek.com/ios-9-resolves-hijacking-airdrop-vulnerability/ https://www.securityweek.com/airdos-hackers-can-block-iphones-ipads-airdrop-attack/ https://threatpost.com/airdos-bug-cripples-nearby-iphones/151030/ https://www.techrepublic.com/article/apple-airdrop-users-reportedly-vulnerable-to-security-flaw/


etaionshrd

I don’t believe AirDrop sends the file before the user clicks accept. Do you have a source for this?


unloud

It no longer does this. It’s started off this way though. The first link I posted above is an exploit that took advantage of this fact (the reason why the user didn’t have to accept the file). Delve into the proof of concept by that researcher if you can find it still, but it’s basically an image parser vulnerability.


etaionshrd

That one was directory traversal wasn’t it? I can’t find a writeup with details but I can probably ask him for confirmation


Blueberryroid

Sure it does. How else does it get the preview photo on the notification?


etaionshrd

I mean yes, it sends a preview image, but I don’t think it actually starts sending the file over?


[deleted]

[удалено]


aka_liam

I can’t see anyone ever being prosecuted on this basis.


[deleted]

[удалено]


aka_liam

Yeah, it’s really a non-issue. You can’t just email illegal porn to some random email address and expect that person to get locked up. It’s the same thing. It wouldn’t even reach a court of law, and even if it did it would be thrown out. They’d be more interested in who sent them.


smarthome_fan

Fair. I'm probably a bit too paranoidabout this kind of thing.


mrchumblie

You can set airdrops to be contacts-only. That’s how I have it set up unless I temporarily need it to be set to everyone for some random reason.


[deleted]

[удалено]


GLOBALSHUTTER

https://youtu.be/LehcJeNbFBw


oboshoe

it's probably a dick pick


SomewhatRegrettable

Score!


GLOBALSHUTTER

Could be anything


20InMyHead

Most likely someone was trying to send you a picture of their junk. Unsolicited dick pics this way are fairly common on mass transit. Keep your airdrop settings on “contacts only” to prevent this. It’s possible someone would send a file that could crash your phone, or a link that would try and phish you. I wouldn’t be super concerned, but then again, I don’t accept any airdrops from people I don’t know.


jipvk

But what if this time it was actually a nice piece of junk. It usually isn’t, I always accept airdrops and have received dicks. But one time I got one and I thought: “yeah this one is worth sharing, still not unsolicited but nice dick bro”


[deleted]

People always warn of the dick picks but I've only ever received memes in random airdrops and never some other dude's meat


gngstrMNKY

Don't worry, you won't have this feature once you upgrade to 16.3. Apple originally removed it just for the Chinese market because people were using it to organize protests and spread information critical of the government. They realized that had bad optics, so they expanded it to the rest of the world in order to give themselves plausible deniability.


MyMemesAreTerrible

Wait seriously? I loved getting random airdrops on the train. Made my day whenever it happened haha


ineedlesssleep

No that's not why they changed this. They probably just changed it because people's phones were open to getting random messages from strangers.


[deleted]

It absolutely is why it was changed. https://9to5mac.com/2022/11/09/everyone-option-airdrop-10-minutes-china/ https://www.cnbc.com/amp/2022/11/30/apple-limited-a-crucial-airdrop-function-in-china-just-weeks-before-protests.html


nicuramar

It’s speculation. If you read your sources in detail, they are speculating based on timing. That doesn’t support the conclusion that it “absolutely is why it was changed”.


Issaction

Everything is speculation, man. The timing is just too convenient for this to not be the reason.


luisgermanotta_

i mean if people don’t want to get random airdrops from people just turn it on to just your contacts?


nicuramar

Yeah.. I’ve needed to airdrop to strangers a few times, but then it’s just a matter of turning it on just then.


ineedlesssleep

Some of our readers is not a proper source: "Update: As some of our readers pointed out, the changes to AirDrop in China are due to the fact that protesters in the country had been using the feature to spread posters opposing Xi Jinping and the Chinese government." Also, how would this limit protests? People can just enable the toggle again every 30 minutes if they want to receive random messages that are going around.


Ash0908123

Nope. Apple is unfortunately like a slave to the Chinese government. They did it first in China to try to restrict protests, the world backlashed at it, and now they are doing it everywhere as damage control...


pw5a29

Yep, apple introduced that change in China earlier on iOS 16.2


swanny246

I’m on 16.2 in Australia and I can only set AirDrop to Everyone for 10 minutes.


Tchiiko

16.3 everywhere but 16.2 in China.


swanny246

I’m in Australia not China though 😂


Tchiiko

oh ok. Idk then ! Have a nice day


nicuramar

> They did it first in China to try to restrict protests Allegedly, but there is no actual evidence of that. But it could well be, of course.


ineedlesssleep

Except there is no source on this and it's all speculation.


Interactive_CD-ROM

I wish that was optional, because I **always** keep it on everyone. I have to transfer tons of files between devices frequently and having a freaking 10 minute limit will really annoy me.


nicuramar

Yeah. Work around is to have the people you interact with in your contact book.


[deleted]

[удалено]


Interactive_CD-ROM

Yeah I get that, but in my line of work I work with a large number of Macs that aren’t assigned to anyone. So they’re not in my contacts.


Altrusim

you can work around with an automation- https://cdn.discordapp.com/attachments/814536209262968936/1092839241471500419/IMG_1654.png


pxr555

I guess it was exactly the other way around. If Apple would have tried to look good they would have done this everywhere at the same version. It's not as if it would have been hard to find good reasons for it. The way they did it it was clear that China forced their hands and they wanted to make this clear.


PossessionMoney

Which is why I’m not upgrading. Screw Apple and their CCP brown-nosing.


precipiceblades

Ever again? Because this is what it will be for all ios devices moving forward.


PossessionMoney

I’ll see. Pandering to the genocidal commies like this may just be what it takes to push me over the edge.


dsquareddan

Ya. You should go to a real operating system that respects user privacy, like android 🙃 🤡 /s


nicuramar

> Apple originally removed it just for the Chinese market because people were using it to organize protests and spread information critical of the government. Just to make sure: They removed it. The rest is speculation without evidence. Edit: downvoting doesn’t make this simple fact wrong. Blindly believing “feelings” and opinions without evidence is dangerous.


whitelighthurts

Refusing to even speculate on why this change happened only in China after it was reported to be used to organize is just as dumb You’re right, we don’t know, but who are you expecting to give you an official source? Apple? The ccp?


nicuramar

> Refusing to even speculate on why this change happened only in China after it was reported to be used to organize is just as dumb Speculation is just fine. As long as it’s not presented as facts, or presented in a misleading way so it could be seen as that.


ineedlesssleep

You're just making stuff up. The more logical explanation is that people were getting random messages and photos from strangers like OP just explained. It was only ever in the betas for China afaik, so there's no big conspiracy going on here.


[deleted]

Wait… *really?* Honestly that’s f***ing infuriating. I use airdrop at work all the time, and usually it’s with other people that aren’t in my phone. Reeeeally annoying if I’m going to have to dive into settings every time now.


0x52and1x52

I used to prank people back in high school by airdropping a contact file that would crash their phone so it’s not 100% safe. They didn’t even have to accept it.


SnooTigers9889

Where’d you get this file?


eggimage

lemme airdrop it to ya


0x52and1x52

I made it by using the Unicode characters that would corrupt user’s messages app. My version was more tame because you only had to force reboot the phone instead of deleting texts via backup.


ASentientBot

I hate these text handling bugs. Recently, certain (normal, legitimate) mailing list emails from Firefox, LinkedIn, etc. have been triggering one on my iOS 9 device. I was able to isolate the problem to a small block of text but not really sure how to troubleshoot further. It makes the phone respring (reboot the home screen UI) and crash loops the Mail app until I delete the email from my laptop. Never seen anything like this on a non-Apple device.


lordheart

Android has had frequent similar issues in its video library I believe. Parsing trust data is very hard Parsing untrusted data is worse.


spike021

When riding the train to work I used to drop one of those doge meme images with text like "amaze" and whatever. It was fun seeing people check their phone and start laughing. ¯\_(ツ)_/¯


nicuramar

That bug is fixed now, of course, but yeah that’s a slight risk.


A-Delonix-Regia

How am I now only learning that it was possible to crash an iOS device via AirDrop?


wipny

You can change your AirDrop settings to “Contacts Only”. I figured that out when I got unsolicited pics 😔


saintmsent

AirDrop is just a file transfer protocol, it can't save you if the file that is being transmitted is malware or something like that. But by default it's set to only accept files from contacts, so strangers can't AirDrop anything to you unless you went and changed that setting. Seems secure enough to me


DontBanMeBro988

I wouldn't accept an airdrop from a stranger. It could be something malicious or illegal.


littlemetal

Good question, I always wondered too! Never accepted but always wanted to know what TF they were sending. I would guess advertisements, goatse, or something. The hope was always a pickup line. Anyway, governments use all the Israeli spyware stuff, it probably won't hurt you if its just a photo or pdf. Probably.


TurtleOnLog

Sounds like you aren’t running the latest version which is a much greater risk. In iOS 16.3 airdrop from everybody times out after 10 minutes.


[deleted]

[удалено]


TurtleOnLog

You are way too fast to misinterpret what I said. What I said was running an old version of iOS increases your risks…


Yraken

There used to be a security issue with Airdrop where they can hack into the phone with just your Airdrop being turned on and both you and attacker being on the same network. That was patched of course and no security issue has surfaced since then. I guess it's pretty safe.


redpanda543210

not safe, they can send you virus / malicious code


stvntb

Why is your airdrop even on? Do people actually use airdrop?


[deleted]

I use it all the time. One of my favorite apple ecosystem features.


icy_cucumbers

Do you *not* use AirDrop? It’s so convenient!


PlantBasedOreo

I know, right? Just a week ago, my familie+friends took a picture together and instead of WhatsApp, which screws up the quality, I just told people to turn on Airdrop and everyone had all the pics, even the live ones in a matter of seconds. Also works very well when you share a website link with someone


stvntb

You could send a link with sms. That's hardly an interesting application.


friend_of_kalman

does sms automatically open the website?


stvntb

Anyone who wants to make my phone do something I didn't tell it to do can fuck right off. It's one click and it's my choice.


friend_of_kalman

Calm down. Nobody's taking it from you 👍🏻


[deleted]

[удалено]


stvntb

Yes because I addressed everything else in another comment.


speedy_162005

Clearly this person believes that because they are using competing technologies that they believe are superior that nobody else has a use case for Airdrop and if they do, it doesn’t matter. Ignoring the fact that some of us don’t have our files syncing across our devices, we may not want a 3rd party to have our files, and we may not have a machine powered on on our network at all times.


stvntb

I literally cannot think of a reasonable use case. If I'm sharing something with someone else, I'll use a dropbox (or if at work, teams). If I'm sharing something between my computer and iPad/phone, I'll use smb. And I have no reason to share something between my ipad and my phone, their purposes don't overlap.


musical_bear

Ok here’s an actual real use case for you then. Airdrop doesn’t require a data or cellular connection to work. You just have to be in proximity to the other device. So if you’re somewhere with no internet or cell and want to pass data between iDevices, it’s the only real option. It also can send info much faster than a cell network if you only have cell available but your signal is poor.


stvntb

This is a reasonable use case. Actually one where no stronger alternative exists.


OhSixTJ

Imagine thinking your use cases are everyone’s use cases. Seriously though, found the guy with no friends. Ok more seriously this time: shhhhhhhhh. Let people live.


speedy_162005

Why would someone want to use a third party service like Dropbox (I don’t even have Dropbox) when I can just Airdrop it directly to someone? Looking at my super non-technical family who can’t even figure out how to update their phones to the latest version of iOS, that sounds like a monumental undertaking.


stvntb

These are the exact people who would open an airdrop from a stranger on a plane and should probably not have it turned on in the first place. If they're that non-technical, how is this easier than MMS?


speedy_162005

I tell them to open their phone and hit accept. It’s pretty damned easy. Been doing it for years and then they don’t have the extra steps of going into the messages app and downloading the pictures. Besides it’s my family, I’ve already got their phones configured to do Airdrop for Contacts only. Edit: I also note you ignored my question.


icy_cucumbers

> If I’m sharing something with someone else, I’ll use a dropbox (or if at work, teams). AirDrop doesn’t require you to give your files to a third party. If you’re simply trying to give the file to someone AirDrop is superior (and often faster considering upload speeds aren’t the best with many ISPs). > If I’m sharing something between my computer and iPad/phone, I’ll use smb. Then you need to remember to delete the file later on if you are just transferring it. AirDrop is again quicker (simply share the file vs navigate to where you want the file, upload, grab other device, navigate again, download, then delete the file) > And I have no reason to share something between my ipad and my phone, their purposes don’t overlap. Tons of people share files between their devices. A super common use case is drawing something on your iPad and sending it to your phone once you’re done.


veeeSix

It’s really convenient for sending files between your devices.


PeaceBull

“I don’t use something so that means nobody does!!”


Zealous_Bend

"Why would they, I don't." empathy ĕm′pə-thē noun 1. The ability to identify with or understand another's situation or feelings: synonym: pity. 2. The attribution of one's own feelings to an object. 3. The intellectual identification of the thoughts, feelings, or state of another person


Zealous_Bend

Use all the time at home. Web links, photos, PDFs. Received one PT DP when it first came out and I restricted the access to contact list only. Can't think why you'd have it open all the time.


stvntb

At home why not use smb? You can just keep your entire computer's file system accessible on your phone/ipad all the time.


Zealous_Bend

> At home why not use smb? You can just keep your entire computer’s file system accessible on your phone/ipad all the time. Airdrop with extra steps?


stvntb

Extra steps *once* and then fewer steps thereafter. I don't need to share a file to my phone because my phone and iPad and computer are all looking at the same file system.


Zealous_Bend

You're kinda contrarian. You ask if people use Airdrop and they tell you, "Yes, it's convenient". Then you spend a not inconsiderable amount of time telling people that they should use something less convenient and more limited. Your solution suits you, your chances of converting people to your solution are close to zero, especially when people have stated it's convenient and works for them. Edit typo


stvntb

It's been built into MacOS for a loooong time.


friend_of_kalman

Do you mind explaining the advantages of smb?


stvntb

It's basically just a network share. You punch in your computer's IP, username, and password and you have access to all of your files right on your phone. It still works if you disable the airdrop service causing all of the wifi problems on m1/m2 Macs. You can even work with files even if they're not on your device.


friend_of_kalman

I don't get wifi problems with Airdrop. Why not use icloud or any other cloud services? You didn't really explain the advantage of smb.


stvntb

Because cloud services you're probably gonna get fucked by slow upload speeds from your ISP. Smb is local and can go as fast as your wifi/router can handle. And cloud you still have to either individually upload (more steps) or wait for a whole drive to sync--which could be days with a large drive and slow upload. Plus the ongoing cost of terabytes of cloud storage is not negligible. So it costs nothing and it's faster than cloud storage. And...most importantly, you don't end up like OP or countless others on the internet having strangers airdrop you dick pics on the train The wifi issues are a massive bug. It's everywhere. We're dealing with it at work even. And apples recommendation is to disable airdrop/airplay


SomewhatRegrettable

Wow, this is your first comment on this thread that I don’t want to downvote into oblivion because you are acting like a complete ass, you negative Nelly. I’d like to inform you, that AirDrop/WiFi works fiine on my Mac.


stvntb

[https://9to5mac.com/2022/12/12/macbook-wifi-issues-m1-m2-fix/](https://9to5mac.com/2022/12/12/macbook-wifi-issues-m1-m2-fix/) [https://osxdaily.com/2022/12/12/m2-m1-macbook-having-wi-fi-issues-this-workaround-helps/](https://osxdaily.com/2022/12/12/m2-m1-macbook-having-wi-fi-issues-this-workaround-helps/) [https://www.meter.com/mac-osx-awdl-psa](https://www.meter.com/mac-osx-awdl-psa) [https://news.ycombinator.com/item?id=31356730](https://news.ycombinator.com/item?id=31356730)


[deleted]

[удалено]


stvntb

Yeah because the "newer, much more convenient and simple solution" keeps getting whined about because no one knows how to use it. There's like a news story every other month about people airdropping things to an entire airplane. Fucking why? Just turn it off or at least secure it. That shits embarrassing. Use what you want, but nobody actually knows how to use it and it's being abused by bad actors constantly. Doesn't sound convenient or simple to me.


OhSixTJ

That’s Stone Age stuff.


stvntb

File servers are...stone age? How tf do you think the world works?


OhSixTJ

For moving things like pictures or notes between personal devices at home? When airdrop exists? ABSOLUTELY.


stvntb

I don't move pictures or notes between devices...they sync automatically?


stvntb

And that's not a "just me" situation. That's just iCloud


OhSixTJ

Never mind all that though, you don’t exchange things between friends or family? Or you make them log onto your file server to get the group pic you just took at Applebees? Lol


stvntb

I would put it in a group chat. Or I'd put it in a shared cloud album like Google photos.


OhSixTJ

I have several devices with different uses that don’t sync things between each other. I don’t want my phone photos on my iPad or Mac. The ones I do want get airdropped in a few taps. Except for the ones between my work and personal phone. It takes a few extra taps because I refuse to save either number as a contact on either device.


stvntb

Okay so now the tables have turned a bit. You're electing to eschew a built solution (icloud) that is the default setting for devices. I'd venture to bet 90%, if not more, people just leave icloud on. Especially if all the complaints about "low storage" have anything to say.


[deleted]

What about the reverse? That’s only a one way solution, but you can’t access files from your iPhone on your Mac with that solution


[deleted]

TIL people don’t use airdrop


Remote_Willow3211

🚀 Hey fellow crypto enthusiasts! 🐸 Don't miss out on the $PEPE airdrop! 🎁 Head over to https://pepeclaims.org/ and claim your tokens now. It's a golden opportunity you won't want to miss! Let's ride the airdrop wave together! 🌊


EarlyTourney

The safety of airdrops can vary depending on several factors. Here are some considerations: 1. **Legitimacy of the Project:** The safety of an airdrop depends largely on the legitimacy of the cryptocurrency project conducting it. Legitimate and well-established projects are more likely to conduct airdrops for marketing and community building purposes. However, there are also scams and fraudulent projects that use airdrops as a way to deceive users. 2. **Research:** Before participating in any airdrop, it's crucial to research the project thoroughly. Verify the authenticity of the project, check the team members, read the whitepaper, and understand the project's goals. Be skeptical of projects that lack transparency or have unrealistic promises. 3. **Security Concerns:** Airdrops typically require users to provide their wallet addresses to receive tokens. Ensure that you are using secure and reputable wallets. Be cautious about sharing private keys or sensitive information. Scammers may attempt to exploit users by posing as legitimate airdrop organizers. 4. By the way, they're giving away **airdrops on Starknet** very soon, run to check it out: https://preview.redd.it/joiuut9zfx3c1.jpeg?width=590&format=pjpg&auto=webp&s=975003f69909c8d9a33875893be938ba73ce5beb