A group of researchers discovered a vulnerability called Airborne which puts millions of devices compatible with Airplay and, in some cases, also systems Carplay.
The problem does not arise directly from Apple, but from how the Airplay protocol is integrated into third -party devices through a SDK (i.e. developers tools). The attackers, if connected to the same wi-fi network of the victim, they could take advantage of these flaws without the need for passwords or special authorizations.
The most exposed devices to risk
They are potentially vulnerable:
-
Smart speaker
-
Audio and video receivers
-
Set-top box
-
Smart TV
In some extreme cases, those who attack could even activate the microphone devices, thus violating user privacy.
Carplayalthough involved, it seems instead to offer a much more reduced attack surface.
How Apple and the producers are moving
Apple has already solved the problem on its devices and has distributed safety updates to producers who use Airplay SDK.
But now the ball passes to the various brands: they have to issue updates to its customers. Who uses Airplay devices, especially on public wi-fi networks Or little protected, it should immediately check the presence of updates or, alternatively, temporarily deactivate Airplay.
In many cases they could be accommodation facilities such as hotels with many Airplay TV connected to the most affected by the net. Here too, however, you will have to understand how these TVs are connected to the network and if they are accessible to a possible striker via a public network. Certainly the hope that the producers of these devices release of the Fix, especially for the most dated ones, seems very remote.
How much we have to worry
Vulnerability is technical and complex to exploit: advanced tools are needed and access to same wi-fi network of the victim.
For us ordinary users, the concrete risk remains quite limited. However, the rule always remains the same: keeping devices updated and using safe wi-fi connections is the best way to sleep peacefully.
