New iPhone Security Flaw Allows Tracking Even When Powered Off
Researchers reveal a hardware vulnerability in iPhone's low power mode that could enable location tracking despite the device being turned off.
While this vulnerability is unlikely to be patched soon, most users have little cause for concern.
Experts from the Technical University of Darmstadt in Germany have uncovered a security flaw in the iPhone's Low Power Mode (LPM). This flaw potentially poses a significant security risk by allowing malicious actors to execute harmful software even when the device appears to be powered off.
It's important to clarify that the LPM discussed here differs from the iOS Low Power Mode designed to conserve battery life.
Introduced with iOS 15, LPM activates when the iPhone is switched off—either manually by the user or automatically due to low battery. Although the device seems completely powered down, LPM keeps NFC, Ultra WideBand, and Bluetooth functionalities active for up to 24 hours.
This capability ensures that services like 'Find My iPhone', digital car keys, and transit passes continue to operate even after the battery is fully drained.
However, researchers warn that this feature introduces a new threat model. Since LPM support is implemented at the hardware level, it cannot be disabled through software changes. Consequently, it's impossible to completely deactivate all modules when powering off the iPhone.
Moreover, the Bluetooth firmware is neither signed nor encrypted, which could allow attackers to develop malicious software that runs on the iPhone's Bluetooth chip even when the device is off—potentially enabling location tracking and unauthorized data transmission.
In practice, exploiting this vulnerability is highly complex and resource-intensive. An attacker would need physical access to the device, perform a jailbreak, and then gain control over the Bluetooth chip to leverage this exploit.
In summary, while this feature enhances security for most users by allowing lost or stolen iPhones to be located after shutdown, it also exposes a potential risk for targeted attacks against specific individuals.
The researchers have reported their findings to Apple but have yet to receive a response as of the report's publication.
Discover the latest news and current events in Stylish Home Decor as of 22-05-2022. The article titled " New iPhone Security Flaw Allows Tracking Even When Powered Off " provides you with the most relevant and reliable information in the Stylish Home Decor field. Each news piece is thoroughly analyzed to deliver valuable insights to our readers.
The information in " New iPhone Security Flaw Allows Tracking Even When Powered Off " helps you make better-informed decisions within the Stylish Home Decor category. Our news articles are continuously updated and adhere to journalistic standards.