Update iOS or someone can lock your iPhone: Here's how
If you are using an iPhone, it is recommended to upgrade the software of the device to the latest version - iOS 13.3. The reason we say this is a bug that exists in the older versions of the OS and can be exploited to lock you out of your own phone, rendering it unusable. Here's all about the scary bug.
AirDrop bug sending files repeatedly
The issue in question, a denial-of-service bug, ties to AirDrop, the feature that lets iPhone users send and receive files wirelessly to one other. Normally, the capability works seamlessly but in this case, Kishan Bagaria noted that there was no limit on file transfers via AirDrop, which meant one could repeatedly use AirDrop to send files to nearby devices, thereby spamming them.
How it locks users out?
Now, when a file is received via AirDrop, the resulting pop-up blocks the entire iOS interface, keeping the user from doing anything else unless the file in question is received or rejected. So, in this case, with no limit on transfers, an attacker can potentially keep sending files, preventing the nearby user from using their own device.
Bagaria found the bug in August, calls it 'AirDoS'
Bagaria discovered the bug in August and informed Apple about the risks. However, the company requested him not to share the details until the fix was released. He also shared a proof-of-concept video demonstrating the attack and showing how a simple open-source tool could be used to target any iOS/iPadOS device set to receive files within range and carry out this 'AirDoS' attack.
Disabling Bluetooth could prevent attack, fix also released
While Apple has released a fix for this bug with iOS 13.3 and it's recommended to update as soon as possible, there's also the option of turning Bluetooth off to prevent this attack (if it occurs before the update). The pop-up, Bagaria says, would keep appearing so you'd have to 'run away' to get out of wireless range and then turn the Bluetooth off.
