{"id":7221,"date":"2020-12-03T05:03:15","date_gmt":"2020-12-03T05:03:15","guid":{"rendered":"https:\/\/tapchicntt.com\/?p=7221"},"modified":"2020-12-03T05:03:16","modified_gmt":"2020-12-03T05:03:16","slug":"iphone-dinh-loi-bao-mat-nghiem-trong-co-the-bi-kiem-soat-hoan-toan-qua-wifi","status":"publish","type":"post","link":"https:\/\/tapchicntt.com\/iphone-dinh-loi-bao-mat-nghiem-trong-co-the-bi-kiem-soat-hoan-toan-qua-wifi\/","title":{"rendered":"iPhone d\u00ednh l\u1ed7i b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng, c\u00f3 th\u1ec3 b\u1ecb ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n qua WiFi"},"content":{"rendered":"\n

Hacker s\u1ebd c\u00f3 th\u1ec3 t\u1ea3i v\u1ec1 to\u00e0n b\u1ed9 d\u1eef li\u1ec7u tr\u00ean iPhone c\u1ee7a b\u1ea1n, th\u1eadm ch\u00ed l\u00e0 k\u00edch ho\u1ea1t camera l\u1eabn microphone c\u1ee7a m\u00e1y \u0111\u1ec3 theo d\u00f5i b\u1ea1n trong th\u1eddi gian th\u1ef1c n\u1eefa!<\/strong><\/p>\n\n\n\n

\u0110i\u1ec1u \u0111\u00e1ng n\u00f3i l\u00e0, l\u1ed7 h\u1ed5ng n\u00e0y kh\u00f4ng \u0111\u01a1n thu\u1ea7n l\u00e0 m\u1ed9t nguy c\u01a1 v\u1ec1 m\u1eb7t l\u00fd thuy\u1ebft, khi m\u00e0 m\u1ed9t nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt nhi\u1ec1u n\u0103m kinh nghi\u1ec7m c\u1ee7a Google \u0111\u00e3 ki\u1ec3m ch\u1ee9ng b\u1eb1ng c\u00e1ch t\u1ef1 tay chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t t\u1eeb xa m\u1ed9t chi\u1ebfc iPhone d\u00f9ng chung m\u1ea1ng WiFi nh\u01b0ng \u0111\u1eb7t \u1edf m\u1ed9t ph\u00f2ng kh\u00e1c.<\/p>\n\n\n\n

Nh\u00e0 nghi\u00ean c\u1ee9u n\u00f3i tr\u00ean l\u00e0 Ian Beer thu\u1ed9c Google Project Zero. N\u1ebfu b\u1ea1n ch\u01b0a bi\u1ebft th\u00ec Project Zero l\u00e0 d\u1ef1 \u00e1n \u0111\u01b0\u1ee3c Google l\u1eadp n\u00ean \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt v\u00e0 th\u00f4ng b\u00e1o cho c\u00e1c c\u00f4ng ty bi\u1ebft tr\u01b0\u1edbc khi k\u1ebb x\u1ea5u ph\u00e1t hi\u1ec7n ra v\u00e0 t\u00ecm c\u00e1ch l\u1ee3i d\u1ee5ng ch\u00fang. Nh\u00e0 s\u00e1ng l\u1eadp ra Project Zero, Chris Evans, n\u00f3i r\u1eb1ng \u0111i\u1ec1u \u0111\u00e1ng s\u1ee3 v\u1ec1 l\u1ed7 h\u1ed5ng m\u1edbi n\u00e0y l\u00e0 n\u00f3 ho\u1ea1t \u0111\u1ed9ng m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 t\u01b0\u01a1ng t\u00e1c ng\u01b0\u1eddi d\u00f9ng n\u00e0o, v\u00e0 c\u0169ng kh\u00f4ng \u0111\u1ec3 l\u1ea1i b\u1ea5t k\u1ef3 d\u1ea5u v\u1ebft n\u00e0o gi\u00fap n\u1ea1n nh\u00e2n bi\u1ebft quy\u1ec1n ri\u00eang t\u01b0 c\u1ee7a h\u1ecd \u0111\u00e3 b\u1ecb x\u00e2m ph\u1ea1m.<\/p>\n\n\n\n

“Cu\u1ed9c t\u1ea5n c\u00f4ng \u0111\u01a1n gi\u1ea3n nh\u01b0 ki\u1ec3u b\u1ea1n \u0111ang \u0111i tr\u00ean \u0111\u01b0\u1eddng, \u0111i\u1ec7n tho\u1ea1i \u0111\u1eb7t trong t\u00fai, v\u00e0 qua WiFi, c\u00f3 k\u1ebb n\u00e0o \u0111\u00f3 \u0111\u1ed9t nh\u1eadp v\u00e0o b\u1eb1ng c\u00e1ch g\u1eedi \u0111i m\u1ed9t v\u00e0i g\u00f3i d\u1eef li\u1ec7u WiFi \u00e1c \u00fd” – Beer n\u00f3i.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

D\u1eabu v\u1eady, v\u1eabn c\u00f3 m\u1ed9t s\u1ed1 tin t\u1ed1t cho b\u1ea1n. Theo Beer, anh ch\u01b0a t\u00ecm th\u1ea5y b\u1ea5t k\u1ef3 b\u1eb1ng ch\u1ee9ng n\u00e0o v\u1ec1 vi\u1ec7c l\u1ed7 h\u1ed5ng n\u00e0y t\u1eebng b\u1ecb l\u1ee3i d\u1ee5ng b\u1edfi c\u00e1c hacker, v\u00e0 t\u1ea5t nhi\u00ean anh v\u1eabn \u0111\u1ec3 cho Apple m\u1ed9t \u00edt th\u1eddi gian \u0111\u1ec3 v\u00e1 l\u1ed7i tr\u01b0\u1edbc khi chia s\u1ebb s\u00e2u h\u01a1n chi ti\u1ebft v\u1ea5n \u0111\u1ec1. Nh\u01b0ng ch\u1ec9 ri\u00eang vi\u1ec7c m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng nh\u01b0 v\u1eady t\u1ed3n t\u1ea1i tr\u00ean m\u1ed9t thi\u1ebft b\u1ecb Apple \u0111\u00e3 l\u00e0 \u0111i\u1ec1u kh\u00f4ng t\u01b0\u1edfng r\u1ed3i.<\/p>\n\n\n\n

B\u1ea1n h\u1eb3n \u0111ang th\u1eafc m\u1eafc: l\u00e0m th\u1ebf n\u00e0o l\u1ed7 h\u1ed5ng l\u1ea1i cho ph\u00e9p ki\u1ec3m so\u00e1t iPhone t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n ti\u1ebfp c\u1eadn v\u1edbi n\u00f3, v\u00e0 c\u0169ng kh\u00f4ng c\u1ea7n t\u01b0\u01a1ng t\u00e1c v\u1edbi giao di\u1ec7n ng\u01b0\u1eddi d\u00f9ng? B\u1edfi l\u1ed7i n\u1eb1m \u1edf m\u1ed9t giao th\u1ee9c m\u1ea1ng g\u1ecdi l\u00e0 Apple Wireless Direct Link (AWDL). V\u00e0 AWDL c\u00f3 th\u1ec3 l\u00e0m r\u1ea5t nhi\u1ec1u th\u1ee9 – bao g\u1ed3m g\u1eedi \u1ea3nh hay t\u1eadp tin b\u1ea5t k\u1ef3 ch\u1ee9a tr\u00ean iPhone.<\/p>\n\n\n\n

“AWDL l\u00e0 m\u1ed9t giao th\u1ee9c m\u1ea1ng mesh \u0111\u1ed9c quy\u1ec1n c\u1ee7a Apple, \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 cho ph\u00e9p c\u00e1c thi\u1ebft b\u1ecb Apple nh\u01b0 iPhone, iPad, Mac v\u00e0 Apple Watch thi\u1ebft l\u1eadp n\u00ean c\u00e1c m\u1ea1ng mesh peer-to-peer ad-hoc v\u1edbi nhau. N\u1ebfu b\u1ea1n s\u1edf h\u1eefu m\u1ed9t thi\u1ebft b\u1ecb Apple, c\u00f3 kh\u1ea3 n\u0103ng b\u1ea1n \u0111ang t\u1ea1o ra, ho\u1eb7c k\u1ebft n\u1ed1i v\u1edbi c\u00e1c m\u1ea1ng mesh t\u1ea1m th\u1eddi \u0111\u00f3 nhi\u1ec1u l\u1ea7n m\u1ed7i ng\u00e0y m\u00e0 ch\u1eb3ng h\u1ec1 nh\u1eadn ra”<\/p>\n\n\n\n

“N\u1ebfu b\u1ea1n t\u1eebng s\u1eed d\u1ee5ng Airdrop, stream nh\u1ea1c \u0111\u1ebfn Homepod hay Apple TV qua Airplay, ho\u1eb7c s\u1eed d\u1ee5ng iPad nh\u01b0 m\u00e0n h\u00ecnh ph\u1ee5 v\u1edbi ch\u1ee9c n\u0103ng Sidecar, th\u00ec b\u1ea1n \u0111ang d\u00f9ng AWDL. V\u00e0 k\u1ec3 c\u1ea3 n\u1ebfu b\u1ea1n kh\u00f4ng d\u00f9ng nh\u1eefng t\u00ednh n\u0103ng \u0111\u00f3, n\u1ebfu c\u00f3 ng\u01b0\u1eddi \u0111ang \u0111\u1ee9ng quanh b\u1ea1n, c\u00f3 kh\u1ea3 n\u0103ng thi\u1ebft b\u1ecb c\u1ee7a b\u1ea1n \u0111\u00e3 tham gia v\u00e0o m\u1ea1ng mesh AWDL m\u00e0 h\u1ecd \u0111ang s\u1eed d\u1ee5ng” – Beer cho bi\u1ebft.<\/p>\n\n\n\n

Nh\u00e0 nghi\u00ean c\u1ee9u n\u00e0y c\u00f2n \u0111\u0103ng t\u1ea3i m\u1ed9t b\u00e0i vi\u1ebft kh\u00e1 d\u00e0i v\u00e0 d\u00e0y \u0111\u1eb7c c\u00e1c th\u00f4ng tin k\u1ef9 thu\u1eadt tr\u00ean blog c\u1ee7a m\u00ecnh v\u1ec1 qu\u00e1 tr\u00ecnh ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng. M\u1ecdi chuy\u1ec7n b\u1eaft \u0111\u1ea7u v\u00e0o n\u0103m 2018.<\/p>\n\n\n\n

M\u1ed9t trong c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt c\u1ee7a Apple l\u00e0 l\u01b0\u1ee3c b\u1ecf c\u00e1c bi\u1ec3u t\u01b0\u1ee3ng trong t\u00ean ch\u1ee9c n\u0103ng kh\u1ecfi iOS, do \u0111\u00f3 kh\u00f4ng ai bi\u1ebft ch\u00fang l\u00e0m g\u00ec. Nh\u01b0ng v\u00e0o n\u0103m 2018, Apple tung ra m\u1ed9t b\u1ea3n iOS beta m\u00e0 kh\u00f4ng th\u1ef1c hi\u1ec7n \u0111i\u1ec1u \u0111\u00f3. Vi\u1ec7c t\u00ean g\u1ecdi c\u00e1c ch\u1ee9c n\u0103ng b\u1ecb l\u1ed9 \u0111\u00e3 v\u00f4 t\u00ecnh cung c\u1ea5p cho nh\u00e0 nghi\u00ean c\u1ee9u Google kh\u00e1 nhi\u1ec1u th\u00f4ng tin th\u00fa v\u1ecb, trong \u0111\u00f3 c\u00f3 m\u1ed9t ch\u1ee9c n\u0103ng l\u00e0m anh \u0111\u1eb7c bi\u1ec7t l\u01b0u \u00fd.<\/p>\n\n\n\n

“T\u00ean ch\u1ee9c n\u0103ng l\u00e0: IO80211AWDLPeer::parseAwdlSyncTreeTLV<\/em><\/p>\n\n\n\n

V\u00e0o th\u1eddi \u0111i\u1ec3m \u0111\u00f3, t\u00f4i kh\u00f4ng bi\u1ebft AWDL l\u00e0 g\u00ec. Nh\u01b0ng t\u00f4i bi\u1ebft TLV (Type, Length, Value) th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 chuy\u1ec3n c\u00e1c t\u1eadp l\u1ec7nh \u0111\u1ebfn d\u1eef li\u1ec7u, v\u00e0 vi\u1ec7c ph\u00e2n t\u00edch m\u1ed9t TLV c\u00f3 th\u1ec3 cho th\u1ea5y n\u00f3 \u0111\u01b0\u1ee3c chuy\u1ec3n \u0111\u1ebfn t\u1eeb m\u1ed9t n\u01a1i n\u00e0o \u0111\u00f3 kh\u00f4ng \u0111\u00e1ng tin. V\u00e0 80211 l\u00e0 d\u1ea5u hi\u1ec7u cho th\u1ea5y c\u00f3 g\u00ec \u0111\u00f3 li\u00ean quan \u0111\u1ebfn WiFi<\/em>“<\/p>\n\n\n\n

Sau khi t\u00ecm tr\u00ean Google v\u00e0 kh\u00e1m ph\u00e1 ra AWDL l\u00e0 g\u00ec, Beer bi\u1ebft r\u1eb1ng cu\u1ed9c t\u1ea5n c\u00f4ng b\u1eb1ng c\u00e1ch l\u1ee3i d\u1ee5ng l\u1ed7 h\u1ed5ng n\u00e0y s\u1ebd di\u1ec5n ra th\u1ebf n\u00e0o. Anh \u0111\u00e3 t\u1ea1o ra \u0111\u01b0\u1ee3c d\u1eef li\u1ec7u AWDL gi\u1ea3 c\u00f3 th\u1ec3 y\u00eau c\u1ea7u b\u1ea5t k\u1ef3 iPhone n\u00e0o n\u1eb1m trong ph\u1ea1m vi WiFi ph\u1ea3i ph\u1ea3n h\u1ed3i.<\/p>\n\n\n\n

Quy tr\u00ecnh th\u1ef1c hi\u1ec7n vi\u1ec7c \u0111\u00f3 khi\u1ebfn kh\u00e1 nhi\u1ec1u ng\u01b0\u1eddi s\u1eedng s\u1ed1t. Beer m\u1ea5t 6 th\u00e1ng \u0111\u1ec3 v\u01b0\u1ee3t qua l\u1ea7n l\u01b0\u1ee3t m\u1ecdi r\u00e0o c\u1ea3n g\u1eb7p ph\u1ea3i. Anh cu\u1ed1i c\u00f9ng \u0111\u00e3 th\u00e0nh c\u00f4ng trong vi\u1ec7c ki\u1ec3m so\u00e1t m\u1ed9t chi\u1ebfc iPhone 11 Pro \u0111\u1eb7t trong ph\u00f2ng b\u00ean c\u1ea1nh. B\u1ea1n c\u00f3 th\u1ec3 xem \u0111o\u1ea1n video demo b\u00ean d\u01b0\u1edbi, trong \u0111\u00f3 c\u00f3 s\u1eed d\u1ee5ng m\u1ed9t chi\u1ebfc Raspberry Pi v\u00e0 m\u1ed9t v\u00e0i adapter WiFi kh\u00e1 b\u00ecnh th\u01b0\u1eddng, ki\u1ec3m so\u00e1t b\u1edfi m\u1ed9t chi\u1ebfc MacBook Air.<\/p>\n\n\n\n

“Demo n\u00e0y cho th\u1ea5y k\u1ebb t\u1ea5n c\u00f4ng l\u1ee3i d\u1ee5ng th\u00e0nh c\u00f4ng iPhone 11 Pro c\u1ee7a n\u1ea1n nh\u00e2n, \u0111ang \u0111\u1eb7t trong m\u1ed9t c\u0103n ph\u00f2ng kh\u00e1c v\u1edbi c\u1eeda \u0111\u01b0\u1ee3c \u0111\u00f3ng l\u1ea1i. N\u1ea1n nh\u00e2n \u0111ang s\u1eed d\u1ee5ng \u1ee9ng d\u1ee5ng YouTube. K\u1ebb t\u1ea5n c\u00f4ng bu\u1ed9c giao di\u1ec7n AWDL ph\u1ea3i k\u00edch ho\u1ea1t khi l\u1ee3i d\u1ee5ng th\u00e0nh c\u00f4ng l\u1ed7i tr\u00e0n \u0111\u1ec7m AWDL \u0111\u1ec3 chi\u1ebfm quy\u1ec1n truy c\u1eadp \u0111\u1ebfn thi\u1ebft b\u1ecb v\u00e0 ch\u1ea1y m\u1ed9t tr\u00ecnh \u1ea9n d\u01b0\u1edbi quy\u1ec1n root. Tr\u00ecnh \u1ea9n n\u00e0y c\u00f3 to\u00e0n quy\u1ec1n truy xu\u1ea5t d\u1eef li\u1ec7u c\u00e1 nh\u00e2n ng\u1eeboi d\u00f9ng, bao g\u1ed3m email, \u1ea3nh, tin nh\u1eafn, keychain… K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u00e1nh c\u1eafp b\u1ee9c \u1ea3nh m\u1edbi \u0111\u01b0\u1ee3c ch\u1ee5p g\u1ea7n \u0111\u00e2y nh\u1ea5t. Tri\u00ean kh\u1ea3i tr\u00ecnh \u1ea9n m\u1ea5t kho\u1ea3ng 2 ph\u00fat, nh\u01b0ng n\u1ebfu \u0111\u1ea7u t\u01b0 nhi\u1ec1u h\u01a1n th\u00ec kh\u00f4ng c\u00f3 l\u00fd do g\u00ec m\u00e0 nguy\u00ean m\u1eabu n\u00e0y kh\u00f4ng th\u1ec3 \u0111\u01b0\u1ee3c t\u1ed1i \u01b0u ho\u00e1 \u0111\u1ec3 tri\u1ec3n khai tr\u00ecnh \u1ea9n m\u00e0 ch\u1ec9 m\u1ea5t v\u00e0i gi\u00e2y<\/em>” – Beer vi\u1ebft nh\u01b0 v\u1eady.<\/p>\n\n\n\n

Ian Beer ch\u00ednh l\u00e0 nh\u00e0 nghi\u00ean c\u1ee9u t\u1eebng mi\u00eau t\u1ea3 chi ti\u1ebft m\u1ed9t trong nh\u1eefng l\u1ed7 h\u1ed5ng l\u1edbn nh\u1ea5t m\u00e0 hacker c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng \u0111\u1ec3 t\u1ea5n c\u00f4ng ng\u01b0\u1eddi d\u00f9ng iPhone th\u00f4ng qua c\u00e1c website b\u1ecb hack \u0111\u1ec3 ph\u00e1t t\u00e1n malware iOS. V\u00e0o n\u0103m 2018, anh c\u00e1o bu\u1ed9c Apple l\u01a1 l\u00e0 vi\u1ec7c v\u00e1 nhi\u1ec1u l\u1ed7 h\u1ed5ng m\u00e0 anh t\u1eebng b\u00e1o cho c\u00f4ng ty – nh\u01b0ng l\u1ed7 h\u1ed5ng v\u1eeba n\u00eau \u0111\u00e3 \u0111\u01b0\u1ee3c nh\u00e0 s\u1ea3n xu\u1ea5t iPhone v\u00e1 v\u00e0o b\u1ea3n iOS tr\u01b0\u1edbc 13.5.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hacker s\u1ebd c\u00f3 th\u1ec3 t\u1ea3i v\u1ec1 to\u00e0n b\u1ed9 d\u1eef li\u1ec7u tr\u00ean iPhone c\u1ee7a b\u1ea1n, th\u1eadm ch\u00ed l\u00e0 k\u00edch ho\u1ea1t camera […]<\/p>\n","protected":false},"author":6,"featured_media":7222,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-7221","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bao-mat"],"views":388,"_links":{"self":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/7221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/comments?post=7221"}],"version-history":[{"count":1,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/7221\/revisions"}],"predecessor-version":[{"id":7223,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/7221\/revisions\/7223"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/media\/7222"}],"wp:attachment":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/media?parent=7221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/categories?post=7221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/tags?post=7221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}