Defeat air-gapped systems by exfiltrating data using Apple Find My network

https://github.com/HouzuoGuo/hzgl-air-bridge

by austinallegro • 17 days ago

31 7 17 days ago

github.com

ano-ther• 16 days ago

This looks like a custom Airtag which is great — but I cannot find where it exfiltrates data from an air-gapped system.

What did I overlook?

tiagod• 16 days ago

Looking at the code, looks like it advertises under a different private key for each bit in each message.

https://github.com/HouzuoGuo/hzgl-air-bridge/blob/master/web...

ButlerianJihad2• 16 days ago

In this age of NFC, WiFi, BT, RFID, and everything in between, I am really not sure that the elite security concept of “air-gapping” is even meaningful or useful anymore.

gunalx• 16 days ago

Just because a measure is less useful doesn't mean it is useless. There is always a compromise between convince and security and in this case one would have to do even more screening (less convince) for the same security level. Even if airgaps like before increases effort needed for exfiltration.

buibuibui• 16 days ago

Very interesting. What's the max payload size we can transfer with this setup?

Defeat air-gapped systems by exfiltrating data using Apple Find My network

Related Stories