Navigation
Advertisements

 

Recent entries
Recent comments
« We're sheep! Beehhh! | Main | Flash on Fedora 11 not working? »
Thursday
Jul232009

A ping of death for the iPhone

DateThursday, July 23, 2009 at 5:16PM

The release of the 3rd generation of the iPhone was the reason for me to rush to the TMobile store to get the 32G version. I had to wait for about one week first, but finaly got one, and I love it! But there is one thing that worries me a bit. I was able to remotely drain the battery in 30-45 minutes, just by pinging the public IP address, assigned by TMobile, to the GPRS/3G interface of the phone. Is your battery draining for no reason? Is your iPhone running hot when in standby modus? Then read on...

I was curious to see what IP address I was using during 3G networking. It turns out that on the Dutch TMobile network you are assigned a random IP within a block of TMobile mobile internet users. You can check this out by going to a site like whatsmyip.org, or installing the iStat app, which also shows you the 'cell IP' of the iPhone. To see if my iPhone was pingable, I issued the ping command on the OSX terminal on my MacBook, to which it responded. I was also be able use an app like Datacase, to share documents over the internet via FTP and HTTP from my iPhone. An Nmap to the device even reported that port 21 was open. Wtf? In other words, there is nothing between your device and the evil outside world when you switch on your iPhone, at least on the TMobile network in the Netherlands. Scary stuff.

When I was done experimenting, I noticed after 30 minutes that my fully charged iPhone ran a little hot and the battery suddenly was as good as empty, even though I had put it to rest by pressing the top button. It turned out that the ping I did half an hour before on my MacBook was still running and had kept the 3G module alive, sucking the energy from my phone. Crap!

I tried the same thing with a Nokia E71 on the same network, but this trick did not work. The E71 switches the 3G networking on when needed, for instance when the browser starts. Close the browser, and the device goes offline. I haven't tried other phones yet, but I'm curious to see how an Android reacts...

So, how could an attacker do harm to you and me remotely? Well, I used a nice tool called xprobe to do a remote ICMP fingerprint of the OS. One run of the tool against my public iPhone IP showed that the device was probably "Apple Mac OS X 10.3.x". Apparently, the iPhone responded with OSX characteristics. Easy catch! Someone can just scan the IP block with xprobe, and ping all iPhones he finds to death. Another, more targeted approach would be to lure you to his webserver, tailing and grepping his logs to see if any iPhones come along and then ping the device to death. He could also send you an email, containing a remote image to do this. Remote image loading is switched ON by default on the iPhone Mail app, so this method would be easier. Why would someone do this? For fun? An iPhone hater? Or just because?

Other networks in the Netherlands that offer GPRS/3G do not seem to be vulnerable to this problem because of the use of NAT or blocking inbound traffic. I hope that TMobile will do the same soon. Please share your experiences on other networks here.

By AuthorShizzle
Comment72 Comments | | | Print ArticlePrint Article |

PrintView Printer Friendly Version

EmailEmail Article to Friend

References (12)

References allow you to track sources for this article, as well as articles that were written in response to this article.
  • Response
    Response: Hitachi Service Manual
    at Hitachi Service Manual on August 9, 2009
    HP finally came out with the official information on the heavy duty blade for use in VMware environments. This blade for the c- Chassis is the BL495c which has 16 slots for Memory DIMMs and two AMD Opteron processors. Its the official Virtualization Blade.
  • Response
    Response: ביטוח רכב מקיף השוואת מחירים
    at השוואת ביטוח רכב on May 26, 2010
    ... השוואת מחירים ביטוח רכב - בשנים האחרונות למרות שחלפו למעלה מ -25 שנה מאז חקיקתו של חוק ביטוח רכב מקיף השוואת מחירים, לנפגעי ביטוח רכב מקיף השוואת מחירים. ההשתתפות העצמית הינה לגרום לבעל הפוליסה שימוש עסק... A ping of death for the iPhone - Dutchtechies blog - dutchtechies ...
  • Response
    Response: The Lost Arts Of War
    at The Lost Arts Of War on August 9, 2010
    ...an interestin post over at . . .
  • Response
    Response: billig parajumpers salg
    at Parajumpers Simona PJS E87Parajumpers Angie on November 6, 2014
    Soprano top quality, extra-durable products are used po Parajumpers Simona pular production, with styles incorporating awfully technological elements f Parajumpers Angie ashioned with a Parajumpers needs popular mind; discrete pockets,Parajumpers Simona, parachute the collar and throat f parajumpers jakke a
  • Response
    Response: cheap air max
    at cheap air max on September 30, 2018
    A ping of death for the
  • Response
    Response: heap nike shoes
    at cheap air max shoes on October 10, 2018
    A ping of death for the
  • Response
    Response: heap nike shoes
    at cheap air max 90 on October 11, 2018
    A ping of death for the
  • Response
    Response: Lifeguard course near me
    by Emilyjohn at American Lifeguard Association on October 1, 2024
  • Response
    Response: florida appeals
    by John Matthew at Brownstone Law on October 5, 2024
  • Response
    Response: https://www.fivefantasticlawyers.com/
    by John Matthew at https://www.fivefantasticlawyers.com/ on October 5, 2024
  • Response
    Response: https://www.accidentclaimsblawg.com/
    by John Matthew at https://www.accidentclaimsblawg.com/ on October 5, 2024
  • Response
    Response: https://wardblawg.com/
    by John Matthew at https://wardblawg.com/ on October 5, 2024

Reader Comments (72)

Thanks for sharing this nice post.I will keep your article in my idea. usbonlinegroup

May 27, 2011 | Unregistered CommenterHDMI Wholesale

Thanks for sharing this nice post.I will keep your article in my idea. usbonlinegroup

June 2, 2011 | Unregistered CommenterHDMI Wholesale

hats for sale
sports jerseys
Monster Energy Hats
I really like this website , and hope you will write more ,thanks a lot for your information.

July 16, 2011 | Unregistered Commenterhats for sale

Should I Remove theinspiron 1525 battery For A Desktop Replacement Laptop?Well,when using a laptop as a desktop replacement the inspiron 6400 battery should not be left in for long periods of time.The laptop will over time discharge the <a href

August 11, 2011 | Unregistered Commenterlaptops batteries

Michael Jenkins Authentic Jersey Outlet, NFL Eli Manning Authentic Jersey, Authentic Kevin Boss Jersey Outlet, NFL Mario Manningham Authentic Jersey, NFL Harry Carson Authentic Jersey, NFL Mark Bavaro Authentic Jersey, Authentic Brandon Jacobs Jersey Outlet, Authentic Hakeem Nicks Jersey Outlet, Authentic Antrel Rolle Jersey Outlet, NFL Kenny Phillips Authentic Jersey, Authentic Ahmad Bradshaw Jersey Outlet, Authentic Prince Amukamara Jersey Outlet, Authentic Carl Banks Jersey Outlet, Authentic Harry Carson Jersey Outlet, NFL Kevin Boss Authentic Jersey, NFL Brandon Jacobs Authentic Jersey, NFL Osi Umenyiora Authentic Jersey, Authentic Phil Simms Jersey Outlet, Authentic Kenny Phillips Jersey Outlet, NFL Justin Tuck Authentic Jersey, NFL Lawrence Taylor Authentic Jersey, NFL Jason Pierre-Paul Authentic Jersey, NFL Prince Amukamara Authentic Jersey, Authentic Mark Bavaro Jersey Outlet, NFL Ahmad Bradshaw Authentic Jersey, NFL Hakeem Nicks Authentic Jersey, Donovan McNabb Authentic Jersey Outlet, Toby Gerhart Authentic Jersey Outlet, Authentic Eli Manning Jersey Outlet, Authentic Lawrence Taylor Jersey Outlet, Authentic Osi Umenyiora Jersey Outlet, Visanthe Shiancoe Authentic Jersey Outlet, Authentic Mario Manningham Jersey Outlet, Bernard Berrian Authentic Jersey Outlet, Authentic Justin Tuck Jersey Outlet, Authentic Michael Strahan Jersey Outlet, Authentic Jason Pierre-Paul Jersey Outlet, Percy Harvin Authentic Jersey Outlet, NFL Antrel Rolle Authentic Jersey, NFL Michael Strahan Authentic Jersey

August 17, 2011 | Unregistered CommenterJJJJ

zentai has a lot of products, which are very attractive. Everyone has their own hobbies and dreams, perhaps you wear zentai costumes make dreams come true then? So, would you like come take a look of our website?
Herve Leger DressesHerve Leger Dresses
Herve Leger BandageHerve Leger Bandage
Herve Leger SwimsuitHerve Leger Swimsuit
zentai ukzentai uk
lycra suitlycra suit
louboutin pas cherlouboutin pas cher
Christian Louboutin Shoes ReplicaChristian Louboutin Shoes Replica
Rene Caovilla ShoesRene Caovilla Shoes
Replica Tory Burch ShoesReplica Tory Burch Shoes
chaussure louboutin pas cherchaussure louboutin pas cher
zentai suit salezentai suit sale
Christian Louboutin ShoesChristian Louboutin Shoes
Christian Louboutin SaleChristian Louboutin Sale
Moncler GiubbottiMoncler Giubbotti
Gilet MonclerGilet Moncler
Moncler NeroMoncler Nero
Christian Louboutin OutletChristian Louboutin Outlet
Christian Louboutin KnockoffsChristian Louboutin Knockoffs
Christian Louboutin SaleChristian Louboutin Sale

August 19, 2011 | Unregistered Commentermywayzentai

This site is very interesting and also great.efox-shop

August 25, 2011 | Unregistered CommenterTablet PC

I just luckily stumbled upon this blog and have been rcheap jordan shoeseading along. Thanks for this woncheap jordans derful share.

August 26, 2011 | Unregistered Commenternew jordan shoes

i am interested in the post and hope to read the next

August 31, 2011 | Unregistered CommenterAndroid Start X12

A good post thank you! efox-shop

September 16, 2011 | Unregistered Commenterrc car shop

It’s really a nice and helpful piece of information.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie uk
Abercrombie Fitch uk
Abercrombie & Fitch uk
Abercrombie and Fitch uk
Abercrombie outlet
Abercrombie online
Abercrcrombie store
Abercrombie shop
Abercrombie
I’m glad that you shared this helpful info with us. Please keep us informed like this. Thanks for sharing.
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie uk
Abercrombie Fitch uk
Abercrombie & Fitch uk
Abercrombie and Fitch uk
Abercrombie outlet
Abercrombie online
Abercrcrombie store
Abercrombie shop
Abercrombie
What a fun pattern! It's great to hear from you and see what you've sent up to.
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie Milano
Abercrombie Fitch Milano
Abercrombie & Fitch Milano
Abercrombie and Fitch Milano
Abercrombie Italia
Abercrombie Fitch Italia
Abercrombie and Fitch Italia
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie Milano
Abercrombie Fitch Milano
Abercrombie & Fitch Milano
Abercrombie and Fitch Milano
Abercrombie Italia
Abercrombie Fitch Italia
Abercrombie and Fitch Italia
Abercrombie
Abercrombie & Fitch
All of the projects look great! You make it so simple to this. Thanks
Abercrombie and Fitch
Abercrombie Deutschland
Abercrombie Fitch Deutschland
Abercrombie & Fitch Deutschland
Abercrombie and Fitch Deutschland
Hollister Deutschland
Hollister Frankfurt
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie Deutschland
Abercrombie Fitch Deutschland
Abercrombie & Fitch Deutschland
Abercrombie and Fitch Deutschland
Hollister Deutschland
Hollister Frankfurt
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie London
Abercrombie Fitch London
Abercrombie & Fitch London
Abercrombie and Fitch London
Abercrombie outlet
Abercrombie online
Abercrcrombie hoodies
Abercrombie men
Abercrombie women
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie London
Abercrombie Fitch London
Abercrombie & Fitch London
Abercrombie and Fitch London
Abercrombie outlet
Abercrombie online
Abercrcrombie hoodies
I am often to blogging and i really appreciate your content.
Abercrombie men
Abercrombie women
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie Paris
Abercrombie Fitch Paris
Abercrombie & Fitch Paris
Abercrombie and Fitch Paris
Abercrombie France
Abercrombie Fitch France
Abercrombie and Fitch France
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie Paris
Abercrombie Fitch Paris
Abercrombie & Fitch Paris
Abercrombie and Fitch Paris
Abercrombie France
Abercrombie Fitch France
Abercrombie and Fitch France
Hollister
Hollister UK
Hollister London
Hollister outlet
Hollister online
Hollister clothing
Hollister clothes
Hollister sale
Hollister
Hollister UK
Hollister London
Hollister outlet
Hollister online
Hollister clothing
Hollister clothes
Hollister sale
Hollister
Hollister UK
Hollister London
Hollister outlet
Hollister online
Hollister clothing
Hollister clothes
Hollister sale
Hollister
Hollister outlet
Hollister online
Hollister clothing
Hollister clothes
Hollister sale
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie Deutschland
Abercrombie Fitch Deutschland
Abercrombie & Fitch Deutschland
Abercrombie and Fitch Deutschland
Hollister Deutschland
Hollister Frankfurt
tiffany uk
tiffany London
tiffany outlet
tiffany online
The article has really peaks my interest. I am going to bookmark your site and keep checking for new information.
tiffany jewelry
tiffany co
Hollister
Hollister UK
Hollister London
Hollister outlet
Hollister online
Hollister clothing
Hollister clothes
Hollister sale
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie London
Abercrombie Fitch London
Abercrombie & Fitch London
Abercrombie and Fitch London
Abercrombie outlet
Abercrombie online
Abercrcrombie hoodies
Abercrombie men
Abercrombie women
Abercrombie
Abercrombie & Fitch
Abercrombie and Fitch
Abercrombie uk
Abercrombie Fitch uk
Abercrombie & Fitch uk
Abercrombie and Fitch uk
Abercrombie outlet
Abercrombie online
Abercrcrombie store
Abercrombie shop
jack wills
jack wills outlet
jack wills online
jack wills clothing
jack wills uk
jack wills clearance
jack wills sale
A unique discussion merits a comment. I LOVE YOU

September 18, 2011 | Unregistered Commenterddddddddd
Page 1 2 3 4 Next 20 Comments Most Recent Comment »

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>

Notify me of follow-up comments via email.