security

Is Apple's iOS 17 NameDrop feature a threat to your privacy? – The Arizona Republic


play

QUESTION: Is Apple’s NameDrop option a security risk?

ANSWER: NameDrop is a new AirDrop feature that is part of the latest update from Apple known as iOS 17 which was made available in mid-September.

It’s a convenient feature for those who want to accurately share either their phone number or their email address with new contacts.  Anyone who’s ever exchanged contact information manually to later discover it was off by one digit or letter can see the value in this feature.

Misinformation is a common problem across all social media platforms, but it’s a bit disconcerting when the source of the bad information is law enforcement agencies.

The recent firestorm

Even though this feature has been out since September, police departments from various regions around the country started posting warnings this week claiming that the NameDrop feature was a huge security risk.

It looks like one small police department created the original post and others simply reposted the information without ever vetting it, which led to the firestorm of reports.

Hopefully, this becomes a teaching moment for everyone as it pertains to reposting salacious information without verifying its validity.

False claim #1 — proximity

Most of the posts made it sound like someone could randomly pass by you or sit next to you on a bus or airplane and snag your contact info.

Readers Also Like:  Critical Flaws in AMI MegaRAC BMC Software Expose Servers to ... - The Hacker News

The reality is that the top of both phones must be within centimeters of each other to activate NameDrop and Bluetooth must be active on both phones that have the iOS 17 update.

NameDrop will not work if the phones are placed next to or on top of each other; only if the tops are very close to each other.

False claim #2 — it’s automatic

Even if someone were to get your phone positioned properly, it simply starts the NameDrop process that requires a lot of user interaction on both sides.

First, if the phone is locked, it must be unlocked to respond to the sharing request, then the sending party has to decide whether they want to share and what they want to share.

You can also choose to receive only, which does not share your contact information with the other phone.

The only potential security issue is for those who don’t use any form of lock code or biometrics, which leads to much bigger security issues than NameDrop.  Someone with malicious intent wouldn’t bother with NameDrop if they have full access to everything on the phone already.

Talking Tech: Google deleting inactive accounts, what to know about NameDrop

False claim #3 — it shares photos & addresses

One of the many warnings was that a child could unknowingly share their home address or photos from their device via NameDrop, which isn’t even remotely possible. The only image that may show up is if you’ve set your Contact Poster with an image.

Readers Also Like:  5 Cleared Tech Jobs Crucial to National Security - ClearanceJobs

The two items that can be shared are either a phone number or an email address — here’s a video from Apple showing how it works: https://bit.ly/3Gmsler

How to turn it off

This feature is especially useful for those in business, but if you want to turn it off, just search for AirDrop in Settings and disable ‘Bringing Devices Together’.

Ken Colburn is founder and CEO of Data Doctors Computer Services, datadoctors.com. Ask any tech question at facebook.com/DataDoctors or on Twitter @TheDataDoc.





READ SOURCE

This website uses cookies. By continuing to use this site, you accept our use of cookies.