Hacker News new | ask | show | jobs
by tech234a 205 days ago
I'm fairly sure the article is wrong.

For example, someone found strings in Google's implementation that mentioned AWDL: https://social.treehouse.systems/@nicolas17/1155847323390351...

Also people have mentioned having success Airdropping to macOS devices, which are not listed as being supported on the Wi-Fi Aware page.

4 comments

In 2020 Google's Project Zero found a zero-click remote RCE in Apple's AWDL implementation. So at least some folks at Google are fully equipped to build a reverse engineered implementation. Discussion on that awhile back: https://news.ycombinator.com/item?id=25270184
Yeah, people have confirmed it works with iOS 15, so it seems more likely that Google implemented AWDL.
> macOS devices, which are not listed as being supported on the Wi-Fi Aware page.

Not listed, but shipped with some Wifi Aware library

/System/Library/PrivateFrameworks/DeviceToDeviceManager.framework/Plugins/WiFiAwareD2DPlugin.bundle

Just `tcpdump -i awdl0` while Airdrop-ing to a Mac to observe it's still using AWDL. (unless the interface named awdl0 is actually using WiFi Aware...)

Another fun thing to do: `ping6 ff02::1%awdl0`. Pings all nearby Apple devices with AWDL active. Including things like your neighbor's phone that's not even on your local network. (but addresses rotate I believe so can't track persistently)

> (but addresses rotate I believe so can't track persistently)

But maybe you can infer presence tracking the response time? Could be exploited anyway, no?

yes! I've had the same thought. If you have only one neighbor in range, seems like you could definitely infer their presence and approximate range based on latency. Phones don't keep AWDL active all the time, but every time you swipe control center it perks up I think.

Could also detect when someone is hosting a party or something.

Both can still be true. The interop may be motivated by the EU regulator's intention so and to stave off further regulation.