• News/
  • https://www.zdnet.com/article/did-ios-17-1-1-fix-the-flipper-zero-dos-problem-not-according-to-my-tests/

Did iOS 17.1.1 fix Flipper Zero attack problem on iPhones? Not according to my tests

ZDNet
·
Adrian Kingsley-Hughes
·
Published Nov 13, 2023
·
Updated

Flipper Zero is still a menace to iPhone users. The Flipper Zero is an amazing device, especially considering the $169 price tag, but as amazing as it is, I'm blown away by the fact that it could to crash an iPhone. Several readers have contacted me wanting to know if the latest iOS 17.1.1 update fixes the denial of service (DoS) attack that was made possible using the Flipper Zero loaded with third-party software. The answer, according to my tests, is still no, but something has changed. Also: The Raspberry Pi 5 cracks passwords twice as fast as my Pi 4, but there's one issue So, prior to iOS 17.1.1, you could use the Flipper Zero to flood an iPhone that was within Bluetooth range with popups and notifications, or you could choose an attack that would push so many popups and notifications that it would lock up the iPhone after a couple of minutes. The Apple Device Popup attack that is part of the BLE Spam app on the Flipper Zero isn't supposed to crash the iPhone, but now it does. Now things are different. Based on testing that I've done, iOS now seems to throttle the number of popups that are displayed, making the attack less annoying and distracting. Popups still appear, but not at the frequency that they were previously displayed. Also: Latest iOS 17 update stops BMW wireless chargers from destroying your iPhone 15 However, there's also bad news, and that is that despite the popups seemingly being throttled, now all the Bluetooth attacks the Flipper Zero can generate can ...

Read full article

Affected Software

1 affected component
Apple iOS and iPadOS=17.1.1

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203