Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

As far as I understand the protocol, you'd need a certificate signed by Apple in order to be able to masquerade as that contact in somebody's contact list, and Apple only signs these after phone number or email confirmation.


> We support contacts-only devices by using extracted AirDrop credentials (keys and certificates) from macOS via our keychain extractor.

This should make it clear that you can’t just claim any phone number or email address.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: