iPhone warning: This network name can disable Wi-Fi on your phone

(Image credit: Malte Helmhold via Unsplash)

A couple of weeks ago, security researcher Carl Schou found a quirky iPhone bug where the device’s Wi-Fi could be disabled by connecting to a network with the SSID of “%p%s%s%s%s%n”. It’s safe to say that the chances of doing this by mistake were pretty low, and it was more interesting as a rare modern sighting of the age-old format-string bug.

But now Schou has discovered a related zero day bug that may both be easier to fall victim to, and harder to fix if you do. 

“You can permanently disable any iOS device's WiFI by hosting a public WiFi named %secretclub%power,” Schou tweeted. “Resetting network settings is not guaranteed to restore functionality.”

It’s not clear if the bug requires you to connect to said mischievous network, or simply for the iPhone to scan it. If it’s the latter, that means that anybody could set up a hotspot with the iPhone-breaking name in a busy place, and enjoy the carnage.

Schou was initially nonplussed as to how to fix his device, tweeting that resetting the network and force-restarting the iPhone did nothing. Eight hours later, his iPhone was working again, but using a method that’s likely beyond the abilities of the majority of owners. 

“To restore WiFi functionality, you have to manually edit an iPhone backup and remove malicious entries from the known networks .plist,” he tweeted.

Schou reached out to Apple’s device security team to alert them of the bug, and you would imagine a fix will be issued pretty urgently — hopefully before the loophole is exploited maliciously.

There is some good news, however. It’s possible that this is not quite as bad as it seems, and could actually be the culmination of two bugs combining. Schou retweeted a thread by @wr3nchsr, which suggested that the hard reset/backup edit option may only be required if the phone comes into contact with two malicious SSIDs. 

If that’s the case, then trolls would have a far harder time using this exploit maliciously, as it’s the kind of thing that you’re only likely to run into if you’re a security researcher actively looking for trouble. All the same, we would expect Apple to fix this pretty quickly, as the previous bug doesn’t seem to impact Android devices at all. 

TOPICS
Alan Martin

Freelance contributor Alan has been writing about tech for over a decade, covering phones, drones and everything in between. Previously Deputy Editor of tech site Alphr, his words are found all over the web and in the occasional magazine too. When not weighing up the pros and cons of the latest smartwatch, you'll probably find him tackling his ever-growing games backlog. Or, more likely, playing Spelunky for the millionth time.

Read more
Find My iPhone
Apple Find My hack turns any Bluetooth device into a secret AirTag — what we know
Apple iPhone 16 held in the hand.
iOS 18.3.1 — update your iPhone right now to fix critical zero-day vulnerability
iPhone 16 Pro shown held in hand
Apple just patched its first zero-day flaw of the year — update your iPhone and Mac right now
iPhone with USB-C charging cable
Apple’s proprietary USB-C controller has officially been hacked – what you need to know
Apple iPhone 16 Plus Review.
Apple just released an emergency security update for a flaw used in an ‘extremely sophisticated attack’ — update your devices right now
iPhone 15 Pro Max shown in hand
5 iPhone settings you should always shut off — because they’re a security nightmare
Latest in iPhones
Siri in iOS 18 on iPhone
Users complain that Siri can’t answer even the most basic questions — here’s what we know
iPhone 16 next to samsung galaxy watch 7 and bose wireless earbuds on a composite image
Apple's walled garden is crumbling — EU orders iOS to open up to third-party devices
Apple iPhone 16 & 16 Plus hands-on.
Forget USB-C — a truly portless iPhone just got the all-clear from the EU
iPhone Flip render
iPhone Flip could solve one of the biggest problems with foldable phones — here's how
iPhone 17 Air concept image
iPhone 17 Air just tipped for exclusive upgrade regular iPhone 17 won't get
iPhone 16 Pro Max
iPhone 18 may miss out on this performance upgrade — what we know
Latest in News
MacBook Pro 2023
New Mac attack is tricking users into thinking their computer is locked — how to stay safe
huawei pura x
Huawei's Pura X is the most unique foldable phone design in years
Google Pixel 9a hands-on.
Pixel 9a’s on-device AI isn’t as good as the Pixel 9 — here’s what’s different
Cristin Milioti in "Black Mirror" season 7 coming to Netflix
5 biggest Netflix movies and shows I can’t wait to watch in spring 2025
Siri in iOS 18 on iPhone
Users complain that Siri can’t answer even the most basic questions — here’s what we know
Sony Xperia 1 VI
Sony Xperia 1 VII could get a 200MP main camera to challenge Galaxy S25 Ultra