iphone calls out

[Zero-Fear]

well while fucking around with my proxy server I found out that the iphone calls home.
It connects to http://www.apple.com/library/test/success.html
now after looking around figured out that it phones home every few minutes to check if your wifi has a password (like mcdonalds) and if it does it forwards you or notifies you of its awesome new discovery.

However...wtf happens if apples site is down? some people were mentioning that the wifi would stop working in the world if apple got ddos'd or something.

Im gonna test this theory out when I get around to it n block apple.com and see what happens.

Anyway yeah yah mum.

[Timon]

very interesting, curious to hear about the results!

[Nick]

Easier option.
Run DNS server on your laptop, put custom entry in DNS server specifying www.apple.com (There will be load balencers in place meaning when you query apple.com and when you request happle.com/library/test/success.html you'll get a different IP most likley) and then point your iPhone to the laptop as the DNS server.

Let me know what other traffic you notice, I'd be interested to see the "Find my iPhone" stuff, see if you can fake locations without an Auth...

[Timon]

Your idea you test it! i don't use apple stuff at all sorry!

but still curious to find out how it works out if anyone wants to try it

[knuckles]

I'll follow this thread, this is going to be interesting.

[Zero-Fear]

Update: Forwarded apple.com to my website via the proxy, iphone still works. will keep you posted will try other methods

edit: I waited for the iphone to refresh itself, then I saw this!

TCP_DENIED/403 521 GET http://www.apple.com/library/test/success.html - NONE/- text/html

This is what happens. (see attached)

So it goes to what usually looks like a login screen, anyway it knocks out the connection to your wireless.
So basically if iphone cant talk to success.html it drops connection to the AP or router.

Im also going to test another theory of mine which is copy the success.html page and see if it has to be apple.com that says success or if it can be any.

Will get back to you soon
btw the cockblock thing I stole from familyguy lol I use it for my proxy filter

[Zero-Fear]

yep looks like even copying the success page doesn't work, however I am forwarding my blocks sooooo that means im done cbf lol whats next

[Nick]

Resolve the IP of the URL and then set a static inside your network to be it, so it's resolving the DNS entry to and IP, but that IP is inside your network range.