Apple ZeroConf Holes: How Hackers Can Steal iPhone Photos

Usability-oriented zero configuration (ZeroConf) designs, with automatic service discovery "plug-and-play" techniques, give rise to security implications. A study focusing on Apple - the major proponent of ZeroConf - brings to light a disturbing lack of security: major ZeroConf components are mostly unprotected, and popular apps and system services are vulnerable to man-in-the-middle attacks.