Heavy AirPlay gap: Users demand firmware update for old airport routers

After uncovering serious security gaps in the local streaming protocol AirPlay, users are asking to patch older devices. The group had supplied current products such as Macs, iPhones, iPads or Apple TV in recent months, but not the Airport series, which was officially set in 2018. This may be understandable due to age, but the devices are still in use for individual users due to their stability. Apple had also already patched after the device series.

Old devices, still popular

A group around the developer Gary Longsine now has one Petition on change.org Started to ask Apple for an update. This is good for both security and the environment. Specifically, it is all about Airport Express. The hardware was last updated in 2012 and is specifically there to connect audio devices – it offers access to AirPlay 2.

“Although the Airport and Airport Express devices were discontinued in 2018, they are still powerful, robust and durable. Many of them are still in use,” writes Longsine. So there is still a lively trade on Ebay. In addition to the pure WLAN function and the AirPlay-2 feature in the Express models, you can also integrate USB printers into the local network with the devices. Longsine also emphasizes Apple’s environmental engagement, which includes long -term support. “I urgently ask Apple to rethink the question of firmware updates for Airport and Airport Express and to examine the opportunity to publish security patches for these devices.”

Numerous unpaved devices

Due to the so-called Airborne gap, unpressed AirPlay devices-such as Airport Express-can no longer be used because they can be taken over comparatively easily. This also affects various loudspeakers, televisions and other entertainment devices for which there will probably be no patches.

As long as an attacker manages to get into the respective WLAN, he can take over AirPlay devices, according to the discoverers of the security vulnerabilities, and use it for further attacks. Since microphones are sometimes integrated in such accessories, eavesdropping attacks are at least conceivable, according to the security company Oligo. Longsines petition has almost 300 signatories to the current status.