tvOS does not provide a mechanism to disable Peer-to-Peer AirPlay

Originator:tom
Number:rdar://30527445 Date Originated:02/14/2017
Status:Open Resolved:
Product:tvOS + SDK Product Version:10.1.1
Classification:Security Reproducible:Always
 
Summary:
tvOS does not provide a mechanism to disable Peer-to-Peer AirPlay. Following the law of unintended consequences, anyone can attempt to connect to an Apple TV using P2P AirPlay, and this causes problems for the Apple TV owner because with support for HDMI-CEC, TVs will randomly be powered on and present a passcode for connection.

Steps to Reproduce:
Purchase Apple TV with Siri Remote
Power Apple TV on and perform initial setup
Enable OnScreen Code for AirPlay Security (or don't, the result is the same)
Use iPhone or other iOS device not connected to same wifi network and connect to newly provisioned AppleTV

Expected Results:
I would expect that Apple's actions would match its public statements on privacy and security and not allow such a blatant disregard for consumer privacy to be present on its devices. I would expect that this feature could be disabled.

Actual Results:
Neighbors attempt to connect to my Apple TVs at all hours of the day causing my TVs to randomly power on and consume energy as well as either wake people up or cause other annoyance during the day.

Version:
tvOS 10.1.1 / iOS 10.2.1

Notes:
I can reproduce this 100% of the time on any of my iOS devices. This question has been asked in public forums, and should be formally addressed by Apple.

http://apple.stackexchange.com/questions/264216/stop-unknown-devices-trying-to-connect-to-apple-tv

https://discussions.apple.com/thread/7723176?start=0&tstart=0

https://discussions.apple.com/thread/7697976?start=0&tstart=0

https://discussions.apple.com/thread/7763477?start=0&tstart=0

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!