Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
true, but how would someone know what accounts to hack to get these photos?

If I have an Android phone and an newer iMac let's say. I connect my phone and import the photos using iPhoto. Would it then sync to iCloud if I had set it up? That's not a far fetched scenario.
 
No, those are just included in iBrute. You have to expand it yourself.

This is a hole that until it was fixed by Apple today existed from the beginning.

Which means you could easily get into anybody's account AND to all other passwords stored in iCloud Keychain.

You have no proof that existed sicne the beginning. You do love to go beyond the news don't you? Secondly, if you have a very long complex password, how on earth would they crack it, especially if they don't have your login name, go after Find my Phone for many year?

You don't think Apple would notice this activity? This kind of attack only truly makes sense because they were targetting accounts specifically.
 
true, but how would someone know what accounts to hack to get these photos?

From data like the address book grabbed from iCloud from other accounts.

----------

You have no proof that existed sicne the beginning. You do love to go beyond the news don't you? Secondly, if you have a very long complex password, how on earth would they crack it, especially if they don't have your login name, go after Find my Phone for many year?

You don't think Apple would notice this activity? This kind of attack only truly makes sense because they were targetting accounts specifically.

Do you really think that these people have very long complex passwords? I certainly don't.
 
Or as we have heard multiple times before. It is intentional and they just blamed it on iCloud.;)

What, you don't keep a bunch of nude selfies on your phone just to remind yourself of what you look like nude? :eek:

I imagine the vast majority of these photos were once voluntarily sent to some other person (perhaps allowing for some photos that may have been received under dishonest pretenses). Once a file is sent to someone else, you should assume that the contents of whatever you sent will one day become public.
 
I don't get why people are defending Apple on this one. You sound like you work for Apple's PR. At this point it is absolutely obvious that it's Apple's fault. They left their platform wide open for attacks like that.

And how did you decide that is the truth. All what it takes to login into iCloud account is a password and I bet you that most people use the same password for all their accounts. Now if you provide the correct username and password to any system it will log you in, this how passwords work.

Apple did provide 2 factor authentication and I urge every body who cares about their personal information to activate it. If you use that and then you loose your dats then you can say the apple might be at fault.
 
If I have an Android phone and an newer iMac let's say. I connect my phone and import the photos using iPhoto. Would it then sync to iCloud if I had set it up? That's not a far fetched scenario.

On the Mac ? You have to set up Photo Sharing and Photo Stream explicitly. They are off by default.
Assuming they use a Mac, I doubt the gals set up their Mac to share or stream their nude photos out.

Photo stream photos last 30 days I think.

There's a shot of Kate Upton's photos appearing in DropBox. So really the ladies could use any third party software they want, especially for Android. If folks have access to their PCs and/or Macs, it's also open to attacks if they are not careful enough.
 
I can confirm what Rigby said--I just tried it for myself and 2-step verification does not help protect your photostream. All you need is the Apple ID account name and password for photostream access.
 
I can confirm what Rigby said--I just tried it for myself and 2-step verification does not help protect your photostream. All you need is the Apple ID account name and password for photostream access.

Why would you set up PhotoStream when you're taking nude photos ?

My friend set up PhotoStream so that his mom can see his travel pictures from home.
 
From data like the address book grabbed from iCloud from other accounts.

----------



Do you really think that these people have very long complex passwords? I certainly don't.

I don't either. But, I'm tired of some people pushing this all out of proportions. If you have decent password, brute force hacking takes so long on the net that it will be noticed, regardless of this bug. Hackers prefer things that won't be noticed. It only makes sense if its targetted and people had short passwords. The only way to be targetted is if someone also had information on their login name. Every security issue takes a few things working together to really kick in.
 
That girl from The Hunger Games isn't even good looking in real life. Saggy boobies and fat thighs. Ew.

Just shows yet again that Hollywood is all fake BS and should not be supported.That's the REAL issue here.

^^ this. She's a 6 at best and no wonder why she's ticked as the reality is hard to have her fans take.

How lovely, judging her after explicit photos of her have been shared all over the internet, not sure if that makes you any worse than the original poster. Are you saying that Hollywood is just full of perfect looking men and women?

Big deal. Yes, Hollywood is full of what many feel are perfect looking women but leaks like this let the cat out of the bag in many cases.
 
Apparently some photos were "deleted a long time ago". The were probably taken from Photostream, if iCloud was the source.

Likely. Jessica Brown Findlay pics and vids include full exif including GPS data. Lots of sensitive stuff.
 
To tell you the truth I wish I took pictures of me and my wife 20 years ago butt naked. I have only fond memories of my wife's beauty pageant winning body and how skinny I was. This was before digital cameras became popular so taking your film for development was not the 1st option.

True geeks with a willing fashion model built their own darkrooms in the basement. You could buy all the chemicals (trays, paper, etc.) needed for B&W at almost any photo supply store. I even saw a couple cheap enlargers at the flea market. The high school had a very nice well equipped darkroom, but one had to know where the teacher was when one was developing interesting stuff.
 
Facial recognition software is pretty good, so it seems like it would be pretty easy to develop an algorithm to detect nudity so that if you take a nude photo and forgot to turn off PhotoStream, the iPhone would pop up an option box as to whether you want it uploaded or not.

It's also an argument for a "privacy" option for Camera, like in Safari. Where the photo can be sent to someone else, but is never kept anywhere on the Internet. To me, this seems to be the easiest way to go.
 
Apple is well known for its inability to build a decent cloud service. In fact Apple tried everything to avoid embarrassing Steve Jobs but they failed and also fell flat on their face trying to hide the problem with MobileMe. I know I gave them the benefit of the doubt, supported them with my $99 payment each year, as did thousands of other of my fellow Apple Loyalists, all in vain. A complete wasted effort. So bad that even Steve Jobs publicly admitted failure, a task so hard for him it compromised his self crafted image of success.

I have no mercy for the victims, since they believed the hype instead of doing the research and learning of Apples weakness in this area. Steve's narcissism overruled common sense. He portrayed Apple as a company that can do anything better than any other company. An outlandish position no other company has attempted to occupy. Apple makes some excellent products, but their map failure wasn't too much unlike the security problems with iCloud.

Yet I do give Apple lots of credit for their success in convincing a portion of their users to live in denial. Proof of that is readily witnessed by many of the comments in this thread. No other company has such a cult like user base. It's Jobs greatest achievement.
 
Apple is well known for its inability to build a decent cloud service. In fact Apple tried everything to avoid embarrassing Steve Jobs but they failed and also fell flat on their face trying to hide the problem with MobileMe. I know I gave them the benefit of the doubt, supported them with my $99 payment each year, as did thousands of other of my fellow Apple Loyalists, all in vain. A complete wasted effort. So bad that even Steve Jobs publicly admitted failure, a task so hard for him it compromised his self crafted image of success.

I have no mercy for the victims, since they believed the hype instead of doing the research and learning of Apples weakness in this area. Steve's narcissism overruled common sense. He portrayed Apple as a company that can do anything better than any other company. An outlandish position no other company has attempted to occupy. Apple makes some excellent products, but their map failure wasn't too much unlike the security problems with iCloud.

Yet I do give Apple lots of credit for their success in convincing a portion of their users to live in denial. Proof of that is readily witnessed by many of the comments in this thread. No other company has such a cult like user base. It's Jobs greatest achievement.

Apple's network services works pretty well for me so far. Haven't encountered any downtime personally even though I saw reports here and there.

I didn't try the original mobileme though.

If you looked at the last few months, I'd say they are doing pretty well considering all the open source holes exposed.
 
Seems kinda silly that people would go so bezerk over a couple of nipples. OMG, Jennifer Lawrence has nipples!!! :roll eyes:

Well, this will blow over in a couple of weeks and everyone will forget all about it. Nakedness is highly overrated.
 
And every privacy advocate would scream to high hell that the government was locking down your personal accounts!

Lolwut Government?

Verisign has this sort of expensive physical auditing and authentication when you get their top-end SSL certificates.

Also, Apple already does some of this authentication when you try to get a corporate developer account.
 
Yet I do give Apple lots of credit for their success in convincing a portion of their users to live in denial. Proof of that is readily witnessed by many of the comments in this thread. No other company has such a cult like user base. It's Jobs greatest achievement.

You mean that basically you are declaring everyone who is expecting a definite proof for the exploit being the issue a "user living in denial"? Even for you that is pretty pathetic.
 
I suggest those who don't think its a big deal to have intimate private photos bandied around the net, post picks of themselves bollock naked on twitter
 
These celebs might have the dough to buy these fancy gadgets, but having brains on securing them is another. The first thing I do when i purchase a knew apple product is edit my iCloud settings. I never ever let any of my pics in the albums on my phone go on iCloud. The only thing i send to iCloud is my contacts, calendar and reminders.

No pictures, documents or email which is private data is put on iCloud.
 
I enabled Apple's 2-step verification at the very beginning, but their system is broken - the verification code isn't always send to the target devices or even SMS. Usually I have to wait for a few minutes for the messages or pop ups to arrive. It's much much slower than that of Google's.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.