Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
This is not an iCloud hack, breach, or brute. This story has been spun to (my guess) take away from the big even September 9th.

There isn't a single leak or a single hacker, these images originate from a small celebrity nude ring on the darknet. They typically require people to "buy-in" with an original image.

Considering that celebrities almost all use an iPhone, putting iCloud hack in the headline is sure to grab attention and make some people actually believe it.

If it isn't true, it will die off in a day and nobody will care.
 
This is not an iCloud hack, breach, or brute. This story has been spun to (my guess) take away from the big even September 9th.

There isn't a single leak or a single hacker, these images originate from a small celebrity nude ring on the darknet. They typically require people to "buy-in" with an original image.

Considering that celebrities almost all use an iPhone, putting iCloud hack in the headline is sure to grab attention and make some people actually believe it.

It is interesting that this leaked a week before Apple's event. Everyone is calling it an iCloud hack even though that's never been officially confirmed.
 
thus why the cloud should die for personal use

Definitely agree. I never use iCloud for my photos and can't see myself ever doing it.

In the case of these actors, unfortunately they may fall into the large realm of people who clearly don't fully understand how to use their phone (I, for the record, am not familiar with everything either so I'm not judging :) But I've seen/heard of people who haven't even backed up their phones.

As for Apple, I sure hope they find and fix what happened (if it was a breach and not as easily accessible as connecting someone to their accounts).

Cheers,
Keebler
 
If Apple didn't have a brute-force protection, it is not celebs' fault. We should wait and see...

Certainly not an excuse though. Don't celebs know the danger of taking explicit photos on a phone? Even if they weren't uploaded to the cloud, Touch ID can be bypassed and so can passcodes if the device is lost and not wiped in time.
 
Although, after looking at the script and playing around with it I highly doubt that's what even did it. I personally don't think these photos were taken from iCloud.

----------

Certainly not an excuse though. Don't celebs know the danger of taking explicit photos on a phone? Even if they weren't uploaded to the cloud, Touch ID can be bypassed and so can passcodes if the device is lost and not wiped in time.

Statistically the "brute force" script that only tested 500 passwords wouldn't have been able to work on all these accounts.
 
I enabled 2-step on my Google accounts earlier this year, and last night did the same with my Apple ID. I'm still thinking that this might not be a vulnerability in iCloud, however I am not as sure as I was last night when a friend asked about it. Now I'm a bit concerned.

I have it set up on my outlook.com, Dropbox, and Facebook. I know Apple did have the 2 step verification activated a month or 2 ago for a few hours for iCloud.com, so I hope they do this soon for good.
 
As the most widely read Apple news site, the delay was necessary to allow Apple sufficient time to begin developing their PR spin and to carefully approve the wording of this article. It is taking longer than usual to finalize the PR strategy because of the holiday. Likely an acceptable final version of the spin will be posted up here by early tomorrow afternoon - shortly after the lunchtime slide presentation.

No they're just doing their job for a change. Everybody else rushed this story out because nude celebrity pics generates lots of clicks and page views.
 
This is why I store all my nude photos in the most secure place possible my Microsoft OneDrive account.
 
That's a little defeatist I think. You should learn not to keep things in the cloud that you don't want other people seeing. Let's be honest, 99% of our documents nobody cares about. But that 1% can be some juicy stuff. Notice none of Jennifer Lawrence's emails or documents were leaked. At least not that I know of.

And quite frankly if your not a celebrity unknown hackers don't wants to hack your phone for possible nude shots.
 
Certainly not an excuse though. Don't celebs know the danger of taking explicit photos on a phone? Even if they weren't uploaded to the cloud, Touch ID can be bypassed and so can passcodes if the device is lost and not wiped in time.

Doubtful. The majority of people have absolutely no clue how their phone works, how security works, or what cloud storage actually does. They're given a vague, hand-wavy promise of "security" by companies like Apple that try to hide the workings of their systems from the user. Sometimes it's actually secure, sometimes it isn't. The public has no idea how to tell the difference and doesn't understand the risks.
 
Doubtful. The majority of people have absolutely no clue how their phone works, how security works, or what cloud storage actually does. They're given a vague, hand-wavy promise of "security" by companies like Apple that try to hide the workings of their systems from the user. Sometimes it's actually secure, sometimes it isn't. The public has no idea how to tell the difference and doesn't understand the risks.

That's very true, unfortunately. In a tech world, millions of people (from first world countries) continue clueless.
 
I don't think being a celebrity is worth being a target for all the horrible people out there. I'm glad I'm a nobody. :cool:
 
Chances are that celeb password security questions are ones that have answers you can find on Lougle.

Hadn't heard of lougle before. Checked it out, and it had a whole series of ads/popups that were able to get around adblock+. And that was before I had even done anything.
 
Doubtful. The majority of people have absolutely no clue how their phone works, how security works, or what cloud storage actually does. They're given a vague, hand-wavy promise of "security" by companies like Apple that try to hide the workings of their systems from the user. Sometimes it's actually secure, sometimes it isn't. The public has no idea how to tell the difference and doesn't understand the risks.

Well, the problem is that the more open and complex a system, the harder it is to keep it secured. Door keys or alarm systems get bypassed too, yet people still trust them.

A Good faith effort is what is mostly required for companies and reparation of they are in some real damage occured (lost money).
 
Celebrity endorsements. Great PR for Apple and the new Photos app which will try to store every user's high-res photos.

Think someone has tried to attack Apple pre the big event next week.

Think they have missed the target by miles.

Absolute joy for Apple.
 
Porn of celebrities raining from the clouds yay! LOL

I saw the Picts of Jennifer Lawrence and they were sort of cheap/ ghetto. She looks better dressed up. Nothing to see here.
 
Maybe I am wrong, nut it wasn't a "big vulnerability" at all. Basically, it was just random guessing attempts, and many cloud services were the targets.

Many of those pics come from Android.

If you have "1234" as password, than its your problem, not Apple's, not Google's.

The thing is: Apple should warn the user when someone fails to guess the password. I agree with that.

Why is "icloud" taking the heat? Clicks. No one gives a **** about Google or Microsoft.

A brute force attack can solve passwords more complicated than "1234."

iCloud is taking deserved heat because it absolutely should not be possible to brute force on Apple's services.

Stop victim blaming.
 
I enabled 2-step on my Google accounts earlier this year, and last night did the same with my Apple ID.
Unfortunately Apple 2-factor authentication still only protects the appleid site. All other services, like icloud.com, restoring device backups etc. still only require the password.

Whether or not this incident turns out to be related to icloud, I sincerely hope that Apple *finally* enables 2-factor for all iCloud services, at least optionally. iCloud has way too much sensitive information and functionality (such as finding and wiping devices) to be protected only by a password. And in most cases it's a weak password, since complex ones are not really practical (since iOS forces us to enter it on mobile devices quite often).
 
If it did come from iCloud, Apple is probably going to face some pretty steep fines/lawsuits regardless of the password strength.

And if next Tuesday's event does include a major mobile-commerce announcement, the breach will still be fresh enough in the minds of media, bloggers and consumers that they'll ask, "Can Apple be trusted with financial accounts?"

Has there ever been a hack of the credit cards that iTunes stores?
 
Celebrity endorsements. Great PR for Apple and the new Photos app which will try to store every user's high-res photos.

Think someone has tried to attack Apple pre the big event next week.

Think they have missed the target by miles.

Absolute joy for Apple.

Struggling to see it that way but yea...
 
I'm starting to have my doubts about this being an iCloud exploit at all.
1. Some of the celebs have said they don't even use an iPhone
2. Doubtful celebs used one of the 500 passwords in the brute force script
3. Quite a few of the photos have proven to be from Android devices.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.