Apple.co.kr Hacked?

[dejo]

If you want to find out who they are, go read any thread that discusses viruses in the microsoft world. I'm sure you'll find many mac fanatics loudly exclaiming how that could never happen on a mac. Make a list of the names and then examine it carefully, You might be surprised to find yourself on it.

Windows viruses don't work on Mac OS X so saying "that could never happen on a Mac" is kinda true.

But anyways, okay, let's hear some of these names...

(And then we'll see if they are respected members of the MacRumors community.)

 

[longofest]

Was your objection against Mac users saying we're perfectly safe? Or against Mac users saying we're safeER?

Neither. It is their actions and their auroa that worry me most. I worry that fellow mac users (and I do stress fellow, because I obviously am one) get too prideful about the lack of exploitations, and get lax in their security practices. Safari should NEVER have "open 'safe' files" turned on, for instance. Of course, I blame this more on Apple than mac users...

Inevitably, there will be a well crafted worm that crushes a lot of Mac users because they are less mentally prepared for it than battle-hardened Windows users are.

 

[swingerofbirch]

Actually they boasted that God Himself couldn't sink her...and it wasn't England as a whole...just the obnoxious White Star Line.

As for Apple's boasting, they are just stating facts, whether people agree that OS X is invulnerable or not. Nothing is impossible. At least...we haven't found the impossible thing yet.

What if Apple is right though? What if OS X IS the "Unstoppable Force"?? The mind boggles...

However without all of the details we'll continue to see this thread fill up with more radical ideas than a French Economic convention. Sooooo....

Patience lads...patience.

Thanks for the info mate.

Boggles the mind: the majesty of the ship tumbling towards the ocean floor in the middle of a frigid dark night. I wonder if it was God that sank the ship, or if it was the iceberg, or the foolish captain, or shotty engineering. Hard to say really. Maybe a little of each. I still don't understand why Rose let go off Jack's hand. How did she know he was dead and not just in a coma?

Now the QM2, there's a ship to behold. I would like to board her one day. I believe Cunard is the line that puts her out. Have you had the good fortune? I am assuming you are from the motherland because of your insights into Titanic....

 

[Squire]

Others have suggested that the Korean site(s) were targeted because they were easier prey, but the first Turkey-Korea connection that popped into my head was the 2002 World Cup. Korea and Turkey played each other for third place. Turkey won the game, which makes it unlikely that Turkish fans would harbor bitterness towards Koreans, but perhaps it was lingering animosity. I wonder if there's a significant Korean population in Turkey.

I don't think it has anything to do with Turkish-Korean ties. As others have suggested, it was likely an easier target somehow.

-Squire

 

[dejo]

Inevitably, there will be a well crafted worm that crushes a lot of Mac users because they are less mentally prepared for it than battle-hardened Windows users are.

Based on how we handled the Oompa/Loompa, which originated on these forums, I'm not overly worried. Word and measures will spread quickly.

 

[Squire]

Distant Possibility

I could be reaching here but is it possible that the apple.co.kr site isn't even operated by Apple? I know it sounds crazy but there's a company here (in Korea) that takes care of Apple sales. Call them a subcontractor, I guess. Perhaps part of their role is to take care of online sales (and the site in general) as well. Whenever there's an updated product, it takes ages for it to show up on the Apple.co.kr site. In fact, up until a couple of years ago, you couldn't even buy stuff from the Korean online Apple site.

-Squire

 

[weg]

Where exactly does one send the lawyers?

To hell with them, if you ask me.

 

[Goliath]

Actually they boasted that God Himself couldn't sink her...and it wasn't England as a whole...just the obnoxious White Star Line....

There's a belief amongst some that The Titanic never actually sank- that it's sister ship The Olympic was modified in the months beore the tragedy to look like The Titanic and sunk on purpose for the insurance payout.

 

[nagromme]

It is their actions and their auroa that worry me most. I worry that fellow mac users (and I do stress fellow, because I obviously am one) get too prideful about the lack of exploitations, and get lax in their security practices.

I don't see that. If people have good habits, then their "aura" won't change that. And if people don't, then they're already lax to begin with.

We can VERY much enjoy and appreciate being virus-free (who wouldn't?) but it doesn't mean that pride makes us "get lax." But if that worries you, I don't blame you for trying to help!

The people who say viruses cannot be written for the mac (and there are a lot of these people).. ... a lot of people said OSX was invulnerable.

I've never seen anybody say that, merely that it's much more difficult to make a Mac virus, and less likely to succeed... but I'll take your word for it

There's a belief amongst some that The Titanic never actually sank- that it's sister ship The Olympic was modified in the months beore the tragedy to look like The Titanic and sunk on purpose for the insurance payout.

Maybe, but I bet they got caught when they tried to sell the real Titanic...

 

[WildCowboy]

There's a belief amongst some that The Titanic never actually sank- that it's sister ship The Olympic was modified in the months beore the tragedy to look like The Titanic and sunk on purpose for the insurance payout.

This doesn't make any sense to me. HMS Olympic continued to serve for decades after Titanic sank.

 

[Demoman]

The hacker probably ran some software that scanned through a list of sites looking for a vulnerability.

Like Apache Vulnerability Scanner.

Mod Edit: deleted link to vulerability scanner... too prone to abuse.

This was an inside job. Korea for crissake. The more Apple gains on the Establishment, the more they will be attacked. Don't think so? You must be a Republican.

 

[Goliath]

This doesn't make any sense to me. HMS Olympic continued to serve for decades after Titanic sank.

If The Titanic was switched with The Olympic then it never actually sank.
Thus, The Olympic that sailed the world up until it was sold for scrap in 1935 would be The Titanic disguised as The Olympic!

 

[Soton Speed]

This doesn't make any sense to me. HMS Olympic continued to serve for decades after Titanic sank.

Try here

One of the co-authors actually disagrees with the theory.

RMS is the proper title, she was a Royal Mail Ship, not a part of His Majesty's Navy.

 

[cybermiguel]

just to stem the discussion, website hacks are common and are typically the result of poorly configured scripts or security holes in apache/php.

and defacement of a file doesn't necessarily mean the person could have run arbitrary code etc...

the fact that it ran under Mac OS X isn't necessarily relavent, and if it were a random Mac OS X site and not Apple.co.kr, it wouldn't have made page 1. Even with Apple.co.kr, it was somewhat debatable, but enough sites had picked it up already.

arn

I agree 100% with you, arn.

I still don't know why you people make such a circus around a flaw that happens even in the most secure UNIX servers (i.e. Linux, FreeBSD).

I would be surprised if I see a hack like the ones that hackers make to windows server in a unix server (any flavor).

And remember: Apache IS NOT the server itself...it's a part of it (that works under the 80 port and it runs on Windows and different unix flavors), so stop whiening about the security in Mac OS X. It's as safe as any other UNIX (and that says a lot).

 

[gman71882]

Windows and Linux Run sites are hacked and defaced every day... but when it happens to APPLE Everyone wants to broadcast the news from the top of Mount Everest!!!!!

Give it a freaking break... Apple has had a target on there head for the past 5 years and yet there has NEVER been a serious sercurity breach problem with OS X Server since its inception.

 

[AidenShaw]

I still don't know why you people make such a circus around a flaw that happens even in the most secure UNIX servers ...

Why a circus? In my mind, two major reasons...

1. We all know the Mac fanbois who do the hi-tech equivalent of "nyah, nyah, nyah!! Windows (Windoze, winblows, or other juvenile equivalents) has virii - Macs don't. nyah, nyah, nyah"

2. Apple has committed the potentially grave mistake of basing an ad campaign on the above - thus throwing down the gauntlet to the legions of hackers.

On the other hand, any potential security issue in Windows is page 1 news - even if it takes a Nubian princess riding a surfboard on the first day of a waxing moon to exploit. Fair is fair!

 

[kirk26]

Well, that what you get for using a unix based server. Better off with IIS.

 

[DMPDX]

I can't find any details of what the defacing code said. DOes anyone here know? Please pm me if you do. Im just curious.
-dsm

 

[Fiveos22]

Windows and Linux Run sites are hacked and defaced every day... but when it happens to APPLE Everyone wants to broadcast the news from the top of Mount Everest!!!!!

Give it a freaking break... Apple has had a target on there head for the past 5 years and yet there has NEVER been a serious sercurity breach problem with OS X Server since its inception.

This is the only place I have seen talking about an Apple site being hacked. It doesn't appear to be broadcaste from the top of Mount Everest.

Perhaps you should try adding some potassium rich foods to your diet to reduce your apparent hypertension.

 

[Fukui]

I could be reaching here but is it possible that the apple.co.kr site isn't even operated by Apple? I know it sounds crazy but there's a company here (in Korea) that takes care of Apple sales. Call them a subcontractor, I guess.

Yup, a few years ago the Korean store was just a link to a different site. Even the Korean one now looks like its not part of the "shared" apple store as the URL is different, and not using apparently webobjects like the US/EU/JP.

As an example JP is http://store.apple.com/0120-APPLE-1/WebObjects/japanstore/ the UK one is http://store.apple.com/Apple/WebObjects/ukstore/ and the SK one is http://www.applestore.co.kr/ .

When you do purchase something though, then it routes it to a webobjects server that is looks similar to the other ones.... Its seems like the front page was defaced then? Its probably just neglected.... much unfortunately like the Korean market.... apple could make lots of money there if they tried!

 

[wnurse]

Windows viruses don't work on Mac OS X so saying "that could never happen on a Mac" is kinda true.

But anyways, okay, let's hear some of these names...

(And then we'll see if they are respected members of the MacRumors community.)

I originally typed a response but never mind. I just realized you told me windows viruses don't run on mac (that is like computer 101). I'm pretty sure i never claimed that (i graduated with a degree in computer science so this is like basic knowledge to me). But that's ok.. before this discussion disintegrates into a "who can insult who better" match, i'll leave it alone. For those who saw the original post, well..

 

[Bakey]

Thanks for the info mate.

Boggles the mind: the majesty of the ship tumbling towards the ocean floor in the middle of a frigid dark night. I wonder if it was God that sank the ship, or if it was the iceberg, or the foolish captain, or shotty engineering. Hard to say really. Maybe a little of each. I still don't understand why Rose let go off Jack's hand. How did she know he was dead and not just in a coma?

Now the QM2, there's a ship to behold. I would like to board her one day. I believe Cunard is the line that puts her out. Have you had the good fortune? I am assuming you are from the motherland because of your insights into Titanic....

Sorry, and what's the point of your pointless ramblings?

To be fair from the phraseology you've been using, and indeed your username, makes me air on the side of caution as it's coming across as if you're from the motherland as you put it!

Hey listen, don't worry - it'll all clear up in the end, so there's really no need to be quite so bitter about it all...

Question to the mods :: Can we wasteland these responses, including my own?

 

[gauchogolfer]

even if it takes a Nubian princess riding a surfboard on the first day of a waxing moon to exploit. Fair is fair!

Link?



sorry, just got here from the May Desktop forum

 

[barstard]

On the other hand, any potential security issue in Windows is page 1 news - even if it takes a Nubian princess riding a surfboard on the first day of a waxing moon to exploit. Fair is fair!

Yeah, because this is a Mac site! And a rumours site at that, fairness is hardly even implied. If you want "fair", go to Fox News. Oh wait...

This is still nothing to do with a virus. If we look at that zone-h page look at the dozens and dozens of attacks this guy has done recently. Surely he is running a script or automated processes to find vulnerabilities wherever they occur. What would be alarming though is if Apple's Korean site was re-defaced. This I feel is unlikely. If any admin was to have his/her site re-defaced then it is curtains for them.

barstard.

 

[grockk]

It wasn't so much hacked as it was made awesome...

http://www.zone-h.org/defacements/mirror/id=3738607/

you are on the path to destruction, move on every zig!