Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
So Apple says

In order to prevent a security threat like this from happening again, we’re completely overhauling our developer systems, updating our server software, and rebuilding our entire database

Why didn't you do this as routine maintenance to prevent anything like this from happening to this severity? Sure you can't make it 100% immune from attacks, but you could make the data 98% safe.
 
I've heard the hackers make their money when companies like McAfee need to find a way to get rid of the virus.

Excellent point. Yet, someone still has to make the viruses that the hired engineers/hackers fight. It'd be rather ironic if the very engineers who create viruses are also hired by virus companies to quarantine and destroy them.

Actually, that's rather brilliant.
 
So Apple says



Why didn't you do this as routine maintenance to prevent anything like this from happening to this severity? Sure you can't make it 100% immune from attacks, but you could make the data 98% safe.

Routine maintenance != "completely overhauling our developer systems"
 
Routine maintenance != "completely overhauling our developer systems"

You can completely overhaul something by working on it from a separate offline server, copying the data over, and then put up the Routine Maintenance screen while you change over to the new server (Or raid array) But because it was compromised, they took it down and will keep it down until they have a solution in place and everything all set.. Just like what happened to Sony during the PSN outage.
 
edit: Deleted due to new info that it was meant sarcastically.
 
Last edited:
Hopefully this doesn't effect iOS 7 Beta 4 release. But I think it most likely will. :(

I'm under the inpression that the iOS dev team and the security team are both separate entities, each doing their own things...
 
Still waiting for what? Waiting for no security issues to ever happen because it's easier to lampoon Apple when you start from a delusional position that they claim to be infallible, misappropriating a comment Tim Cook has clearly made good on for the word secrecy, or not being able to keep track of more than one word that starts with the letters sec?

Yeah, I guess I should have used the sarcasm font.
 
http://www.loopinsight.com/2013/07/21/apple-comments-on-developer-site-hack

First of all, this does not effect iTunes customer accounts—this is a different system and all iTunes customer information is completely safe, Apple told me.

It’s also important to note that the hacker did not get access to any app code or even the servers where the app information was stored. The hacker also did not get access to any credit card information.

The only thing that the hacker could have gotten access to was the names, email addresses and mailing addresses of the developers. At this point, Apple doesn’t know if the hacker even managed to see that information. Worse case, that is all the information they would have seen, according to Apple.
 
A complete rebuild of a database the size of Apple's, plus performing analytics to see what was accessed could take a week or more. Rebuilding a database the size of Apple's is no joke. If they are also restructuring the system, we could be looking at a Sony all over again. Sony was out for months. I doubt Apple would take that long, but start prepping your clients for lengthy delays and hope for the best.
 
This whole Apple vs Android fanboys thing is a little tiring for us normal people. Half of the comments are about how Android fanboys will hurt your feelings after this and you are already coming up with how you should fire back. Grow up and get a life! Both sides! The only thing that makes you a representative of either company is a malfunctioning group of cells in your brains.

Back to the actual topic, that's a pretty major fail on Apple's side. And before you jump into any conclusions, I'm an iPhone user.
 
Just got my email. It will be interesting to hear the details of the hacking - if they are ever released. I would hope Apple didn't have a weak system like Sony had.
 
this will hit news stations like a frenzy, android users are gonna gloat

Not Android users, Android zealots. If they do they should recall the saying about glass houses. It's not like Android hasn't been in the news lately for being vulnerable to viruses. Just saying.
 
Even though I'm a developer, I'm just happy Apple told us what was wrong instead of leaving us out in the cold.

Well, yes. But technically, they did leave us out in the cold for 3 1/2 days, which, if your life depends on the business, is a long time to be in the dark (to switch metaphors). And I still can't do anything, like enable Game Center on my app, which I really, really need to do soon.
 
This whole Apple vs Android fanboys thing is a little tiring for us normal people. Half of the comments are about how Android fanboys will hurt your feelings after this and you are already coming up with how you should fire back. Grow up and get a life! Both sides! The only thing that makes you a representative of either company is a malfunctioning group of cells in your brains.

Back to the actual topic, that's a pretty major fail on Apple's side. And before you jump into any conclusions, I'm an iPhone user.

Well considering android users are in no position to talk about security, I would have to agree and suggest the best thing to do is to simply ignore the posts. Also, I don't think this is a fail on Apple part. I doubt this was just a rogue hacker having some fun. Probably hacker groups in China on another barrage of cyber attacks. Have you forgotten government agencies have been hacked, the Associated Press itself was hacked not so long ago with a crazy tweet about the President being injured. I don't expect Apple to have more secure databases than that, we should just be thankful nothing important was taken (your mail addresses may provide to be a privacy concern but what are they realistically going to do with them?)
 
This kind of stuff is what has always worried me about CLOUD stuff.

Another big issue is jurisdiction. Can anyone tell me a could computing company that's bonded to at least admitting where they store their data physically?

If a cloud company, sub-leases server space to an overseas data house, your data could be compromised without any recourse if they don't have telecommunications law in their extradition treaties.

There are network and file system extensions that'll encrypt anything headed out of hardware that you own. At least have your IT install that.
 
It's unfortunate this happened. But Apple's a high profile target, I was thinking awhile back that it's only a matter of time before something like this occurred.

That Apple has decided to approach it in the manner they have is encouraging. Yet it seems to me that it's going to be quite a project. It will be interesting to see how long it takes to get it up and running again.

As a side note, I read every post prior to mine. It's rather sad that the Apple faithful themselves are the ones that brought up Android and bashed the users. Funny how it's the insecure group that always bring up Android... when it has nothing to do with the current thread.
 
Out of curiosity, does Apple use 128 or 256 bit encryption on their developer site?

It doesn't really make any difference. Both are currently unbreakable. 128 bit is considered unsafe for data that you want to keep safe for the next 50 years (like info about spy information that would be damaging if it was decrypted 50 years from now); but today the only way is to somehow get around the encryption.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.