Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Reportedly Aware of iCloud Flaw Six Months Before Hacking of Celebrity Accounts
- Thread starter MacRumors
- Start date
- Sort by reaction score
2FA might take time, but it doesn't take 6 months to develop code to lock out an account after a certain number of failed attempts. That's a standard feature that virtually every online service with a login does, even Macrumors. Apple just didn't take it seriously.
I'm sure you don't believe this statement is true.
I'm also sure Apple thought about locking accounts after X failed logins, but chose not to because of the overhead involved to deal with locked accounts. Of course, in hindsight that looks like a bad choice.
They should ban hacking, then no one would get hacked.
Nope, what they need to ban is computer use. If they did that, then everyone would be safe.
At least that seems to apply to everything else.I absolutely believe that they dismissed it as not important. The account doesn't even need to be locked. Just requiring a 15 minute wait would slow a brute force attempt to a crawl and render it useless.
lol, didn't even notice that when I reread for grammar after I got done writing it. Of course, I was dumping at the time, so hopefully I can be excused.
Dear oh dear
Apple have had 2 step verification on the my apple id site for ages i have no idea why they never implemented it for iCloud until after it was hacked.
Apple have had 2 step verification on the my apple id site for ages i have no idea why they never implemented it for iCloud until after it was hacked.
Even they admit that this was an ongoing thing. And there are only like 5 confirmed iCloud users in the whole collection.
----------
no one is really saying how it happened. except that Apple says they were not the targets of a massive network traffic etc that would be present during a brute force game.
But if it was security questions, phishing or something else, who knows. just like the truth is that, aside from maybe five folks that admitted they use iCloud, we don't know if that is what was 'hacked' or if it was email, google drive, dropbox etc
It's always bad Apple's
When have we seen a good one ?
It's understandable to say "I don't believe you, let my do my own tests, or I need more poof"
basically, customers are little guys to company security who reckon they know better than they do.
First, it was hacker's faults. You cannot blame Apple or the celebrities for being robbed of private information. No robbing is victim's fault.
Having said this I think Apple should improve its security, specially implement and force users to use 2-step verification, specially for a service like iCloud which stores almost everything, even the keychain of all passwords...
And celebrities, as all other users should have a better knowledge of what secure means. ie. beware of public wifis, use proxies, disable auto-connect and so on. Also use more complex passwords and different for each service.
It's always useful to remember this: http://xkcd.com/936/
Having said this I think Apple should improve its security, specially implement and force users to use 2-step verification, specially for a service like iCloud which stores almost everything, even the keychain of all passwords...
And celebrities, as all other users should have a better knowledge of what secure means. ie. beware of public wifis, use proxies, disable auto-connect and so on. Also use more complex passwords and different for each service.
It's always useful to remember this: http://xkcd.com/936/
Hard to feel sorry for spoiled brat celebrities who certainly don't mind sharing themselves with the public when it nets them millions of dollars. And, how stupid are they to post nudes on cloud servers? It's as bad as leaving your keys in the car and wondering why it got stolen.
This is THEIR own fault and I don't see why anyone should be crying for some snooty celebrities who posted compromising photos of themselves. Tough cookies.
This is THEIR own fault and I don't see why anyone should be crying for some snooty celebrities who posted compromising photos of themselves. Tough cookies.
Only 9 naked celebrities have contacted Apple about their leaked iCloud photos out of 100 million users...
can we say witchhunt/conspiracy/over-reaction?!?
can we say witchhunt/conspiracy/over-reaction?!?
Not only that, but in the case of a number of the celebrities there were only a couple pictures. When they have dozens of pix from one person it seems likely there was access to an account but if it's just one or two it could just as well be that they were made public by a pissed off ex boyfriend. Not to mention that a number of pictures are things like headless shots as well as "celebrity" pictures that don't look like any celebrities (or ones claimed to be a particular person that obviously aren't). No question a few accounts were accessed but beyond that small number the rest seems like the kind of leaks that have been happening on a regular basis for years.
There's a big difference between a few people on MacRumors talking about it and the mainstream media focusing on it. That's my point.
----------
much goodbye over nothing?
I see the grammar and spelling patrol are out in force.
----------
Yes, but if you know there is a murder/rapist roaming your neighborhood and you leave your doors and windows unlocked, that's pretty dumb. People shouldn't murder, rape, or hack, but they do. So better to be safe than sorry.
It's still an important and bad issue despite the numbers. Who knows how many other accounts might have also been compromised that simply didn't have something worthy enough to be publicly released or included in this particular release of the times (which was already specified to be just a limited sampling of what was obtained).
