Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
I don't know where this "unsolicited calendar invitation" comes from. I don't recall seeing any "invitations" over the past month (or ever). If it was there, it must have disguised itself pretty good as something else (like an ad to clear with an "X" button, you know the kind that sites like Forbes won't allow you to view their news articles unless you let them SPAM you to death with pop-ups and other god-awful ads. But I sure as hell got an add in my calendar for Ray-Bans. I found a solution. Turn off the iCloud mode! The iCloud sucks and is just a disaster waiting to happen. You put your personal information and backup your hard drive online, you pay the price when they HACK INTO IT LIKE THEY DO EVERYTHING. Yes, they could hack your personal computer, but what's a more juicy target? Your personal computer or the Cloud Service itself at Apple where tons of people have their information. It's why they target Windows desktops more than Macs. There's more "gold" there. iOS Cloud is a juicy target indeed.
Well, then realistically the same goes for many many people using pretty much any other online service for pretty much anything, like Gmail or Outlook for email, or Dropbox or Google Drive or OneDrive for storage, etc., etc., etc.
 
Well, then realistically the same goes for many many people using pretty much any other online service for pretty much anything, like Gmail or Outlook for email, or Dropbox or Google Drive or OneDrive for storage, etc., etc., etc.

Correct. And you'd be pretty dumb to put really important information (e.g. credit card data) in unencrypted emails in a service like Yahoo or Gmail. I had a small historic Inn in Canada do EXACTLY THAT to me once (I guess it's best to stick with the chains that know to put xxxxx instead).
 
You can delete these invitation via iCloud or on a Mac, I think. I deleted one my mom received by logging into the cloud, going to her calendar, and right clicking on the spam event. Won't stop her from getting them, but it's another method.
 
Too little too late. This should NEVER have happened and is yet another example of failure under Cook's "leadership". Tim wants to get cute with his social causes and focusing on making devices as thin as they can be all the while neglecting things under his watch. Then again Apple has NEVER done cloud or services right and this is yet another example.
 
Last edited:
It's not really much of a loophole either as much as just spammers sending event invites as spam rather than sending it all as regular email.

It kinda is. In the calendar app, there is no way to delete the event without accepting or declining it first. The way around this issue is to move it to a different calendar and delete the entire calendar. This is not the case with other services like Google Calendar, you can delete an event invite before accepting or declining.
 



Over the course of the last week, many iCloud users have been the target of spam that's delivered in the form of an unsolicited Calendar event invitation, and now Apple is working on a way to stop it.

In a statement given to iMore's Rene Ritchie, an Apple spokesperson said the company working to block spam invites.iCloud calendar spam isn't new, but there's been a serious uptick in calendar spam since last week. Because iCloud calendar invites are sent to an iCloud calendar automatically by default and there's no easy way to ignore them, there's no clear way to stop the spam.

icloudcalendarspam.jpg

Image via OS X Daily
Declining, accepting, or choosing "Maybe" on an incoming iCloud invite lets an iCloud email address is valid, so until Apple can put a stop to the spam, there are two fixes. First, by logging in to iCloud via a web browser and accessing the Calendar settings (Click the cog, go to Preferences, then choose Advanced), you can choose to receive all event invitations as email. Emails can be more easily ignored and deleted.

Second, you can create a new Calendar, name it Spam, move the spam invitation to the Spam calendar, and then delete the Calendar entirely. This method does not inform spammers that an event has been declined and does not verify an iCloud account's validity. For more detailed instructions, make sure to check out our how to.

Both iOS users that use the default Calendar app and those who use third-party calendar apps like Fantastical are affected by the spam issue, which appears to be fairly widespread.

Article Link: Apple Working to Put a Stop to iCloud Calendar Spam
 
Apple could stop both the email spam and calendar spam if they were to use the same blacklists that are used by Google, Rackspace and other top-tier email providers. I still get Oakley email spam and tons of other email spam that I never receive from my Google or Rackspace accounts. Never. If I do an email header analysis of any spam email coming into my iCloud email, I find that the sending IP is on multiple blacklists that other email providers utilize. Why Apple doesn't employ these blacklists is beyond me.

At the very least they should have an option to let iCloud users opt-in to stricter spam filtering and/or to allow iCloud users to reject emails from specific foreign domains like Russia and China.

The user provided spam tools on the iCloud email app are a complete joke.
 
You can also disable iCloud calendar events on your macOS and iOS device entirely, then use your Yahoo, Microsoft, or Google calendar to sync to the calendar app. Seamless, and you don't even know you're not using iCloud anymore.
 
Apple could stop both the email spam and calendar spam if they were to use the same blacklists that are used by Google, Rackspace and other top-tier email providers. I still get Oakley email spam and tons of other email spam that I never receive from my Google or Rackspace accounts. Never. If I do an email header analysis of any spam email coming into my iCloud email, I find that the sending IP is on multiple blacklists that other email providers utilize. Why Apple doesn't employ these blacklists is beyond me.

At the very least they should have an option to let iCloud users opt-in to stricter spam filtering and/or to allow iCloud users to reject emails from specific foreign domains like Russia and China.

The user provided spam tools on the iCloud email app are a complete joke.

My business email is hosted by Rackspace and I am not very impressed by their spam filtering. Not only is lots of spam sent to those addresses, blacklisting the offending domains and IPs by hand is not only necessary, it is a royal pain in the poop due to the lousy admin interface the provide.
 
Cut the apologist excuses. Jobs has been dead for 5 years. It's Cook's system now and has been since Jobs died. Cook has had 5 years to improve on their cloud platform offerings, but like with everything software-related, iCloud has suffered.
Just because someone doesn't experience the same issue as you, doesn't make them an apologist. Most users in the world are fine with their device. You're just acting childish.
Welcome to my ignore list.
 
  • Like
Reactions: darrynsmith
Why when a quick glimpse on the title it feels like Apple discontinuing the cloud service. It's a weird feeling maybe because of the news I recently Apple taking away from us.
 
Sorry my a$$. How about fixing iOS 10 as whole? The amount of bugs I face daily is just ridiculous and app quality feels like I am on an Android nowadays.
 
I got a couple. They were annoying, but not the end of the world. All Apple needs to do is offer some settings and options. Let us Delete and invite directly from the notification without notifying the sender. Let us pick a setting to only allow invites from known Contacts. Those two alone would fix most of it, I think.
 
I got a couple. They were annoying, but not the end of the world. All Apple needs to do is offer some settings and options. Let us Delete and invite directly from the notification without notifying the sender. Let us pick a setting to only allow invites from known Contacts. Those two alone would fix most of it, I think.

This, and a Report or Mark as Spam button would help catch a lot of this at the server side.
 
  • Like
Reactions: jbachandouris
I am getting them on my Windows 10 work PC with Office 365 Outlook. My calendar is all cluttered with webinars that I have no idea what they are about--they the reminders keep pooping--"starting in 10 minutes!"
 
One of the reasons I am still with Apple is because of their security over windows. If they cant even handle spam, what is there really left in Apple vs. Windows/Android?
 
You seem to keep on trying to make this "hacking" thing happen, but the reality just does't let it catch on given that nothing of the sort appears to have happened. But, feel free to provide some actual sources for any of that.
Then what do you think it is?! I have instincts that do work and I will always keep my guard up when others let theirs down.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.