Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Right...I'm just saying that this would verify the type of hack, not that it would have helped prevent it. If they didn't get an e-mail then they probably brute forced the password. If they did get an e-mail then it was most likely the security question scenario

Obviously. But in any case you still need their username and that you get through social engineering only. And if you can social engineer the username, chances are you'll get security questions as well.
 
If you are vain enough to take nude photos,
Then you probably have an dumb password.

If you don't want nude photos in the world then never take them in the first place. No one on the list should be allowed to protest about pictures they took, no matter who they were intended for. If you don't mind your naked self then good on you and post em up where ever you want.

I take nude pictures of myself sometimes yet my password is 21 characters long, contains both cases, a number, a haiku, a hieroglyph, a gang sign and the blood of a virgin. Good luck!
 
The problem is rooted deeper than a security issue. Ask yourself why only women's photos were stolen.

How do you know it's only women's photos that were stolen? It was only women's photos that were leaked, although there were pictures of some boyfriends in them as well, but that doesn't mean only those were stolen.
 
How do you know it's only women's photos that were stolen? It was only women's photos that were leaked, although there were pictures of some boyfriends in them as well, but that doesn't mean only those were stolen.

I'll correct myself then. Why (mostly) women's photos were exploited. I haven't seen the pictures. But I'm guessing any picture with a man in it also has the female celeb. I am guessing that many just contain female celebs. I'm guessing none contain just a male celeb.
 
If you are vain enough to take nude photos,
Then you probably have an dumb password.

If you don't want nude photos in the world then never take them in the first place. No one on the list should be allowed to protest about pictures they took, no matter who they were intended for. If you don't mind your naked self then good on you and post em up where ever you want.

Really....

Let me see if I am getting this right:

Private pics should not be taken unless you are vain.

If you are vain then you are susceptible to creating a bad password

If your private pics are stolen and posted, then that is your fault for taking them.

If you don't mind taking naked pics then you should share them with the world.

So, the creeps who stole your private property have some sort of right to take it because it was there?

Why stop there...why not apply this to money you put in the bank. You put it there and if stolen, then you are responsible cause you could have kept it under your mattress. :rolleyes:
 
What are the security questions apple makes you use tho? "what is your mothers maiden name?" is not a good question for famous people. Does Apple let you use your own questions? If not, this is a flaw on Apple's part.

Edit: I just looked, you can't pick your own questions. Flaw on Apple's setup.
 
Where shall I get started...

Taking nude pictures of yourself and storing them in the cloud with a weak password.

If being stupid is the same as being a victim...I have nothing further to comment.
 
After working in and out of entertainment some of my career (and avoiding any residency south of San Louis Obispo) this comes as no surprise to me.

Avoiding name dropping here. The "name" celebs I have worked with, their brightness has been all over the map. Some are incredibly bright to one even know how to code. Others, if it wasn't bright, shiny and fun, they had nothing to do with it.

Unfortunately, the stereotype dumb blonde is alive and well. Most of these darlings have an entourage of people promoting them while also "servicing" from simple steward work to other domestic services.

If anything comes out of this scandal, we will see a type of "VIP IT" position in the celebrity community to watch a celeb's social media and cloud actions.
 
No, not ALL security systems can be hacked.

That's an urban legend.

Alll security systems humans WANT to use can be hacked for now (but by real hackers, not the script kiddies most people who claim to be hackers really are); although most banking systems are pretty safe so they're doing a pretty good job considering how much access they're required to provide.

The truly unhackable systems used to be a bitch to use :), getting better though with time.

There is a great pressure in society to keep systems easily accessible; another difficulty is the fact that systems that provide rapidly evolving services are harder to keep safe.

With biometrics now becoming prevalent in common devices, I think everything is about to become a lot more secure. Good!
 
I don't understand the `poor passwords` thing. So they just randomly guessed JLaw's password was "IamtheLAW" in the first guess? In case of a bruteforce the simplicity of the password does have influence, since they can run the x amount of most used passwords and shazam.

Of course the images could be distributed by ex-boyfriends, but I find it weird that all of a sudden these all show up in the same hacker/group.

I also don't understand they don't understand photostream. I'm not a user myself, but it's not as if it is going give access to random people, right? Or what am I missing?

Poor passwords meaning they're identical passwords to other accounts such as hotmail/Facebook or even obsolete social networks. Therefore there isn't just one way to get the info but multiple.

Photostream works on Mac/PC. It's installed with iTunes on Windows by default. Windows has so much malware that a simple backdoor could mean full, uncompromised access to this data ...

Basically, even if the information had come from iCloud, it's likely that they got the required information from loads of other sources rather than just straight-out bruteforcing. And at the moment there's a lot of ambiguity with what was leaked from where.
 
Why are so few people focusing on the fact that this part is totally Apple's fault?

Because that wouldn't have stopped them from gaining access via social engineering using public/easily obtainable informations about celebrities???
 
The problem is rooted deeper than a security issue. Ask yourself why only women's photos were stolen. And the significance of why so many posters here who are male are quick to point the finger.

and what would that problem be? if nude photos of men were SO desirable, they would be hacked too...by men to disgrace other men and by women who want to see the nude male celebs. but that's not the case.

don't try and act like this is some conspiracy against women...men are exponentially more driven by visual attractiveness than women are. so naturally it is no surprise that pornography is centered around nude women with men as an afterthought.

it's called sexual supply and demand. there isn't a demand for nude male photos or there isn't enough of a demand for people to act on it
 
I'll correct myself then. Why (mostly) women's photos were exploited. I haven't seen the pictures. But I'm guessing any picture with a man in it also has the female celeb. I am guessing that many just contain female celebs. I'm guessing none contain just a male celeb.

I think there were a couple with only males in them as well but yes mostly it was women. But the only reason I can see for that is female celebs are easy money where finding buyers for nude male celeb pictures would be harder.
 
No one has yet confirmed the the alleged find my iPhone exploit that was allegedly patched and this leak are related.

And they won't either, but Apple hasn't denied it either, if you read all they have said is this hasn't resulted in any 'breach', not that they didn't have a hole they have now patched. Of course it wasn't breached, people got in using passwords, they didn't hack their way in without passwords.

And another point, to all those people on here that were telling me these photos were not stolen from the iCloud, well it certainly reads to me as though Apple has confirmed they WERE.

We wanted to provide an update to our investigation into the theft of photos of certain celebrities. When we learned of the theft, we were outraged and immediately mobilized Apple's engineers to discover the source. Our customers' privacy and security are of utmost importance to us. After more than 40 hours of investigation, we have discovered that certain celebrity accounts were compromised by a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet. None of the cases we have investigated has resulted from any breach in any of Apple's systems including iCloud(R) or Find my iPhone. We are continuing to work with law enforcement to help identify the criminals involved.

So in one cleverly worded paragraph, they state no 'breach', but confirm celebrity accounts were accessed and photos stolen.
As I have already stated this IS Apple's fault due to their systems not being setup to lock your account after multiple incorrect password guesses.
 
they are full of ****, instead of telling the truth, they deny their fault, why the hell they patch the bruteforce hole of find-my-iphone yesterday if it isn't their fault??!
Everything they said was the truth.

(the just didn't say all of it)

:D
 
we humans are often the weakest link..
who wants to type a: VtkbWIKYwrÅrLNö2C8VZ-LCb'o password on their iPhone??
get rid of security questions, force 2FA/trusted device... and 3 tries you´re out!! :D
 
Credibility. If they directly lie or mislead on security issues, and are later found to be lying, then any future statements about security would be ignored. Transparency and truth lead to trust.

Credibility AND Sarbanes-Oxley. Publicly traded companies who lie about this sort of thing can find themselves in more trouble than Samsung in a trademark case.
 
Now all the fun is spoiled. So many media outlets get attention by Apple-bashing without waiting for the facts.

I wonder how many of them will post retractions as prominent as their accusations?

When Apple makes you use security questions which answers can be found on wikipedia for famous people, that is Apple's fault.
 
And yet still the only ones to blame in this situation are the hackers.

Doesn't matter who you think should be blamed, or who might be in the wrong. What matters is that there are many millions of kids/students/agents around the planet in many different countries who will do this for kicks/fame/money anyway. Some may even be employed by various national (or quasi-national) governments. Thus placing blame has essentially zero effect.
 
Nope still blame Apple partly, because it magically patched a security hole and THEN announced it was nothing to do with a security hole...

Anyway, it is their fault entirely for not blocking accounts after the wrong password was used so many times. That is inexcusable IMO.

Is it really Apple's fault when an ex-boyfriend passes around photos? And is Apple responsible for photos that weren't stored on iCloud? These photos were acquired in all sorts of ways.

The real mystery here is how Apple got tagged as the company solely responsible for the mess. The only explanation seems to be that Apple fixed a security issue in Find My iPhone around the same time this story broke. Some of the initial reports speculated that the two events could be connected. Over time the "may have" and "possibly" were dropped from articles and Apple was blamed.
 
There's nothing I can say that will educate you on why victim blaming is wrong, so I'll just give you a place to start if you're interested at all.

http://en.wikipedia.org/wiki/Victim_blaming

Well maybe I'm too much critical of myself because I always blame myself whenever I become a victim of any action. And I've read the article, worthless as it concerns mostly rape victims.

Have you not heard the phrase "Evil wins when good people don't do anything". Victim blaming is in our culture and to be honest, it works.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.