Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Social engineering of some sort was used to obtain the IDs but a flaw in find my iPhone allowed for the brute force attempts to occur. Apple should have locked the IDs after multiple failed tries but it did not.

Wrong, the flaw in find my iphone ws not exploited in this hack.
 
It sucks that people have humiliated these women for their own gain.

In saying that, surely the victims here need to accept some role in their situation; they are not blameless as some would like us to believe.

It's a crap situation that could have been avoided: don't want nude pics of you spread, don't take them. There will always be ********** who'll try to exploit a situation -esp if you help present one for them.
 
All looks and no brains...
Clearly only women use weak passwords :rolleyes:

only women can have good looks?

while the OP comment may not be very nice to say to these "victims"... you are trying to turn it into a gender-based comment for what?

clearly the article is about certain celebrities that had their account "hacked" due to weak passwords - so clearly the OP's comment is targeted at these specific celebrities having no brains - which yes I have to agree, it is the year 2014 - if you do not know the risk of using a weak password by now and store nude photos that you dont want anyone to see using said weak password and you expect no one to be able to access them - you have no brains. However, it is more likely that these celebrities dont care about the "leaked" photos (or actually wanted the publicity of them being released - celebrity nude photo "leaks" happen all the time, pretty sure they are intentional)
 
Are you American? English is my first language, I just have a different opinion to yours and because you are not able to change my opinion to match your own, you ask if English is my first language? But I see many others on here have no problem with my comments, and others stating the same thing, I guess English isn't their first language too?

Appolo, you have a very selective lecture of what people are saying.

That the photos come from Icloud iand that Apple has a responsability in those photos being accessed, may be totally unrelated at all. You get that.

Extraordinary affirmations require proof.

The only proof would be in Apples logs. And believe, if they're like me, they keep logs for a very very very long time.

So, the only ones who can verify if there is a link is Apple and the FBI (they were seemingly called in) and they say there is no link.

If you don't believe Apple or the FBI, well, then can only be a conspiracy buff and then I can't help you there.. That's it.
 
It sucks that people have humiliated these women for their own gain.

In saying that, surely the victims here need to accept some role in their situation; they are not blameless as some would like us to believe.

It's a crap situation that could have been avoided: don't want nude pics of you spread, don't take them. There will always be ********** who'll try to exploit a situation -esp if you help present one for them.

The thing is though, we are simply assuming they used easy passwords or security questions.


Who knows. Maybe they didn't. Maybe hackers were somehow able to get their passwords which were not easy to guess through other methods.
 
It's a crap situation that could have been avoided: don't want nude pics of you spread, don't take them. There will always be ********** who'll try to exploit a situation -esp if you help present one for them.

I have a good one or two as well :) :

"If you don't want to be robbed - don't carry money around with you?"
"If you don't want to be killed - don't live".
 
Essentially impossible to guess for a human, but not for a computer.

8 random lowercase letters = 31.6 bits of entropy

Decently secure, but not great. A supercomputer at 1000 guesses per second could crack that in ~37 days.

Add 4 more lowercase letters and you're up to 47.8 bits of entropy. A supercomputer at 1000 guesses per second would need over 2.8 million days to crack that one.


Yup, if I were starting over I'd probably do a longer string of lowercase letters. Problem is if I redo it now Apple would almost certainly require throwing in capital letters, numbers, and special characters, all of which make inputting passwords a pain in the ash. Not worth it as nobody will be going to expend any energy to look at my hiking photos in the cloud.
 
Has anyone read this?

http://www.wired.com/2014/09/eppb-icloud

Would two step verification even protect you?
The way it's currently implemented by Apple, no. The secondary authentication code is only used at appleid.apple.com (e.g. when changing your password), or when you make an iTunes store purchase from a new device. For all other iCloud functions, including restoring an iCloud backup, the Apple ID and password is all that's needed.

BTW, you don't even need special software like EPPB. You can simply restore anyone's iCloud backup to your own iPhone if you know their password.
 
Problem is if I redo it now Apple would almost certainly require throwing in capital letters, numbers, and special characters, all of which make inputting passwords a pain in the ash. Not worth it as nobody will be going to expend any energy to look at my hiking photos in the cloud.

If you use 4 or more random words in your passwords, then an additional capital letter, number and punctuation mark (or two) don't need to be random. You can paint that portion of your password on a public billboard. Doesn't help, but likely doesn't hurt either.
 
You must be new here. Welcome!! :D

You mean "here" as in "internet"? As the mentioned type of replies are definitely not specific or exclusive to Macrumors but really most tech boards I've been reading over the past day or two, a lot of people (even so called "Apple haters") are blaming the celebrities for taking pics in first place.
 
I am a bit surprised that the risque photos get all the attention when it comes to this happening.

If someone gains access to a celebrity (or anyones) account they would surely download absolutely everything available instead of cherry picking a few photos. There is no doubt lots of stuff out there in someones hands that is worth a ton of money to many websites and newspapers. Vacation photos, contracts, movie scripts and so on to name a few of the obvious choices.

Also I think that sites like TMZs stance when it comes to this affair - where seemingly pretend to be on the celebs side - is hypocritical at best considering how they publish stolen and candid photos of the same group of people all the time. My guess is that they were bidding on some of this stuff but didn't come to an agreement, and it probably annoys them no end.
 
"If you don't want to be killed - don't live".

Everybody will get killed - if not by some criminal or drunk driver, then likely by some bathtub, bacteria, virus, other fatal disease or sudden heart failure.

However there are things one can do that seem to reduce the statistical odds of all of the above (suggestions from one's doctor, driving instructor, mother, local police, and etc.)

(Brought to you by the PR agency for non-slip bathtub mats. :)
 
Show me one cloud service that forces 2 step verification.

I don’t have to. The onus is on Apple to improve its security to prevent such highly publicised breaches again. For a company that claims that security is so important, Apple surely is slow with implementing additional protection for your accounts.

Apple already offers two-factor authentication for iCloud accounts.

Only recently and not everywhere and for everyone, it’s still being rolled out. It’s not available for my account.

This whole breach is embarrassing for Apple and I sincerely hope they learn from it. Google and Microsoft have been nagging me with additional security features all the time, Apple not so much.
 
Does yellow journalism work better? I could agree that bashing is the wrong term.

No it doesn't to be honest. It was a headline designed to get people to click on it. The headline asked a question and stated a fact. You interpreted it as yellow journalism. How you came to that conclusion I have no idea. It's obvious you see something that I don't. If the content of the article said Apple or iCloud was at fault then I could say it's yellow journalism and/or bashing.

So what would you consider this headline? Accurate? Misleading? Click bait? Evidence that Yosemite more liked than Mavericks?

Pre-Launch Adoption of OS X Yosemite 33 Times Higher Than for Mavericks
 
Yes, let's blame the victims and not the hackers.
If you want to blame the victims go ahead. I don't blame them for what the hackers did, and you're not going to get me to go along with you on that.

Yes, let's tell people to use weak passwords, because if you get hacked, then you become a victim and are not responsible for anything.
 
Last edited:
Why would a celebrity even have nude photos on their device? I guess they just like to take photos of themselves. (stup).

The real question is why did the handful targeted have 100's of photos of other naked celebrities on their account?
 
I have a good one or two as well :) :

"If you don't want to be robbed - don't carry money around with you?"
"If you don't want to be killed - don't live".

If you don't want to be robbed - don't carry money around with you hanging out of your back pocket

If you don't want to be killed - don't live in a high risk situation

There, fixed that for you.


Bottom line (pun intended) is, if you want nude snaps of yourself, fine, take some, but don't keep them on your phone or in the cloud where they are most vulnerable.

Securely kept data is not just reliant on a strong password.

While I have some sympathy for the victims, I also believe ignorance is not really an excuse these days.

People have to accept more responsibility for their actions, even if the consequences are far beyond what they initially imagined. The sad fact is in our cottonwool society is far easier to blame everyone else for everything than accept some responsibility personally. If you don't agree then you're part of the problem.
 
Last edited:
if it was a breach (brute force), would apple actually admit it?

wouldn't a third party have to prove it was a breach for apple to admit it?

the same would hold true for any company, not just apple

why would any company take the heat if they didn't have to?

Lying will actually let Apple taking bigger risk and though they can be obnoxious sometimes, Apple is not stupid, so no, in this case, I honestly believe them.
 
Appolo, you have a very selective lecture of what people are saying.

That the photos come from Icloud iand that Apple has a responsability in those photos being accessed, may be totally unrelated at all. You get that.

Extraordinary affirmations require proof.

The only proof would be in Apples logs. And believe, if they're like me, they keep logs for a very very very long time.

So, the only ones who can verify if there is a link is Apple and the FBI (they were seemingly called in) and they say there is no link.

If you don't believe Apple or the FBI, well, then can only be a conspiracy buff and then I can't help you there.. That's it.

No, I just have a different opinion to you, the same opinion as shared by others on here. And considering the hack was on an Apple system, I would blame them, but I guess you're going to only blame the hackers or the victim's right?
Apple aren't giving the full story, it will be interesting to see if they ever will.
 
Don't they? I think you can create your security questions for AppleID.
I couldn't. At appleid.apple.com I get only two choices of question: "In what city did your parents meet?" and "What is the first name of your best friend in high school?".

(Anybody who knows me would know the answers: "They never met since I'm a test tube baby." and "I'm a computer geek so I had no friends in high school.")

Just because they ask about your high school doesn't mean you have to use your real high school.

I never use my real birthplace for my "birth place" question. I use a location that only I know.

Also just because of my paranoia I don't use my real birth date when filling out most online stuff. I use a combination of day, year, and month from other people close to me.

Granted I don't make up a new birth date, and location every time I sign up for something, but I use the same fake ones - depending on the level of security I need.
How do you remember which answers you gave at each website?
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.