Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
You would just have to take screenshots by holding the home button and pressing the power button or manually write them down.

It was more in general as to what types of sites were accessed as like I said nobody is going to do general surfing in that manner.

Jaseone's right. Although it may be useful if you sent any URLs for odd websites you find
 
Nothing adds up here. Either you're not telling us the whole truth, or someone broke into your home and physically accessed your iPad.

I think you blindly accuse this "kid" you saw walking down the street, when you have no evidence that he did anything.

I don't know what to think about all this. My best assumption is that someone quietly broke into your residence without waking you up. In fact, it's the only explanation assuming you aren't lying to our faces.
 
i think whoever it was --

they tried to order all of girls stuff too from ebay, but i had not been logged in lately thank god

they tried to order designer bags, cover girl stuff, totes, lord and taylor coupons, in addition to ordering all the tech stuff from amazon

pls dont joke that this is my wife cause of all the girl stuff, she was right next to me from 9-11am...

endless.com/help

dealigg.com/story-lord-taylor-coupons

amazon.com/gp/help/customer/display.html

paypal.com/paypalmastercard/shopping

google search for l.e.k. consulting careers

amazon.com/business-law-text-cases-wests

ebay search for NFL tickets

contact.ebay.com/ws/eBayISAPI.dill?CustomerSupport

endless.com/juicy-couture-designer-bags-accessories

---------------- there are like 100 more websites theyve gone too, but i had to copy these by hand as i didnt want to turn the ipad's 3G / WIFI on at home

leaving for work now to try to upgrade the ipad to 3.4.5

thanks everybody for ALL of your help, smitt

amazon.com/moronccanoil-moisture-repair-shampoo

----------

Nothing adds up here. Either you're not telling us the whole truth, or someone broke into your home and physically accessed your iPad.

I think you blindly accuse this "kid" you saw walking down the street, when you have no evidence that he did anything.

I don't know what to think about all this. My best assumption is that someone quietly broke into your residence without waking you up. In fact, it's the only explanation assuming you aren't lying to our faces.

well than they had to have broken in, why would i make up a lie such as this?? for kicks?? im trying to save my ipad and info from being hacked and turned to you guys, and to also help others with this thread if something like this happens to them,

its not my idea of fun to waste my two last vacation days doing this on the internet, leaving our residence we were at on vacation, and i have told everybody the whole truth here -- what do i have to hide?? why would i hide it?? im consistent and all my stories match up....

and it might not have been that kid/male/youth, when i just looked at the URLs above, maybe it was a girl??? they tried to order girl stuff too...
 
This just doesn't make sense at all.

1. A hack of this nature would require serious skill, and while a neighborhood kid could possess those skills, it isn't something that he is going to do in a matter of minutes while standing outside the house.

2. Hacking WEP is easy, as far as getting access to the network and sharing an internet connection is concerned. Lot's of people can do this, but going deep into the network and accessing connected devices is another story entirely.

3. If that kid is so good that he can perform hacks like this one in just a few minutes, there would be other reports from locals about things like this happening to them. It would take practice, and lots of it. The cops would have said something about it being a regular thing in the neighborhood.

4. Most "hackers" learn their tricks from others who have perfected them and posted the information online for others to use. If this could be done at all, it wouldn't be a secret and I'm quite sure that some of the quite knowledgeable people on this forum would be aware of it.

5. You mentioned that your iPad is 3G . Mine is not, but my iPhone is. When it is connected to WiFi and then put to sleep, it disconnects from the WiFi network and defaults to 3G. Then when woken from sleep, automatically reconnects. Unless you had 3G completely turned disabled your iPad should behave the same way, making it virtually impossible for anyone to access it on your network.
-----

You seem like a nice guy, I'm not saying you're a troll or anything of the sort, but this is a stretch. More often than not, the simplest explanation is the likeliest explanation--and this kind of hack is FAR from the simplest of explanations.

It is far more likely that one of the following occurred:

1. You sleepwalk and simply don't know it. (Or your wife) Just because you received emails about the orders starting at 9am doesn't mean that's when they were placed. Those emails usually don't go out until the following day. Sleepwalkers typically have routines they experience when sleepwalking as there is some level of awareness at the time. If this is the case (and maybe it's not) then your routine would have to be different than it would be if you were at home, making it entirely possible that you accessed your iPad while sleepwalking because it was one of the few things with any familiarity around.

2. Someone broke into the house, located your iPad and placed these orders. This still doesn't make much sense because you still have an iPad, but it's much more likely than the kind of hack you are suspicious of.

3. MOST LIKELY: You have described yourself as being not so experienced a user (you didn't know what 1-click shopping was on Amazon), and your wife as being hardly able to use Amazon, let alone an iPad. You also said you were recently on Amazon ordering legitimate items. It is entirely possible and plausible that with 1 click purchasing turned on, you or your wife could have inadvertently placed orders for the items in question.

While it is obvious to me when I am placing an order on Amazon, it might not be to an inexperienced user (my mind is moving to a wife who is having trouble sleeping) who might just think they are looking at product descriptions, trying to find more information or trying to look at a user's buying history--or maybe just trying to learn how to use an iPad!

Sure, it's possible that you were hacked, and you should take all the necessary precautions to ensure that you are protected from that kind of attack in the future, but by it's nature the iPad is a very secure device and it is highly unlikely that yours was hacked.
 
5. You mentioned that your iPad is 3G . Mine is not, but my iPhone is. When it is connected to WiFi and then put to sleep, it disconnects from the WiFi network and defaults to 3G. Then when woken from sleep, automatically reconnects. Unless you had 3G completely turned disabled your iPad should behave the same way, making it virtually impossible for anyone to access it on your network.

As of iOS 4.0 the WiFi is persistent WiFi. Meaning it stays connected even if the screen is off. My 3Gs and my 3G iPad are both like this.
 
No, I wouldn't say the perp is female. Probably someone who bought the bags knowing they would have high resale value - essentially, selling stolen goods. That makes perfect sense if you think about it.

If you do believe that someone broke into your home (the general consensus), there's nothing we can do about it. Provide the proper authorities with as much evidence as you can. That's all you can do at this point. Stop embellishing your story here on MacRumors and actually be proactive in attempting to solve your problem. There's nothing we can do for you now besides convince you that this was not a software intrusion.
 
the confirmation emails started coming from amazon at 8:15am-10:45am, just before i checked the iPad at 11am.

pls dont joke that this is my wife cause of all the girl stuff, she was right next to me from 9-11am...

Oh noes! That is a gap of 45 minutes!

Also, did you get up to go take a dump or anything?

Are those confirmation emails just receipts or necessary to complete the purchase?

If they are just receipts, then the purchases could have been made in the middle of the night but were processed after the start of the next business day.
 
Last edited:
The vindictiveness and skepticism is due to the scenario you provided being entirely implausible.

It may be implausible, but how would you feel if something unexplained happened in his situation?

im afraid that if i sync it with my itunes on my work computer, if there was a trojan horse or something bad in one of the apps, it would back it up before it synced it...

I still stand by my previous statement about there being no keyloggers from legitimate apps in the App Store. As for iTunes, I don't think anyone has (or wants to) develop a way to manipulate iTunes. Plus, Apple issues a new version at least once a month. And, for a true feeling of securing the iPad, you would have to restore as if it was a new iPad. That means 4.3.5, no apps (other than what comes on it when you bought it), no wifi login info, no pictures, music, videos. Nothing. Then, reload the iPad with the apps that you want. I must admit the recent "Purchased" icon in the App Store helps if I wanted to put something back on the iPad.

- i am running 4.3.3

- i must have opened a malicious PDF in iBooks or Amazon, or viewed it on the web

- it probably installed jailbreakme on my ipad

I can end your fears about that right now. The only way to get JailbreakMe into the iPad through safari was to visit that one specific site. No one else would even know the code or how to get it to use it for other purposes.

Two other things as a side note: 1) I wasn't there when all of this happened, so I can't call BS or anything. Sometimes I just like to figure out riddles. But, you might actually want to take into consideration the possibility that you sleepwalk (sleep...move?). Just because you haven't known it to happen before, doesn't mean that it doesn't happen ever. I've been told that I talk in my sleep, but I've never argued myself awake in the middle of the night. :p

2) Don't just chalk this up as an isolated incident. That kid that you saw walking down the street could be the next Comex. In fact, here's a Forbes article about the jailbreaking protege. http://www.forbes.com/sites/andygreenberg/2011/08/01/meet-comex-the-iphone-uber-hacker-who-keeps-outsmarting-apple/
 
Does your wife use Moroccanoil shampoo? No hacker is going to hack into your iPad and order a bottle of shampoo even if it is over priced at $40 a bottle, there is no black market for that.

When you told your wife about this how did she react? Were you the first to suggest you must have been hacked or did she plant the idea in your head?

I'm sorry but there is no way you were hacked.

Also why would a thief bother looking for a coupon? Come on buddy bite the bullet and confront people who had physical access as it was one of them that did it, most likely suspect is your wife.
 
It may be implausible, but how would you feel if something unexplained happened in his situation?

I would assume that it was someone that had physical access to the device.

Were you the first to suggest you must have been hacked or did she plant the idea in your head?
 

Attachments

  • images.jpeg
    images.jpeg
    3.7 KB · Views: 830
Last edited:
You would have know if jailbreakme 3 was being installed. You would have been kicked out of the current app (Safari) and dropped to the homescreen and saw Cydia being loaded like an App Store app. You were not hacked. The PDF exploit was not used upon your iPad.

thanks Intell !

i did not see Cydia being installed at all, nor was i kicked out of safari :)

i searched my ipad for it too and nothing was found :)

----------

While the OP's story may or may not be true, I don't see any justification for dismissing the exploit linked to upthread. From what I understand, after reading the BSI press release, this exploit has only been recently identified and differs from the one out in 2010. It also states that it can be used to grant administrative privileges. (As for tricking people to visit malicious websites, it's not uncommon. I mean, I'm not a complete idiot, and I almost clicked on a pretty sophisticated Visa phishing email today.) If the central IT security service provider for the federal government in Germany is releasing a press release about it and says they're in talks with Apple for issuing a patch, I'm inclined to believe them.

However! It seems unlikely that this is what happened to the OP. As jaseone stated, the hacker(s) would have to be on your wifi network and get you to open a PDF while you are at this specific location. To go to these lengths just to order a couple thousand bucks' worth of stuff off Amazon seems to me to be a disproportionate amount of effort.

I think there's more. At any rate, it's livened up my Friday afternoon somewhat. Especially the mysterious character with a laptop. If he had one arm, I'd say we're ripe for a TV adaptation here. Not to trivialize your problems, OP, but at least your immediate danger has passed with a minimum amount of harm done.

thanks contiguous, i am at work syncing my ipad with the computer it was originally synced with...

i just got off the phone with iPad AppleCare technical support, talked with the nicest lady...

she wasn't sure what to do either... to restore and wipe it, or go ahead with the update from 4.3.3 to the new 4.3.5 that should address these issues with malicious PDfs and certificates...

so its downloading the 4.3.5 on my iMac which the iPad is synced with....

and it will either completely rectify the problem once the update completes download in 39 minutes

or i will get a rejection code error 1015, and that will prove my ipad was jailbroken ...

thank you to everybody who is helping me with this.

should i be downloading the 4.3.5 ... i figured it might help fix everything??

why restore if this takes care of it?? am i wrong anybody?? (you all have super genius powers - thanks :) )
 
This just doesn't make sense at all.

1. A hack of this nature would require serious skill, and while a neighborhood kid could possess those skills, it isn't something that he is going to do in a matter of minutes while standing outside the house.

2. Hacking WEP is easy, as far as getting access to the network and sharing an internet connection is concerned. Lot's of people can do this, but going deep into the network and accessing connected devices is another story entirely.

3. If that kid is so good that he can perform hacks like this one in just a few minutes, there would be other reports from locals about things like this happening to them. It would take practice, and lots of it. The cops would have said something about it being a regular thing in the neighborhood.

4. Most "hackers" learn their tricks from others who have perfected them and posted the information online for others to use. If this could be done at all, it wouldn't be a secret and I'm quite sure that some of the quite knowledgeable people on this forum would be aware of it.

5. You mentioned that your iPad is 3G . Mine is not, but my iPhone is. When it is connected to WiFi and then put to sleep, it disconnects from the WiFi network and defaults to 3G. Then when woken from sleep, automatically reconnects. Unless you had 3G completely turned disabled your iPad should behave the same way, making it virtually impossible for anyone to access it on your network.
-----

You seem like a nice guy, I'm not saying you're a troll or anything of the sort, but this is a stretch. More often than not, the simplest explanation is the likeliest explanation--and this kind of hack is FAR from the simplest of explanations.

It is far more likely that one of the following occurred:

1. You sleepwalk and simply don't know it. (Or your wife) Just because you received emails about the orders starting at 9am doesn't mean that's when they were placed. Those emails usually don't go out until the following day. Sleepwalkers typically have routines they experience when sleepwalking as there is some level of awareness at the time. If this is the case (and maybe it's not) then your routine would have to be different than it would be if you were at home, making it entirely possible that you accessed your iPad while sleepwalking because it was one of the few things with any familiarity around.

2. Someone broke into the house, located your iPad and placed these orders. This still doesn't make much sense because you still have an iPad, but it's much more likely than the kind of hack you are suspicious of.

3. MOST LIKELY: You have described yourself as being not so experienced a user (you didn't know what 1-click shopping was on Amazon), and your wife as being hardly able to use Amazon, let alone an iPad. You also said you were recently on Amazon ordering legitimate items. It is entirely possible and plausible that with 1 click purchasing turned on, you or your wife could have inadvertently placed orders for the items in question.

While it is obvious to me when I am placing an order on Amazon, it might not be to an inexperienced user (my mind is moving to a wife who is having trouble sleeping) who might just think they are looking at product descriptions, trying to find more information or trying to look at a user's buying history--or maybe just trying to learn how to use an iPad!

Sure, it's possible that you were hacked, and you should take all the necessary precautions to ensure that you are protected from that kind of attack in the future, but by it's nature the iPad is a very secure device and it is highly unlikely that yours was hacked.

i really appreciate all of your advice and in depth analysis, but why would i sleep walk and look for purses that are expensive to resell that ive never heard of, nor my wife??

also i hate sports, why would i try to buy NFL tickets on ebay or open ebay mastercards and amazon credit cards ... if i knew my ebay account and password??

all of the items in the ipads history URL's are very expensive items for resell it looks like and i would just pay for them through ebay or my credit card... i wouldnt try to open credit cards or buy any of these items and neither would my wife... and i wasnt on amazon since august 5... this happened on august 11, neither has my wife been on..

thanks you though for trying to help... anything or any answer is better than nothing and you guys blow away the geniuses at the apple store x 100000000

smitt,

PS - 23 minutes until 4.3.5 is done downloading !!
 
You weren't hacked. Someone physically accessed your iPad. That is what everyone in this thread is telling you, except this one fool who thinks a random kid with a laptop is "the next Comex". Get real.

Are you even reading the posts?
 
I order from Amazon frequently, occasionally at 3 am when sleep eludes me. I receive the confirmation of the order within minutes, as it is automated. I also receive email when the order ships.

Hackers I've known (one doing 4 yrs!) have explained alot as I'm seriously curious. Since UPS will often leave packages, unless it requires signature, the thief just grabs them if no one is home.

As far as being hacked or exploited -- if it were me -- I'd find a local computer repair shop or knowledgeable teacher. Let them tear it apart, look for trojans, check emails/history, etc.

I do find it odd your credit card bank would allow so many transactions in such a short period of time. I can easily do 5 figures a month yet if they see half a dozen transactions in X amount of time, I get a call. If no answer, the card is frozen until I call. I call in advance if i know I'll use it rapidly (like at a shopping mall).

Oh, do you have your computer set to log you into Amazon automatically? If not, keylogger sounds plausible

Last comment/question -- was any other site or account compromised? I notice PayPal was visited...
 
Does your wife use Moroccanoil shampoo? No hacker is going to hack into your iPad and order a bottle of shampoo even if it is over priced at $40 a bottle, there is no black market for that.

When you told your wife about this how did she react? Were you the first to suggest you must have been hacked or did she plant the idea in your head?

I'm sorry but there is no way you were hacked.

Also why would a thief bother looking for a coupon? Come on buddy bite the bullet and confront people who had physical access as it was one of them that did it, most likely suspect is your wife.

i was the one who saw we were hacked on the ipad with 9 safari windows open... explain that.

my wife uses biolage and has never heard of this crap...morccan whatever, neither one of us has ever sleep walked or done anything like this before and yes there were coupon websites in my history?? whether you like it or not, they are still on my ipad and neither of us did anything like this, i could never dream up something so crazy.

----------

You weren't hacked. Someone physically accessed your iPad. That is what everyone in this thread is telling you, except this one fool who thinks a random kid with a laptop is "the next Comex". Get real.

Are you even reading the posts?

yes im reading in order, thats why i havent replied to some yet...
 
Are those confirmation emails just receipts or necessary to complete the purchase?

If they are just receipts, then the purchases could have been made in the middle of the night but were processed after the start of the next business day.
 
How does having 9 windows open in safari prove that you were hacked?

Someone physically accessed your iPad and did all that, plain and simple, the only question that remains is who did it? Then only other choice is that you are doing this thread for the lulz.
 
PS - i just got off the phone with Amazon.com cause one of the items shipped from a 3rd party store,

they said that "1-click shopping" was turned on,

so all the hacker had to do was click it and not enter my password for items!!!

that is ALSO why he was not allowed to change the shipping address, cause he didn't have my password and "1 click shopping" was on.... thank God for that.

Dude, I do not believe it is possible to order this much stuff and never have to type in the password. I often have to retype mine just to order a $7.99 ebook.

I don't think there is one person here who would hesitate to wipe their iPad clean if something remotely close to this happened to them.

What I do DO think is plausible is that someone who stole an iPad might check out MacRumors to see if it is possible to keep all of a person's settings, like their saved passwords, while still preventing the owner of the iPad from tracking it down.

So, how do we know you are really you?
 
Dude, I do not believe it is possible to order this much stuff and never have to type in the password. I often have to retype mine just to order a $7.99 ebook.

I don't think there is one person here who would hesitate to wipe their iPad clean if something remotely close to this happened to them.

What I do DO think is plausible is that someone who stole an iPad might check out MacRumors to see if it is possible to keep all of a person's settings, like their saved passwords, while still preventing the owner of the iPad from tracking it down.

So, how do we know you are really you?

*******Well heres the update,

i WAS able to update from 4.3.3 to 4.3.5 on my ipad, im going to leave it like this for awhile, like apple suggested and if it doesnt work out, i can restore to factory settings....

i didnt get any error messages or 1015's or anything like anybody said...

like you all, i am boggled too... was i hacked on my ipad? who knows..

was stuff ordered from my amazon.com account that neither my wife or i ever ordered, yes...

did i take care of changing all my passwords? yes.

did the charges get reversed from amazon, yes.

did i get new credit and banking cards and accounts, yes.

am i going to change my home network from WEP to WPA2... you bet your ass!

thank you everyone who held my hand through this and helped... i would have never found out about the 4.3.5 update from the Apple Geniuses, so you all helped me very much -- thank you.

will i ever log onto my father's vacation home WIFI network even after it is being changed to WPA2 also?? NEVER!!!!!!!!!!!!!

will i apologize to that kid with the laptop, probably not, since i will never know what happened...

have a great night everyone, thanks again for all your help,
smitt
 
thank you everyone who held my hand through this and helped... i would have never found out about the 4.3.5 update from the Apple Geniuses, so you all helped me very much -- thank you.

Uh huh. Yeah, Apple kept it a big secret. I only found out because I plugged my iPad in and iTunes told me there was an update.

I still call one of two possibilities:

1) You are not who you say you are, and you've just swiped poor Smitt's iPad.

2) Your wife has a lot of anger she hasn't shared with you yet.
 
Uh huh. Yeah, Apple kept it a big secret. I only found out because I plugged my iPad in and iTunes told me there was an update.

I still call one of two possibilities:

1) You are not who you say you are, and you've just swiped poor Smitt's iPad.

2) Your wife has a lot of anger she hasn't shared with you yet.

wrong on both accounts :)

thanks goodnight.
 
That is what my money is on.

Yeah, me too.

"my wife wouldn't have been able to figure out how to use Amazon" (paraphrased)

If I was the wife, I'd order a few thousand dollars worth of stuff just to pay him back for that comment.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.