Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
MacRumors Forums: Security Leak
- Thread starter MacRumors
- Start date
- Sort by reaction score
This.
I'll bet there are folks who only come here to ask questions when they can't load "Angry Birds 2" on their iPod.
And some of them might use same email and password on their bank/Paypal sites.
So if they don't happen to come by here, that gives the hackers a few weeks to empty their accounts out.
When other sites I belong to have been hacked they sent an immediate email with details and instructions to start changing passwords.
Seems like that should be standard protocol.
I got the "need to change your yahoo" email/notification this morning. I don't use yahoo email for this site though. Not iMessage/FaceTime because that is another account altogether for me.
It worked on my iPad. It didn't at first, but I hadn't enabled it on my iPad, which I thought I did. Once I did, worked like a charm.
Same here
I mean, will not be losing any sleep over this. Changed my pass. Thanks MacRumors for being open and honest.
Yeah, agreed. I live in a state (won't say here, dislike the place) that the DOR was hacked last year. SSN, financial info, DOB, etc. all hacked. Took over a month for them to make it known.
Not MacRumors fault. People need to take ownership of their own lack of security practice.
I tried doing this but then safari would not autofill the password, and i can't find it anywhere. Had to change it again via recovery.
did it just work for you?
I use the same password for some online banking accounts, what's someone gonna do with it? See that I ate at Panda Express for dinner and pay my credit card bill?
For the record, all the warnings and timeouts I received in the past were when someone hacked my account.
Someone explain to me why this is a big deal? In other words, so what if someone has my username and password here. So they can post as me and make snarky remarks about apple products?
It's not like my credit card info or SSNs are stored here. So what is the concern? Please explain.
----------
It's not like my credit card info or SSNs are stored here. So what is the concern? Please explain.
----------
If you don't know what happened there is nothing to announce. Maybe no personal info was accessed. If so, not a breach under most state laws.
Think it's a concern that they have your email too.
Some people may use the same password here and for other services that can be accessed with a email address, Paypal, google, apple App Store etc.
I changed my passcode for this and other sites. I am now using iCloud keychain and letting it make my pass codes. I also changed PayPal, eBay, and others. So they all have a different pass code. They also had different pass codes, but I would change 1-2 letters.
I just wish iCloud had an export option or something.
I just wish iCloud had an export option or something.
A lot of people will use the same email and pass code for other things. Many many years ago I did the same for my email account and eBay. I learned the hard way and thankfully it wasn't bad
Thanks for letting us know. I've not had an email about unauthorized access though. Have changed all of my passwords just to be on the safe side.
Any chance the forums will get SSL/TLS support? How are passwords sent currently when logging in?
Yeah but they would have to use the same username also and the bad guys would have to randomly try different sites. Not likely. I think the concerns are way overblown and exaggerated.
Unless an individual is specifically targeted for time consuming efforts by the bad guys I don't see the real danger from a forum password. Maybe spam. that's it via the email address. Easily handled via filters.
----------
So the bad guys will take thousands of emails and manually try various sites?
They will have automated methods to test matching credentials against target websites.
The worst they can do? Learn your email address, your user name, and your password. If your password wasn't created with a random generator, then they'd have an idea of how you choose your passwords. If you use the same username on any other sites, they'd likely be able to gain access to them. If any of those sites have security questions, they might be able to gain access to your answers. All of this information can be compiled and then used against juicier targets than web forums, where they can gain even more details about you. At absolute worst, this could lead to identity theft, leaving you to clean up a credit mess after a criminal went on a spending or activity spree, posing as you.
Is it likely that this would actually happen? It doesn't seem like it, but these types of things are unfortunately very common and their incidence only seems to be increasing. As the saying goes, "it isn't paranoia if they really are out to get you." Your information and identity has monetary value to a lot of people, so consider that they are indeed out to get you, and operate accordingly.
Well my email here and password do not match anything dealing with money or personal info on another site. And not because I'm careful. It's because the requirements to login are so different everywhere. I'm not worried.