New iOS Mail Bug Allows iCloud-Like Popups to Steal User Passwords

[perkedel]

I'm still waiting for the iMessage bug fix. Was expecting them to release a minor fix for that, guess not.

heh.. i wonder how long it will take apple to fix this one. the imessage arabic bug is still out, though people said it's fixed in the 8.3b4.

 

[mateytate]

If you had 2-step authentication turned on and a unique iCloud password its not that dangerous anyway is it? I mean sure its not good but what can they do with it?

 

[Skoal]

Ever since I've had two step auth enabled I've felt pretty good about security but as mentioned it can be a hassle changing passwords/phrases. I have 3 devices and it's a procedure to change credentials. Especially since FaceTime and messages now require app spec passwords not to mention signing into the App Store, ITunes, etc. It's better than nothing though. I can't imagine having 9 family members with several devices each. That would require a workday to reconfigure haha!

 

[teaneedz]

You bring up a point worthy of further research. A stand-alone website would indeed benefit from a password reset, or even a single app, but how would that work on an account that affects more than one device/person? Resetting my iCloud password would affect several devices/computers (Macs, iPads, iPods, iPhones, ATV, etc) and 9 people.

Yep, it would not be a pleasant experience with multiple devices. I guess a password manager might help. I'd prefer to avoid an Apple ID PWD reset. I'd favor plain-text email for myself and not worry about the need.

 

[ardchoille50]

Yep, it would not be a pleasant experience with multiple devices. I guess a password manager might help. I'd prefer to avoid an Apple ID PWD reset. I'd favor plain-text email for myself and not worry about the need.

Oh, believe me, a password manager is a huge help in this regard. I would also like to see iOS have an option to remove HTML code and instead render all email as plain text. I was never fond of HTML mail.

 

[Mike MA]

Splendid... My wife would fall for that.

I hope that will not be adopted for iTunes/iTunes Match any time soon. Here I have to enter my passwords on a regulary basis for what reasons ever since Yosemite shipped...

 

[gnasher729]

No, it's actually "Load Remote Content" which I assume means more than images.

Turning off automatic loading of remote content is a bit of a pain for genuine mail with images and links, but it stops spammers who include single pixel images and know that a mail was received and the email address works when your mail client downloads the image. So it's always a good idea.