You didn't even read the articles... People don't break into your iCloud account by guessing your username and password.
They break in using your security questions and other loopholes. If someone knows your real name, they can find just about any answer you have provided to the security questions that Apple asks.
Once they're in, they can re-direct your iCloud account, change the password themselves, and now you're locked out. It can be accomplished within hours. And, with access to your iCloud account, they can use Find my iPhone and Find my Mac to wipe your devices remotely without your consent, and then hold your backups for ransom.
It's also easy to brute force. As one of the websites states, for $200 I could buy an app that will brute force your account since Apple doesn't institute an account lockout when bad passwords are entered.
You should really do yourself a favor and read through the articles I posted. It's an eye-opener how insecure iCloud truly is.
Spectrumfox, what services do you use? In your line of thought, you should live in a cave because everyone is selling your data!
You didn't even read the articles... People don't break into your iCloud account by guessing your username and password.
They break in using your security questions and other loopholes. If someone knows your real name, they can find just about any answer you have provided to the security questions that Apple asks.
http://time.com/3318853/google-user-logins-bitcoin/
Why all the fuss about iCloud, when this Google story is a much bigger issue?
Anyone know what time this is airing tonight?
You didn't even read the articles... People don't break into your iCloud account by guessing your username and password.
They break in using your security questions and other loopholes. If someone knows your real name, they can find just about any answer you have provided to the security questions that Apple asks.
It's also easy to brute force. As one of the websites states, for $200 I could buy an app that will brute force your account since Apple doesn't institute an account lockout when bad passwords are entered.
Hah... anyone who actually believes Apple isn't collecting data in one form or another is as blind as a one eyed bat.
Seriously, Apple isn't your friend, they're a huge corporation. Their number one goal is to make money. PERIOD.
If you think Apple is any different than Google, or Microsoft, or Facebook, or... on and on... then you're flat out dilusional.
But, hey, keep drinking that Kool Aid and living your life in blisfull ignorance.![]()
Otherwise known as phishing. There is nothing wrong with iCloud's authentication system. Password reset, security questions, etc is used by every competent website. The problem is weak user passwords, the lack of two-factor education and people putting obvious things as their security question answers. None of that is Apple's problem. That's entirely on the users.
Apple has been caught selling user data too.
https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=apple sells user data
They are different. They have a different business model. It is clear to a 5th grader what the difference is.
While this is mostly true, Apple's primary problem is they don't allow users to come up with their OWN security questions. They have a stock selection of questions available for people to answer.
All you really have to do to break into an iCloud account is to write down these questions, find a target, and then find out the answers to all of the security questions.
Find the one that the target answered and you're golden.
Sure, which is why security questions should be done away with entirely. But again, that has nothing to do with iCloud being insecure. You can phish almost every major website through security questions.
Hah... anyone who actually believes Apple isn't collecting data in one form or another is as blind as a one eyed bat.
Seriously, Apple isn't your friend, they're a huge corporation. Their number one goal is to make money. PERIOD.
If you think Apple is any different than Google, or Microsoft, or Facebook, or... on and on... then you're flat out dilusional.
But, hey, keep drinking that Kool Aid and living your life in blisfull ignorance.![]()
Otherwise known as phishing. There is nothing wrong with iCloud's authentication system. Password reset, security questions, etc is used by every competent website. The problem is weak user passwords, the lack of two-factor education and people putting obvious things as their security question answers. None of that is Apple's problem. That's entirely on the users.
Since I'm not likely to remember them anyways, I usually put in gibberish and keep that info in 1Password. I'm not exactly sure why I save it, since it would be gone if I lost my password anyways, but there it is.
Next time someone asks me why I prefer Apple over Google, I'll tell them that I prefer buying Apple products, not being their product.
anyone who says they can brute force an account through a network connection is lying unless they already know the password is very weak already. Since many passwords ARE weak, they still stand not totally bad chance of logging in even within a few dozen loging attemps (if there are no lockouts).
Even through the "find my phone" no limit access, you think apple wouldn't notice the hundreds of thousand of login attempts on one account required to crack a long password? Even without a lockout, there is little chance you'd be able to do enough tries to crack the acount without Apple noticing.
Most brute force attacks are done directly on password files or data syphoned from a Web Site DB. Not through the new were your attempts will all be logged.
----------
Of course you can. That's not my point.
My point is Apple touts endlessly about how secure iCloud is, while at the same time users' iCloud accounts are being broken into on a hourly basis. Tim Cook gets on television and tells people what they want to hear so they'll feel comfortable buying his product.
It's all just lip service to sell more iPhone's. Apple's service is no more secure than any other service.
How are they "broken" in too. You choose a crap password, or used your Apple password and ID somewhere else that is easier to hack or you gave your password or Apple ID away through phishing, etc. None of this is directly Apple's fault; should Apple secure people's own computer too, even if its not running any Apple software?
Most brute force attacks are done directly on password files or data syphoned from a Web Site DB. Not through the new were your attempts will all be logged.
Next time someone asks me why I prefer Apple over Google, I'll tell them that I prefer buying Apple products, not being their product.
Well said.