4 ms·
XcodeGhost wouldn't have happened if developers weren't able to disable Gatekeeper and the iCloud hack was done with phishing for security question answers. ht
by IBM 11y ago
XcodeGhost wouldn't have happened if developers weren't able to disable Gatekeeper and the iCloud hack was done with phishing for security question answers.
http://gawker.com/feds-seized-chicago-mans-computers-in-celeb-nude-leak-i-1709153721 http://gawker.com/feds-seized-chicago-mans-computers-in-cele...
- gozo 11y agoThe iCloud hack was enabled by the automatic backup feature that despite storing very sensitive information didn't provide adequate security for doing so. If there were actual precedent for Apple caring about their users privacy, there would be outrage over this rather than being trivially dismissed.
- IBM 11y agoThat's not relevant at all to the iCloud "hack". It's a cloud service, the whole point is to store data online. Those accounts were breached because celebs were phished and not because of bruteforcing, as some people were speculating at the time, or some other vulnerability.
- muddi900 11y agoEveryone gets phished. Fraud happens. Secret Questions are especially susceptible to phishing attacks. This has been known for about a decade. Apple had not updated the security protocols for iTunes, and in turn App Store and iCloud, for that time. The hack was definitely Apple's fault. '"In total, the [500] unique iCloud accounts were accessed 3,263 times," the document states.' - http://www.businessinsider.com/fbi-investigation-into-the-fappening-reveals-mans-house-was-searched-2015-6?op=1 http://www.businessinsider.com/fbi-investigation-into-the-fa... This was a massive failure in Apple's part.
- gozo 11y agoYes, how can one trust a company's claims about privacy when the seemingly lose no trust over even such a high-profile incident? Celebrities phones has been targeted since at least the T-Mobile Sidekick.