3 ms·

Apple was good about privacy and security long before they ever started talking about it. They only started talking about it after the celeb "iCloud hack" (whic

by IBM 9y ago

Apple was good about privacy and security long before they ever started talking about it. They only started talking about it after the celeb "iCloud hack" (which turned out not to be an iCloud vulnerability [1]). The fact that they market privacy and security is a good thing if you care about those things. Previously you were just relying on their business model being different from Google's or Microsoft's, but now they're on the record (repeatedly) which also sets them up for a PR crisis if they back down from those positions. There are plenty of Apple haters that would jump at the opportunity. [1] https://9to5mac.com/2016/03/17/opinion-apple-pr-allegations/ https://9to5mac.com/2016/03/17/opinion-apple-pr-allegations/

bigbugbag 9y ago
The link you give is opinion from a pro apple website, which starts by stating "there was no hack" and "it has nothing to do with icloud security" then proceeds to describe a very common hack and point out some security flaw in icloud. Try using the official apple statement[1] next time which clearly states that it was a targeted attack and not a breach leading to a full leak. Of course it was a privacy issue (iphone automatically uploading pictures online) and a weak security design (no 2FA, no email warning of access from an unknown IP, no browser authentication, etc.). There is stronger security on accessing your humble bundle game library. Also there was a serious icloud vulnerability allowing for bruteforce attack and bypassing account lockout restrictions and secondary authentication[2][3], that it was not used for the fappening does not make it less real. [1]: https://www.apple.com/newsroom/2014/09/02Apple-Media-Advisory/ https://www.apple.com/newsroom/2014/09/02Apple-Media-Advisor... [2]: https://github.com/Pr0x13/iDict https://github.com/Pr0x13/iDict [3]:http://securityaffairs.co/wordpress/31749/hacking/idict-hack-any-icloud-account.html http://securityaffairs.co/wordpress/31749/hacking/idict-hack...

by IBM 9y ago

bigbugbag 9y ago

The link you give is opinion from a pro apple website, which starts by stating "there was no hack" and "it has nothing to do with icloud security" then proceeds to describe a very common hack and point out some security flaw in icloud. Try using the official apple statement[1] next time which clearly states that it was a targeted attack and not a breach leading to a full leak. Of course it was a privacy issue (iphone automatically uploading pictures online) and a weak security design (no 2FA, no email warning of access from an unknown IP, no browser authentication, etc.). There is stronger security on accessing your humble bundle game library. Also there was a serious icloud vulnerability allowing for bruteforce attack and bypassing account lockout restrictions and secondary authentication[2][3], that it was not used for the fappening does not make it less real. [1]: https://www.apple.com/newsroom/2014/09/02Apple-Media-Advisory/ https://www.apple.com/newsroom/2014/09/02Apple-Media-Advisor... [2]: https://github.com/Pr0x13/iDict https://github.com/Pr0x13/iDict [3]:http://securityaffairs.co/wordpress/31749/hacking/idict-hack-any-icloud-account.html http://securityaffairs.co/wordpress/31749/hacking/idict-hack...