3 ms·
The link you give is opinion from a pro apple website, which starts by stating "there was no hack" and "it has nothing to do with icloud security" then proceeds
by bigbugbag 9y ago
The link you give is opinion from a pro apple website, which starts by stating "there was no hack" and "it has nothing to do with icloud security" then proceeds to describe a very common hack and point out some security flaw in icloud.
Try using the official apple statement[1] next time which clearly states that it was a targeted attack and not a breach leading to a full leak.
Of course it was a privacy issue (iphone automatically uploading pictures online) and a weak security design (no 2FA, no email warning of access from an unknown IP, no browser authentication, etc.). There is stronger security on accessing your humble bundle game library.
Also there was a serious icloud vulnerability allowing for bruteforce attack and bypassing account lockout restrictions and secondary authentication[2][3], that it was not used for the fappening does not make it less real.
[1]: https://www.apple.com/newsroom/2014/09/02Apple-Media-Advisory/ https://www.apple.com/newsroom/2014/09/02Apple-Media-Advisor...
[2]: https://github.com/Pr0x13/iDict https://github.com/Pr0x13/iDict
[3]:http://securityaffairs.co/wordpress/31749/hacking/idict-hack-any-icloud-account.html http://securityaffairs.co/wordpress/31749/hacking/idict-hack...