4 ms·

>"hacked" by either the US or Saudi government You think the U.S./Saudi government can remotely grab pics from an iPhone? Apple has disclosed lots of security

>"hacked" by either the US or Saudi government You think the U.S./Saudi government can remotely grab pics from an iPhone? Apple has disclosed lots of security info saying even they cannot do this. The iPhone/iOS wasn't built in that way. I think the leak likely comes from someone close to Ms. Sanchez, or she fell victim to a phishing attack (or account recovery hack).

jonny_eh 8y ago
A hack is a hack
- toephu2 8y ago
  Forgot password is not a hack.
jayd16 8y ago
Just last week you could group facetime someone and get a audio feed without consent. Their security is not infallible.
thecatspaw 8y ago
Remember the fappening? It doesnt need to be remote grabbing, people just upload their nudes to the icloud. Maybe jeff did as well. While apple says they are end to end encrypted, I also assume they work with the FBI/whoever to catch owners of illegal content, so they probably would have a way to get the unencrypted content.
- gbear605 8y ago
  The “fappening” was done by phishing, not a direct hack on iCloud servers.
- fauigerzigerk 8y ago
  Photos and files stored in iCloud are not end to end encrypted: https://support.apple.com/en-gb/HT202303 https://support.apple.com/en-gb/HT202303
  - thecatspaw 8y ago
    Oops, I actually looked at that page, but misinterpreted it
- kkarakk 8y ago
  "working with" the fbi usually means the fbi provides hashes of images containing illegal content like child pornography and image providers give up any accounts that contain images with those hashes(google does it this way) they don't just give the fbi data access without a court order
  - thecatspaw 8y ago
    Sure, but to be able to create the exact same hash as the FBI you need to be able to access the unencrypted content.
    - mschuster91 8y ago
      Local client creates hashes and transmits them together with the metadata and the encrypted data, Apple compares incoming hashes with FBI/NCMC/... databases. Easy as that.
- toephu2 8y ago
  Please read my post again, my theory covers that: "or she fell victim to a phishing attack (or account recovery hack)."
sajohn6 8y ago
Have you read the latest Apple iO2 12.1.4 security updates? There are 3 escalation exploits, and at least one of them remote. Don't think for a second that major players can't dial in whenever they want.
rjf72 8y ago
Apple is part of the PRISM surveillance program [1] operated by the NSA. Internal slides from the NSA indicate that said program is capable of providing "extensive, in-depth surveillance on live communications and stored information" including email, video, voice chat, photos, and more. When Apple was first approached about their role in PRISM they, unlike other companies, chose to outright lie stating that, "We have never heard of PRISM." along with the typical boilerplate about not allowing any government agency direct access to their servers. NSA access is presumably 'facilitated' indirect, explaining why most of all claims specifically state 'direct access' in their releases. Other companies, for contrast, chose to offer misleading but technically honest responses. For instance Facebook said, "We do not provide any government organization with ~direct~ access to Facebook servers. When Facebook is asked for data or information about specific individuals, we carefully scrutinize any such request for compliance with all applicable laws, and provide information only to the extent required by law.". The point of this is that what companies say, especially as it relates to their involvement in government surveillance programs is pretty much meaningless. We live in a world where their lying about participation is not illegal, but telling the truth would be. Quite a dystopic reality in many ways. As an aside this is not to say that leaks came from the government, but rather that it's extremely likely that the government could trivially obtain access to Bezos' online devices if desired. And given his position in the national economy (let alone media and space industries), I would expect such desires have long since existed even if only for 'national security', which in today's world of wide net surveillance happens to overlap with dick pics. And from there all it takes is one bad actor who gets tempted by the potential value of direct evidence showing the world's wealthiest man cheating on his wife. [1] - https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%29 https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...
- sametmax 8y ago
  I find it amazing we have to repeat this again and again. People act like this never happened. I'm really wondering what's the cognitive mechanism that allows people to just discard enormous informations like this one.
  - primroot 8y ago
Tempest1981 8y ago
There was mention of Michael Sanchez: https://www.thedailybeast.com/bezos-investigators-question-the-brother-of-his-mistress-lauren-sanchez-in-national-enquirer-leak-probe https://www.thedailybeast.com/bezos-investigators-question-t... (Link at bottom of the medium post) So it may have been his mistress' phone that was compromised.
- toephu2 8y ago
  Thus my theory stands. It was someone close to them.

jonny_eh 8y ago

A hack is a hack

toephu2 8y ago
Forgot password is not a hack.

jayd16 8y ago

Just last week you could group facetime someone and get a audio feed without consent. Their security is not infallible.

thecatspaw 8y ago

Remember the fappening? It doesnt need to be remote grabbing, people just upload their nudes to the icloud. Maybe jeff did as well. While apple says they are end to end encrypted, I also assume they work with the FBI/whoever to catch owners of illegal content, so they probably would have a way to get the unencrypted content.

gbear605 8y ago
The “fappening” was done by phishing, not a direct hack on iCloud servers.
fauigerzigerk 8y ago
Photos and files stored in iCloud are not end to end encrypted: https://support.apple.com/en-gb/HT202303 https://support.apple.com/en-gb/HT202303
- thecatspaw 8y ago
  Oops, I actually looked at that page, but misinterpreted it
kkarakk 8y ago
"working with" the fbi usually means the fbi provides hashes of images containing illegal content like child pornography and image providers give up any accounts that contain images with those hashes(google does it this way) they don't just give the fbi data access without a court order
- thecatspaw 8y ago
  Sure, but to be able to create the exact same hash as the FBI you need to be able to access the unencrypted content.
  - mschuster91 8y ago
    Local client creates hashes and transmits them together with the metadata and the encrypted data, Apple compares incoming hashes with FBI/NCMC/... databases. Easy as that.
toephu2 8y ago
Please read my post again, my theory covers that: "or she fell victim to a phishing attack (or account recovery hack)."

sajohn6 8y ago

Have you read the latest Apple iO2 12.1.4 security updates? There are 3 escalation exploits, and at least one of them remote. Don't think for a second that major players can't dial in whenever they want.

rjf72 8y ago

Apple is part of the PRISM surveillance program [1] operated by the NSA. Internal slides from the NSA indicate that said program is capable of providing "extensive, in-depth surveillance on live communications and stored information" including email, video, voice chat, photos, and more. When Apple was first approached about their role in PRISM they, unlike other companies, chose to outright lie stating that, "We have never heard of PRISM." along with the typical boilerplate about not allowing any government agency direct access to their servers. NSA access is presumably 'facilitated' indirect, explaining why most of all claims specifically state 'direct access' in their releases. Other companies, for contrast, chose to offer misleading but technically honest responses. For instance Facebook said, "We do not provide any government organization with ~direct~ access to Facebook servers. When Facebook is asked for data or information about specific individuals, we carefully scrutinize any such request for compliance with all applicable laws, and provide information only to the extent required by law.". The point of this is that what companies say, especially as it relates to their involvement in government surveillance programs is pretty much meaningless. We live in a world where their lying about participation is not illegal, but telling the truth would be. Quite a dystopic reality in many ways. As an aside this is not to say that leaks came from the government, but rather that it's extremely likely that the government could trivially obtain access to Bezos' online devices if desired. And given his position in the national economy (let alone media and space industries), I would expect such desires have long since existed even if only for 'national security', which in today's world of wide net surveillance happens to overlap with dick pics. And from there all it takes is one bad actor who gets tempted by the potential value of direct evidence showing the world's wealthiest man cheating on his wife. [1] - https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%29 https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...

sametmax 8y ago
I find it amazing we have to repeat this again and again. People act like this never happened. I'm really wondering what's the cognitive mechanism that allows people to just discard enormous informations like this one.
- primroot 8y ago

Tempest1981 8y ago

There was mention of Michael Sanchez: https://www.thedailybeast.com/bezos-investigators-question-the-brother-of-his-mistress-lauren-sanchez-in-national-enquirer-leak-probe https://www.thedailybeast.com/bezos-investigators-question-t... (Link at bottom of the medium post) So it may have been his mistress' phone that was compromised.

toephu2 8y ago
Thus my theory stands. It was someone close to them.