3 ms·
Not just saved Apple, but Apple users too. Wasn’t the “fappening” rooted in hacked iCloud accounts with weak credentials? Imagine what juicy political targets a
by Lammy 6y ago
Not just saved Apple, but Apple users too. Wasn’t the “fappening” rooted in hacked iCloud accounts with weak credentials? Imagine what juicy political targets are out there using iPhones syncing with iCloud.
- danaris 6y agoiCloud wasn't cracked. They used social engineering to gain access to the accounts.
- hbosch 6y agoYou're right iCloud itself wasn't "cracked", per se, but the XSS exploit is (was) incredibly malicious and did not require any social engineering that I can see. https://samcurry.net/hacking-apple/#vuln3 https://samcurry.net/hacking-apple/#vuln3
- gowld 6y agoIs this linked exploit the same as the Fappening exploit?
- faceplanted 6y agoIt wasn't that, they did do password cracking, if I recall correctly iCloud itself had a limit on password attempts through the site but there was a way to attempt logins through the API that didn't have that limit which let them target those users for brute force attacks.
- wlesieutre 6y agoI think this was speculation at the time, but it later came out that they were phishing attacks which got access to iCloud accounts, and once you have that you have the person's device backups.