3 ms·
Spear phishing, by design, is intended to not look like junk mail. Maybe it's designed to look like it came from an agent? Maybe like it was from someone they h
by yumaikas 5y ago
Spear phishing, by design, is intended to not look like junk mail. Maybe it's designed to look like it came from an agent? Maybe like it was from someone they had hired to take care of their pets, or kids? If you're constantly busy (and it is my understanding that many celebrities are busy, at a bare minimum), and you don't want to think too hard about a particular thing, then a spear phishing attack could quite easily hit you, if your guard isn't up, and you don't consider technology to be a battelground.
- smoldesu 5y agoSounds like a security oversight on Apple's behalf then. iCloud should have 2FA enabled by default if it's so easy to trick the subconscious user into handing over credentials. Furthermore, it's already been confirmed that iCloud had multiple exploits allowing for brute-force and injection attacks[0] at the same time that the hacks happened, so it's definitely more feasible that an unpatched, full-disclosure exploit was abused instead of a couple hundred interns all clicking on the same spam email at the same time. [0] https://www.ibtimes.co.uk/icloud-accounts-risk-brute-force-attack-hacker-exploits-painfully-obvious-password-flaw-1481623 https://www.ibtimes.co.uk/icloud-accounts-risk-brute-force-a...
- acdha 5y agoYou might want to read up on the history: this is a key part of why Apple needed up the default experience because hectoring users about using strong passwords, not sharing them, etc. hasn’t worked. A lot of what we take for granted now was contentious at the time and it’s taken years to improve the balance in a user-friendly manner — and pointing out that they acted on problems years ago seems more like a positive than supporting whatever point you think you’re making.