3 ms·
I don't think there was a technical vulnerability , my understanding was there some social engineering and poor security defaults that led to some high profile
by manquer 4y ago
I don't think there was a technical vulnerability , my understanding was there some social engineering and poor security defaults that led to some high profile accounts being compromised.
- thehappypm 4y agoIt was a technical problem. They didn’t throttle password guesses.
- manquer 4y agoYes poor design from Apple, However if your account had a long random passphrase and not something from your life[1] would it then have not been possible to compromise right ? I mean if users followed best practices it won't have been possible [2] --- [1] which could be known more easily than if you are a celebrity [2] Not trying to defend Apple here or absolve them of responsibility, but trying to differentiate a product hack (design choice and social engineering) from a pure technical compromise like a RCE or speculative execution which is developer purview and more interesting.
- thehappypm 4y agoAh yes, blame the user!