9 ms·
Money quote for the people that don't want to wade through ten pages of rant: During the second week of March 2012, a Dell Vostro notebook, used by Supervi
by saulrh 14y ago
Money quote for the people that don't want to wade through ten pages of rant:
During the second week of March 2012, a Dell Vostro notebook, used by
Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action
Team and New York FBI Office Evidence Response Team was breached using the
AtomicReferenceArray vulnerability on Java, during the shell session some files
were downloaded from his Desktop folder one of them with the name of
"NCFTA_iOS_devices_intel.csv" turned to be a list of 12,367,232 Apple iOS
devices including Unique Device Identifiers (UDID), user names, name of device,
type of device, Apple Push Notification Service tokens, zipcodes, cellphone
numbers, addresses, etc.
- taybenlor 14y agoIs there any evidence that this data comes from the source they claim? And is there some way to validate these are real UDIDs?
- mehrshad 14y agoSure - me. Both my iOS devices are on this list - confirmed both by name and UDID match. However, I renamed my iPad around last November after I started using it more in public, yet its original name (easy to find if you search for my HN nick) is the name listed. EDIT: Oh, and fwiw, law-abiding natural born US citizen here. But who am I kidding - LEAs don't give a toss about that.
- eli 14y ago...assuming this has any connection to LEA
- lylejohnson 14y agoHow does that prove that an FBI laptop was the source of this information (per the grandparent post's question)?
- AimHere 14y agoYour grandparent asked two questions. He answered the other one.
- CGamesPlay 14y agoDoes it have an APNS token? Is it possible to send yourself a push notification and see what app it appears to come from?
- bricestacey 14y agoYou need an appropriate cert for that.
- farnsworth 14y agoIt would be interesting if you and others with their device on the list could come up with a list of apps that you've had installed.
- yangez 14y agoThis is very disturbing. How did the FBI gain access to all this information? It should be locked up in Apple. From what I see, the NCFTA in "NCFTA_iOS_devices_intel.csv" looks like it stands for the National Cyber-Forensics & Training Alliance, which "functions as a conduit between private industry and law enforcement." (http://www.ncfta.net/ http://www.ncfta.net/) Is Apple willingly sharing personal information with the FBI through the NCFTA?
- muppetman 14y agoGood thing the announcement didn't say "A large monster from Mars radioed these in" - Imagine how upset you'd have been at NASA!!!! A bit of a dick way of putting it, but there's no evidence the FBI is involved in this other than some words in an announcement that could be by anyone with an axe to grind.
- Karunamon 14y agoI'm not sure why you're getting downvoted here, it's a valid point. There is nothing to prove this list came from the FBI, and I wouldn't put it above Antisec/Anonymous to get into a database of some popular iOS app, release the info, and then say it was from the FBI both to slag on the FBI and to stroke their e-peni^H^H^H^H^H^H^H ego.
- muppetman 14y agoNeither am I, but I suppose the humour was a little too barbed.
- mtgx 14y agoCouldn't an American request a FOIA for this to see what's the level of information gathering on iPhone users? Could EFF sue them for it or something to unveil more?
- eli 14y agoIf there is indeed an ongoing investigation, FOIA would not apply (reasonably enough).
- marcoamorales 14y agoholy shit.
- GrumpySimon 14y agoAnother important money quote: we trimmed out other personal data as, full names, cell numbers, addresses, zipcodes, etc. not all devices have the same amount of personal data linked. some devices contained lot of info. So the release "just" contains UDID's and zip codes.
- timdorr 14y agoActually, it appears to only be UDID's, APNS tokens, device name, and device type.
- gregcmartin 14y agoI have information this morning from source thats "in the know" that this is definitely a false-flag attack against the FBI. Non-gov researchers I know also attribute this to a possible hacking of an iphone/ipad application backend DB before Apple put in the UUID storing restrictions to the IOS api. I'm only bringing this to light because it is easy to fall for things you read on the Internet and get excited/theorize.