3 ms·
There is an interesting comment at techcrunch: http://fyre.it/tjlVmC.4 http://fyre.it/tjlVmC.4 "[...] One of those bugs have provided me access to users detai
by johansch 13y ago
There is an interesting comment at techcrunch:
http://fyre.it/tjlVmC.4 http://fyre.it/tjlVmC.4
"[...] One of those bugs have provided me access to users details etc. I immediately reported this to Apple. I have taken 73 users details (all apple inc workers only) and prove them as an example.
4 hours later from my final report Apple developer portal gas closed down and you know it still is. I have emailed and asked if I am putting them in any difficulty so that I can give a break to my research. I have not gotten any respond to this.. [...] "
- cromwellian 13y agoLooks like Apple is using Google Web Toolkit, those are GWT RPC responses. He probably found an CSRF attack.