4 ms·

There might be further reaching impacts that we don't know about yet.

• cookiecaper 12y ago
  True, but this is the kind of bug that one would never want to expose. A smart person (of the personality type to go into other people's private files instead of performing a responsible disclosure to Apple) would ride it out for years and leak content slowly, so that he continues to have unfettered access to the data of the 70 million+ Americans who use Apple computers or phones. Something like this would be worth millions. It's not something that gets thrown away unless the possessor is just absolutely, completely, ridiculously naive. My guess is that the photos in question came from a much more basic password guessing attack, which has historically been the case in these high-profile leaks, like the Scarlett Johansson leak that landed this guy in jail for 10 years: http://www.cbsnews.com/news/christopher-chaney-so-called-hollywood-hacker-gets-10-years-for-posting-celebrities-personal-photos-online/ http://www.cbsnews.com/news/christopher-chaney-so-called-hol...
  • nwh 12y ago
    > A smart person I don't think a smart person would do this.
    • cookiecaper 12y ago
      >I don't think a smart person would do this. I don't think a dumb person would be able to find a bug of this type in iCloud, which undoubtedly has thousands of people trying to break in around the clock. That's part of why I believe this was probably done with a much more basic, script-kiddie-accessible attack that essentially boils down to weak passwords and not a server-side technical flaw. Another interesting potential attack vector of a more accessible character would be sniffing the air in areas where celebrities congregate and looking for plaintext credentials going over http. That'd be a fairly basic way to perpetrate this kind of hack.
  • deleted 12y ago
    [deleted]