3 ms·

The statement doesn't exactly ring true. If your security practices are lax (as with the unlimited login attempts workaround) and someone gains access to someon

The statement doesn't exactly ring true. If your security practices are lax (as with the unlimited login attempts workaround) and someone gains access to someone else's private data, isn't that in itself a breach? Sure, they don't have access to internal databases or anything, but it's the difference between robbing the bank's vault and robbing one person's safe deposit box. A breach either way. On another note, does anyone else think they're going to have to talk about this first thing at the iPhone event? They have an opportunity to clear the air with all eyes on them, they'd be fools not to do so.

snowwrestler 12y ago
I think they would be fools to do that. It would set a negative tone from the beginning for the entire event, which is supposed to surprise and delight. The smart thing to do from Apple's perspective would be to slow-roll the breach story as much as possible until their September 9 event, then count on heavy coverage of the product announcements to drown it out.
- kelukelugames 12y ago
  I think you are right. Apple's job is to make higher profits, not to "clear the air" with the HN demographic.
deleted 12y ago
[deleted]
mikhailt 12y ago
> it's the difference between robbing the bank's vault and robbing one person's safe deposit box. The problem with your analogy is that in order to rob the person's safe deposit box, you must breach the vault. You cannot directly access to the person's safe deposit box without having open access to other deposit boxes either. That's a breach either way, regardless of your intended target. That's not the case with iCloud here, you can breach the customer's account directly without having access to other accounts. You can't use the overall iCloud system to gain access to any account you want. So, it's not a breach of iCloud, it's a breach of the customer's account, nothing more than that. With that aside, Apple needs to double up on their security stuff by locking out accounts after 10 tries everywhere at once, not just Find My iPhone. They need to get rid of the security questions/answers to replace them with random type of info that can't be glanced from other sources like these silly questions.

snowwrestler 12y ago

I think they would be fools to do that. It would set a negative tone from the beginning for the entire event, which is supposed to surprise and delight. The smart thing to do from Apple's perspective would be to slow-roll the breach story as much as possible until their September 9 event, then count on heavy coverage of the product announcements to drown it out.

kelukelugames 12y ago
I think you are right. Apple's job is to make higher profits, not to "clear the air" with the HN demographic.

deleted 12y ago

[deleted]

mikhailt 12y ago

> it's the difference between robbing the bank's vault and robbing one person's safe deposit box. The problem with your analogy is that in order to rob the person's safe deposit box, you must breach the vault. You cannot directly access to the person's safe deposit box without having open access to other deposit boxes either. That's a breach either way, regardless of your intended target. That's not the case with iCloud here, you can breach the customer's account directly without having access to other accounts. You can't use the overall iCloud system to gain access to any account you want. So, it's not a breach of iCloud, it's a breach of the customer's account, nothing more than that. With that aside, Apple needs to double up on their security stuff by locking out accounts after 10 tries everywhere at once, not just Find My iPhone. They need to get rid of the security questions/answers to replace them with random type of info that can't be glanced from other sources like these silly questions.