- My Forums
- Tiger Rant
- LSU Recruiting
- SEC Rant
- Saints Talk
- Pelicans Talk
- More Sports Board
- Fantasy Sports
- Golf Board
- Soccer Board
- O-T Lounge
- Tech Board
- Home/Garden Board
- Outdoor Board
- Health/Fitness Board
- Movie/TV Board
- Book Board
- Music Board
- Political Talk
- Money Talk
- Fark Board
- Gaming Board
- Travel Board
- Food/Drink Board
- Ticket Exchange
- TD Help Board
Customize My Forums- View All Forums
- Show Left Links
- Topic Sort Options
- Trending Topics
- Recent Topics
- Active Topics
Started By
Message
re: Apple denies iCloud breach for The Fappening
Posted on 9/2/14 at 2:04 pm to Spock's Eyebrow
Posted on 9/2/14 at 2:04 pm to Spock's Eyebrow
quote:
It's still unclear whether the lockout bug had anything to do with it.
you cant brute force an account that does not suffer from a "lockout bug" unless you are a REALLY good guesser
quote:
a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet.
i mean they are basically describing the components of a brute force attack right here^^^
you social engineer your way into finding the correct answers to the security questions then you have the ID. once you have the ID you brute force the account effected by the "lockout bug"
This post was edited on 9/2/14 at 2:06 pm
1
Posted on 9/2/14 at 2:31 pm to gmrkr5
quote:
you cant brute force an account that does not suffer from a "lockout bug" unless you are a REALLY good guesser
True, and that gets down to what the meaning of "breach" is. Getting in due to the lockout vulnerability is a breach in my book, and I would hope Apple thinks the same way and isn't drawing such a fine technical distinction between "breach" and "targetted attack". I think it's going to come out if it's the lockout vulnerability, and they'll look like real weasels for not owning up in this statement. If the lockout vulnerability wasn't responsible, they should've explicitly said so, explain they log login attempts and saw no such activity, etc.
JLaw and the rest should reveal their passwords.
Random ones probably could not have been brute-forced given Internet latency and the minimum requirements, which I read yesterday are 8 characters, upper and lower case, and digits. 
Page 1 of 1
Popular
Back to top
Follow TigerDroppings for LSU Football News