re: Apple denies iCloud breach for The Fappening

quote:

---

you cant brute force an account that does not suffer from a "lockout bug" unless you are a REALLY good guesser

---

True, and that gets down to what the meaning of "breach" is. Getting in due to the lockout vulnerability is a breach in my book, and I would hope Apple thinks the same way and isn't drawing such a fine technical distinction between "breach" and "targetted attack". I think it's going to come out if it's the lockout vulnerability, and they'll look like real weasels for not owning up in this statement. If the lockout vulnerability wasn't responsible, they should've explicitly said so, explain they log login attempts and saw no such activity, etc.

JLaw and the rest should reveal their passwords. Random ones probably could not have been brute-forced given Internet latency and the minimum requirements, which I read yesterday are 8 characters, upper and lower case, and digits.