Started By
Message

re: Apple denies iCloud breach for The Fappening

Posted on 9/2/14 at 2:40 pm to
Posted by Scoop
RIP Scoop
Member since Sep 2005
44583 posts
Posted on 9/2/14 at 2:40 pm to
Another thing worth noting is that this wasn't as simple as just taking pictures saved to photo stream. There were apparently videos and for you non Apple users, videos do not back up to photo stream. Those would have to come from phone back ups and apparently Apple's security set up does not allow back ups to be pulled down to a computer.
This post was edited on 9/2/14 at 2:47 pm
Posted by gmrkr5
NC
Member since Jul 2009
14891 posts
Posted on 9/2/14 at 2:50 pm to
quote:

Another thing worth noting is that this wasn't as simple as just taking pictures saved to photo stream. There were apparently videos and for you non Apple users, videos do not back up to photo stream. Those would have to come from phone back ups and apparently Apple's security set up does not allow back ups to be pulled down to a computer.



the videos are backed up to icloud, just not accessible via photostream. if you backed up your device to icloud then restored via icloud, your videos would be there.
Posted by Scoop
RIP Scoop
Member since Sep 2005
44583 posts
Posted on 9/2/14 at 3:00 pm to
That's what I'm thinking they would have to do. They would have to take an iPhone and restore it from the celebrity's iCloud back up. If they did that, they have a lot more than pictures.
This post was edited on 9/2/14 at 3:03 pm
Posted by jdd48
Baton Rouge
Member since Jan 2012
22079 posts
Posted on 9/2/14 at 3:23 pm to
Look closely at the semantics here - "None of the cases we have investigated has resulted from any breach in any of Apple’s systems including iCloud® or Find my iPhone. "

So, how many cases is that? 1? 5? 25? They've clearly left themselves room to walk it back by not specifying an actual number.
Posted by gmrkr5
NC
Member since Jul 2009
14891 posts
Posted on 9/2/14 at 3:25 pm to
Without a doubt
Posted by colorchangintiger
Dan Carlin
Member since Nov 2005
30979 posts
Posted on 9/2/14 at 3:31 pm to
quote:

Does Google?


nude photos are posted publicly on Google+ and no one ever sees them.
Posted by CAD703X
Liberty Island
Member since Jul 2008
78010 posts
Posted on 9/2/14 at 3:34 pm to
oh well...wasnt worth posting the first time
This post was edited on 9/2/14 at 3:36 pm
Posted by colorchangintiger
Dan Carlin
Member since Nov 2005
30979 posts
Posted on 9/2/14 at 3:35 pm to
Posted by ZereauxSum
Lot 23E
Member since Nov 2008
10176 posts
Posted on 9/2/14 at 3:55 pm to
quote:

Social engineering of some sort was used to obtain the IDs but a flaw in find my iphone allowed for the brute force attempts to occur. apple should have locked the IDs after multiple failed tries but it did not.


Agree with this.

I'm not a fan of strong password enforcement (it actually pisses me off most if the time), but Apple should have locked these accounts before the brute force attack succeeded.
Posted by ZereauxSum
Lot 23E
Member since Nov 2008
10176 posts
Posted on 9/2/14 at 3:58 pm to
quote:

of course they can, but even the bank that processes my student loan payments wouldn't let me have a password over 15 characters and wouldn't let me use symbols.


This. Every site will have it's own unique criteria, which will actually restrict what passwords people use.

Then what will they do? Correct, use the same damned password everywhere and be worse off.
Posted by Fireman17
Mississippi
Member since Oct 2010
11707 posts
Posted on 9/2/14 at 6:29 pm to
Bet they are doing this cause the big iphone 6 event coming up.. How much you bet after that it will be fact it was a icloud hack.
Posted by jdd48
Baton Rouge
Member since Jan 2012
22079 posts
Posted on 9/2/14 at 11:42 pm to
Whatever it is, they're dancing all around the issues. The fact is that there was an unchecked brute force vulnerability in a very sensitive system of theirs. That's a massive oversight on their part.
Posted by cave canem
pullarius dominus
Member since Oct 2012
12186 posts
Posted on 9/3/14 at 3:58 am to
quote:

all of these things can easily be enforced at the point where people are creating their password for the first time.



Please god no, passwords are already a huge pain in the arse. Biometrics is the way to go, nothing to remember or change on a constant basis.
Posted by BilJ
Member since Sep 2003
158757 posts
Posted on 9/3/14 at 1:23 pm to
Anyone have experience with roboform?
Posted by SG_Geaux
Beautiful St George
Member since Aug 2004
77957 posts
Posted on 9/3/14 at 1:31 pm to
Have not used it, but I use LastPass for managing passwords.
first pageprev pagePage 2 of 2Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram