Started By
Message

re: Hacked iCloud's led to all the celeb nudes today

Posted on 9/1/14 at 9:17 am to
Posted by CAD703X
Liberty Island
Member since Jul 2008
78049 posts
Posted on 9/1/14 at 9:17 am to
Just came in here to post



Where's color and all the Mac fanboys? I can't wait for them to spin this about how secure the apple ecosystem is and how the celebrities are at fault.. Not apple.

Apple and IBM partnership. Enterprise cloud security on a level God himself could never imagine.

Posted by jdd48
Baton Rouge
Member since Jan 2012
22079 posts
Posted on 9/1/14 at 9:23 am to
According to gawker, they're using a forensic tool called EPPB 3.0. Looks pretty powerful.

LINK
Posted by Scoop
RIP Scoop
Member since Sep 2005
44583 posts
Posted on 9/1/14 at 9:27 am to
I am shocked that you are in this thread being an a-hole.

At the risk of catching a bunch of emoticons from you, I'll defend Apple.

It seems unlikely that the hacker cracked all of these iCloud usernames and passwords. It was most likely a forgot your password exploit and the hacker used social engineering on non Apple email accounts.

Apple likely wasn't hacked, email accounts attached to iCloud accounts were.

Don't let that slow down your poo flinging, though.
Posted by CAD703X
Liberty Island
Member since Jul 2008
78049 posts
Posted on 9/1/14 at 9:29 am to
See post above yours
Posted by 21JumpStreet
Member since Jul 2012
14647 posts
Posted on 9/1/14 at 9:41 am to
I went and checked again and saw the 32 but it was know posted 14 minutes ago at the time I checked...
Posted by Scoop
RIP Scoop
Member since Sep 2005
44583 posts
Posted on 9/1/14 at 9:42 am to
That tool doesn't make sense. None of the features in the link would allow what apparently happened here.

It can only access iCloud without creds from a computer that has been used to access the iCloud account previously.
Posted by jeff5891
Member since Aug 2011
15761 posts
Posted on 9/1/14 at 10:10 am to
quote:

The Next Web reports that a Python script has appeared on Github that "appears to have allowed malicious users to 'brute force' a target account's password on Apple's iCloud." Based on a vulnerability in the Find my iPhone service, the software was able to repeatedly guess passwords very quickly in an attempt to find the right one. Usually multiple guesses lock accounts down, but the flaw in Find my iPhone meant that didn't happen.

The software sat on Github for two days, before appearing on Hacker News and then swiftly being patched by Apple today at 3:20 am PT. The Next Web has since tried using the tool, which now quickly locks accounts—suggesting that it does indeed brute forces passwords but has now been patched

Posted by CAD703X
Liberty Island
Member since Jul 2008
78049 posts
Posted on 9/1/14 at 10:30 am to
quote:

before appearing on Hacker News and then swiftly being patched by Apple today at 3:20 am PT.

Posted by Scoop
RIP Scoop
Member since Sep 2005
44583 posts
Posted on 9/1/14 at 10:30 am to
Yep. The stuff that is trickling out does make it look like a direct hack.

Ouch.

Better put them tittays behind a stronger password, ladies.
Posted by CAD703X
Liberty Island
Member since Jul 2008
78049 posts
Posted on 9/1/14 at 10:39 am to
quote:

Better put them tittays behind a stronger password



Blame the user.

Scoop..? Pray tell who allowed Jennifer Lawrence to select 123456 as her password?
Posted by jdd48
Baton Rouge
Member since Jan 2012
22079 posts
Posted on 9/1/14 at 12:36 pm to
quote:

The software sat on Github for two days, before appearing on Hacker News and then swiftly being patched by Apple today at 3:20 am PT. The Next Web has since tried using the tool, which now quickly locks accounts—suggesting that it does indeed brute forces passwords but has now been patched


Supposedly not all of the photos were from iPhones though. suggesting multiple attack vectors and accumulation over time.
Posted by iliveinabox
in a box
Member since Aug 2011
24115 posts
Posted on 9/1/14 at 1:39 pm to
Thank you apple
Posted by Asgard Device
The Daedalus
Member since Apr 2011
11562 posts
Posted on 9/1/14 at 3:46 pm to
This is why I cringe when state and local government executives and managers move to using gmail and other free services for more sensitive internal communications. They think it's more secure. Yeah, we'll see.
Posted by okietiger13
From Sea to Shining Sea
Member since Jan 2007
10271 posts
Posted on 9/1/14 at 3:56 pm to
quote:

Supposedly not all of the photos were from iPhones though. suggesting multiple attack vectors and accumulation over time.


Every smartphone uploads the most recent 2 GB or so of data to a "cloud" for all of the major carriers (AT&T, Verizon, Sprint, T-mobile etc.). You don't even have to sign up for it and you can't prevent it from happening.
Posted by jdd48
Baton Rouge
Member since Jan 2012
22079 posts
Posted on 9/1/14 at 4:34 pm to
Interesting - some top computer security professionals are doing their own digging, and are suggesting that an iCloud breach may not be the source of the leak at all. Rather, they're suggesting either an iCloud employee that was building their own collection of uploaded celeb files got hacked, or that Dropbox (which has both autoupload and soft delete features) was compromised.
Posted by Hu_Flung_Pu
Central, LA
Member since Jan 2013
22164 posts
Posted on 9/1/14 at 10:27 pm to
So apparently I don't Internet too well... Am I supposed to download these? How do I see them? This is a low point in my life...
Posted by CAD703X
Liberty Island
Member since Jul 2008
78049 posts
Posted on 9/2/14 at 6:29 am to
Search 'the fappening'


Posted by 21JumpStreet
Member since Jul 2012
14647 posts
Posted on 9/2/14 at 6:51 am to
reddit, search "celebrity name" leak
Posted by CAD703X
Liberty Island
Member since Jul 2008
78049 posts
Posted on 9/2/14 at 7:14 am to
quote:

suggesting that an iCloud breach may not be the source of the leak at all

How did the photos jump off their iPhone into the online world? Oh yeah when setting up the phone apple tells users to select the online secure backup option for important data.

Again apple isn't at fault though.. User error.
Posted by Hu_Flung_Pu
Central, LA
Member since Jan 2013
22164 posts
Posted on 9/2/14 at 7:47 am to
quote:

Search 'the fappening'


when I do that, it just goes to download sites. There is so much to sift through I don't know what's real on reddit....
first pageprev pagePage 3 of 4Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram