Can we talk about the apparent iCloud break-in?

Status
Not open for further replies.
I always like the batman detective styled images that come out of these leaks. People looking for moles, similar looking objects in backgrounds, identifying the other people in the shots off tattoos.
 
It's a lost cause lol 70,000+ people were watching the reddit live thread.

It was directed at his second statement and not the first

Is there any new info on whether this is an icloud security thing or whether the celebs were social engineered/phished?

People are claiming that the zips include guides to getting started to Dropbox. Some of the photos are from Android devices etc. it's hard to tell right now.
 
I think Mary E. Winstead says it well

" When I know how long ago it was, these pictures were deleted, then it is hard to imagine the scary effort someone has made to retrieve the pictures"

"For those of who are looking at pictures I have taken with my husband several years ago behind closed doors in our own home, I hope you feel good about yourself."

(translated back to english from a danish article)

Err...she made those comments in English on Twitter, no translation needed haha.
 
It's amazing that in 2014 that this shit is still happening, especially with celebrities who should know well by now that they'd be directly targeted for this stuff.

Catch the hacker, prosecute his ass to the fullest extent of the law for each account he got access to. Sue the shit out of Apple, especially if they were saving back ups of photos long deleted, don't allow anything to be automatically uploaded to cloud storage. PSA the shit out of this and maybe finally the public will get it through their heads and finally learn not to take naked pics or videos of each other or allow others to do this shit, maybe finally drill some sense in to some and save them from having their lives ruined by it... Probably not because people don't learn.
 
It's amazing that in 2014 that this shit is still happening, especially with celebrities who should know well by now that they'd be directly targeted for this stuff.

Catch the hacker, prosecute his ass to the fullest extent of the law for each account he got access to. Sue the shit out of Apple, especially if they were saving back ups of photos long deleted, don't allow anything to be automatically uploaded to cloud storage. Maybe perhaps people will finally learn not to take naked pics or videos of each other or allow others to do this shit... Probably not because people don't learn.

I don't think you can sue a company for making backups you've asked them to do.
 
It's a back up so it's going to contain deleted data. That is the whole point of a backup, if they didn't contain a snapshot of all the data at the point of the backup there would be no point in ever making backups.
If I intentionally delete something, though, I generally wouldn't expect it to be later backed up. I probably made the effort to explicitly delete it for a reason.

I'd think a backup is for data that I have otherwise left alone or updated.
 
I don't understand why people don't back up everything to an external hard drive. I would never upload anything to the cloud that had ANY chance of being hacked.
 
If I intentionally delete something, though, I generally wouldn't expect it to be later backed up. I probably made the effort to explicitly delete it for a reason.

I'd think a backup is for data that I have otherwise left alone or updated.

Unless I'm wrong, they were storing old backups. Say you took a photo yesterday and deleted it today, tomorrow you could restore the backup from yesterday, which had the photo, or the one from today which doesn't. The old backups need to keep the deleted photos in case you deleted them accidentally. "You probably deleted it for a reason" wouldn't cut it if you lost something incredibly valuable to you.
 
Past hacks show that having pictures on your phone can be costly enough, never trust in anything that stores everything out there on the net, that can be accessed and will be by someone at some point.

History has proven that.
 
If I intentionally delete something, though, I generally wouldn't expect it to be later backed up. I probably made the effort to explicitly delete it for a reason.

I'd think a backup is for data that I have otherwise left alone or updated.
They're not gonna change your backup after it's done, that's not how it works. If you didn't want anything saved for the future then you shouldn't back it up.
 
If I intentionally delete something, though, I generally wouldn't expect it to be later backed up. I probably made the effort to explicitly delete it for a reason.

I'd think a backup is for data that I have otherwise left alone or updated.
If I'm not mistaken, that was the main intent behind the "right to be forgotten" Directive of the European Commission.
 
I'm not victim blaming, but people need to enable Two Step Verification (Android, iOS). Without that, you're open to all sorts of vectors of attack. It really should be stressed more from the tech community, and it probably should be on by default for new cell phones.
 
Maybe this is some weird bullshit marketing for promoting the new movie Sex Tape? (Cameron Diaz and Seth Rogan)

That advert kept mentioning the "cloud".
 
The original leaker said he bought the initial leak for bitcoin from some guy claiming they were from iCloud.

So, if someone knew how to break into any iCloud account, how pissed would you be if your entire scheme was now going to come crashing down because someone wanted to post celeb nudes? You have a hack worth millions of dollars and you're selling celebrity nudes? That just doesn't add up.

I don't know... it makes me think, perhaps, all of these leaks have been done for a while and finally some guy has put up the money to purchase them from the guy/group who blackmails celebs.
 
Whoever the OG leaker is he better be better at hiding than the ScarJo leaker. Judging by the prison sentence that guy got then this guy wouldn't ever see the outside of a sell again.
 
I'm not victim blaming, but people need to enable Two Step Verification (Android, iOS). Without that, you're open to all sorts of vectors of attack. It really should be stressed more from the tech community, and it probably should be on by default for new cell phones.

I have that enabled on everything where it's possible but I wonder, is it really THAT protective? IF you were a good hacker isn't there a way around it?
 
I have that enabled on everything where it's possible but I wonder, is it really THAT protective? IF you were a good hacker isn't there a way around it?

If the two-step verification method requires a device you own (mobile phone) it would be very difficult to break.
 
Despite this and this and other problems with web-based services millions of people keep their credit cards linked with iTunes and, apparently, uploads pictures that they would rather not ever be made public.

Apple makes great hardware, and they have one hell of a brand over there, so if this is due to an Apple technical deficiency, the bad vibes from this may keep Apple execs up a for a few nights, especially if they announce their alleged phone/wearable brick and mortar payment system on the 9th. Fortunately, for Apple's execs and shareholders, people have a short memory and the convenience of paying for stuff via your phone/wearable and touch-id will be too appealing to resist.
 
Perhaps celebs should invest in buying Polaroid cameras. Seriously, how many times have we been shown that internet privacy is now a thing of the past. Maybe lessons will be learned after this historic leak.
 
If the two-step verification method requires a device you own (mobile phone) it would be very difficult to break.

Hmm. Not sure about that. There are some obvious vectors.

In particular, MS and Apple's 2FA relies more on phone numbers to receive SMS than an app or somesuch.

But there are now plenty of carriers that have their own IP based services for delivering said SMS (For example, TuGo in the UK). If a user doesn't know these services existed, they might not even have set up the user name and password for such a service. And as such a social hacker can find out security question information, go and set such services up based just on an account password, and then intercept the codes for 2FA.
 
This is why you shouldn't click on the naked photos of Jennifer Lawrence

There are a few different issues that a criminal act like this brings up, but before I get into them it’s necessary to make one thing clear: If you deliberately seek out any of these images, you are directly participating in the violation not just of numerous women’s privacy but also of their bodies. These images - which I have not seen and which I will not look for - are intimate, private moments belonging only to the people who appear in them and who they have invited to see them. To have those moments stolen and broadcast to the world is an egregious act of psychic violence which constitutes a form of assault.

Great article, brings up 3 points that I feel definitely needs to be addressed in lieu of some of the responses and reactions I'm seeing.
 
The front page of r/nofap is fucking hilarious today.

I lost it all said:
was going strong for a month solid. I had finally started to get my life back together, got a new job, got back into working out and boosted my confidence to super high levels. Then yesterday they dropped Jennifer Lawrence nudes and I lost it all in an instant. I relapsed; lost my job, my kids, and almost lost my home. This is a rough time, I dont know if I'll be able to make it through.

haha
 
Past hacks show that having pictures on your phone can be costly enough, never trust in anything that stores everything out there on the net, that can be accessed and will be by someone at some point.

History has proven that.
I said this exact thing yesterday and was scolded by friends for victim blaming.
 
Apple's in deep shit, regardless of whether or not the hacker just guessed their passwords or not.

Apple is responsible if people have little to no knowledge of security and used shitty passwords? This doesn't make any sense. No company is accountable for me if I use some shitty password and don't follow the recommended steps to secure my account such as two step verification.

I think Mary E. Winstead says it well

" When I know how long ago it was, these pictures were deleted, then it is hard to imagine the scary effort someone has made to retrieve the pictures"

"For those of who are looking at pictures I have taken with my husband several years ago behind closed doors in our own home, I hope you feel good about yourself."

(translated back to english from a danish article)

Probably didn't take any work? Probably just dumped what was ever on iCloud into individual photos. Then looked through everything and decided what to leak.
 
Status
Not open for further replies.
Top Bottom