Can we talk about the apparent iCloud break-in?

Status
Not open for further replies.
Hmm. Not sure about that. There are some obvious vectors.

In particular, MS and Apple's 2FA relies more on phone numbers to receive SMS than an app or somesuch.

But there are now plenty of carriers that have their own IP based services for delivering said SMS (For example, TuGo in the UK). If a user doesn't know these services existed, they might not even have set up the user name and password for such a service. And as such a social hacker can find out security question information, go and set such services up based just on an account password, and then intercept the codes for 2FA.

Untrue. You can set up verified icloud devices to receive messages through an Apple notification and not regular SMS.
 
This is why you shouldn't click on the naked photos of Jennifer Lawrence



Great article, brings up 3 points that I feel definitely needs to be addressed in lieu of some of the responses and reactions I'm seeing.

The term 'closing the stable door after the horse has bolted' applies here. People are going to see these pictures especially as nearly every so called 'clean' news and celeb site are reporting this leak. While at the same time denigrating places like 4chan and Reddit even the article you've posted has jumped on the bandwagon of joining in this circus.

These are indeed private moments but that's what unfortunately makes them even more sought after.
 
I wish I was appalled by the leaks, I really do. It's not fair that they (the celebs) have to go through this and they must be feeling pretty shitty at the moment.

But, because of the bastard I am, I'm mostly disappointed that I know about 2 celebs on this list and wish something like that had happened years ago when I was a bit more aware of modern culture and used to scour the internet looking for nudes of my favorite celebs...

But, as I said, I wish I was appalled, I really should be.
 
Jessica Brown Findlay is clearly a part-time urologist, which is why she was getting such a good look in that photo.

In all seriousness (not really) if I was them I'd combine funds and build a rocket to Mars and live there, because there's no way I'd live down this type of leak.
 
Jessica Brown Findlay is clearly a part-time urologist, which is why she was getting such a good look in that photo.

In all seriousness (not really) if I was them I'd combine funds and build a rocket to Mars and live there, because there's no way I'd live down this type of leak.

I don't think people will really be talking about this for very long.
 
Apple is really, really lucky today is Labor Day and the stock market is closed.

They're also really, really lucky people are too focused on Kate Upton getting drenched in semen and Bar Refaeli spreading her buttcheeks open to concentrate on the fact that this is potentially a security breach every bit as big as the Target one from last year, if not bigger. And given Apple's position in the market as a tech company, much worse.
 
Jessica Brown Findlay is clearly a part-time urologist, which is why she was getting such a good look in that photo.

In all seriousness (not really) if I was them I'd combine funds and build a rocket to Mars and live there, because there's no way I'd live down this type of leak.
Yeah, that pic..
Is something else.
 
Apple is really, really lucky today is Labor Day and the stock market is closed.

They're also really, really lucky people are too focused on Kate Upton getting drenched in semen and Bar Refaeli spreading her buttcheeks open to concentrate on the fact that this is potentially a security breach every bit as big as the Target one from last year, if not bigger. And given Apple's position in the market as a tech company, much worse.

I don't think it will have much of an effect, if any.
 
My girlfriend and I were in the middle of having sex, looked through them together, then went back at it. Also we were taking pics right before we found out about this, so we laughed heartily.

Wow, it must have been some awesome sex to stop what you are doing to look at pictures mid way through.
 
Jessica Brown Findlay is clearly a part-time urologist, which is why she was getting such a good look in that photo.

In all seriousness (not really) if I was them I'd combine funds and build a rocket to Mars and live there, because there's no way I'd live down this type of leak.

Leaks happen all the time and people forget like a week later.

There was a massive leak a few months ago (a year?) and I would be surprised if most people could name more than 3 people who had their shit leaked then.
 
I have no idea why I'm pleased by the Upton leak. It's not as if she's notorious for being heavily clothed at all times.


What on earth is 'an egregious act of psychic violence'?

Z7wSFG9.gif


I assume a lot of that..or something. Nice show of solidarity from Boogie..kudos, sir! :P
 
I don't think people will really be talking about this for very long.

Don't think these women are worrying about the talking, it's the long term knowledge that these pictures are out there and will keep popping up and if this guy/group was telling the truth they have plenty more videos and pictures.

This leak is obviously going to be worse for some people and not so so much for others.

Kate Upton, Jessica Findlay Brown and Bar Rafelli are probably the ones feeling the most mortified especially Bar Rafelli...
 
I have no idea why I'm pleased by the Upton leak. It's not as if she's notorious for being heavily clothed at all times.

What on earth is 'an egregious act of psychic violence'?

It's a textbook example of messing up a good point with shitty writing.

Untrue. You can set up verified icloud devices to receive messages through an Apple notification and not regular SMS.

Hence the "moreso", because that is not the default.
 
It's a weakness in the "Find my iPhone" API which does not have protection against brute force:

http://thenextweb.com/apple/2014/09...aw-that-led-to-celebrity-photos-being-leaked/

On Monday, a Python script emerged on Github (which we’re not linking to as there is evidence a fix by Apple is not fully rolled out) that appears to have allowed malicious users to ‘brute force’ a target account’s password on Apple’s iCloud, thanks to a vulnerability in the Find my iPhone service.

Screen-Shot-2014-09-01-at-10.49.17-pm.png


We discussed the tool with its creator, Hackapp, over Twitter, who said “this bug is common for all services which have many authentication interfaces” and that with “basic knowledge of sniffing and reversing techniques” it is “trivial” to uncover them. When asked if the method could have been used in the celebrity hack today, Hackapp said “I’ve not seen any evidence yet, but I admit that someone could use this tool.”
 
I really wish I hadn't opened the link to the Jessica Findlay Brown video my friend sent me of her trying to sniff her boyfriends posterior. Downtown Abbey won't be the same again.

Who the fuck would record something like that lol fortunately I haven't seen it.
 
Status
Not open for further replies.
Top Bottom