[Adorapuff]

So as you all know iCloud was allegedly hacked and all those celebs who stored nudes in the cloud are all fucked.
So here's what happened.
Apple released a find my iphone API and one function allowed users to login. Pretty straight forward. The only problem with this is that it didn't lock you out for too many failed login attempts making it vulnerable to a brute-force attack. So all that was needed was the celebs emails and some nice password lists.
This is now patched, but anyone who wants to learn more can check out the PoC here:
https://github.com/hackappcom/ibrute

[MiS]

For such a massive leak? That's surprisingly simple... and negligent of Apple.

[lux]

He must of run a pretty large scale attack over multiple emails.

[chronical]

Wow, I expected it to be finding some sort of 0day l33t h4x buff3r 0v3rflows on the servers themselves

In my opinion, that's extremely fucking retarded on apple's side. Blocking someone out after x amount of attempts is literally one of the most basic countermeasures to prevent users from getting hacked. I guess they thought it was so basic that no one would've thought of bruteforcing the login. Either that, or they completely forgot about it due to its insignificance.

[kyl]

I would think that Apple wouldn't be so stupid regarding something like this.

[Poogie416]

in this day and age its really scary about what others can see that you dont want them to

[Adorapuff]

in this day and age its really scary about what others can see that you dont want them to

Don't be stupid and store clouds on a public network regardless of how secure you think it is /point

[vortex29]

and this is why i dont trust the cloud. it needs more security before i will trust it.

[bluewood32]

Yeah I agree with some people on here that the cloud needs better defenses. I think google will lead the way with some good mainstream cloud services and then there will be better higher quality ones that will pop up.

[Nyx]

Yeah I agree with some people on here that the cloud needs better defenses. I think google will lead the way with some good mainstream cloud services and then there will be better higher quality ones that will pop up.

Just don't save nude pictures when you're famous, because some dude who wants to see your tits will eventually hack you.

OT: The hacker could have just kept it all private and even used this on people he knew in real life. That probably would have benefited him more than having things like this going on:
http://www.vice.com/en_ca/read/this-porn...e=vicefbca