+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Network Hacking (https://sinister.ly/Forum-Network-Hacking)
+--- Thread: How iCloud was hacked and the nudes were leaked (/Thread-How-iCloud-was-hacked-and-the-nudes-were-leaked)
How iCloud was hacked and the nudes were leaked - Adorapuff - 09-01-2014
So as you all know iCloud was allegedly hacked and all those celebs who stored nudes in the cloud are all fucked.
So here's what happened.
Apple released a find my iphone API and one function allowed users to login. Pretty straight forward. The only problem with this is that it didn't lock you out for too many failed login attempts making it vulnerable to a brute-force attack. So all that was needed was the celebs emails and some nice password lists.
This is now patched, but anyone who wants to learn more can check out the PoC here:
https://github.com/hackappcom/ibrute
RE: How iCloud was hacked and the nudes were leaked - MiS - 09-01-2014
For such a massive leak? That's surprisingly simple... and negligent of Apple.
RE: How iCloud was hacked and the nudes were leaked - lux - 09-01-2014
He must of run a pretty large scale attack over multiple emails.
RE: How iCloud was hacked and the nudes were leaked - chronical - 09-02-2014
Wow, I expected it to be finding some sort of 0day l33t h4x buff3r 0v3rflows on the servers themselves
In my opinion, that's extremely fucking retarded on apple's side. Blocking someone out after x amount of attempts is literally one of the most basic countermeasures to prevent users from getting hacked. I guess they thought it was so basic that no one would've thought of bruteforcing the login. Either that, or they completely forgot about it due to its insignificance.
RE: How iCloud was hacked and the nudes were leaked - kyl - 09-02-2014
I would think that Apple wouldn't be so stupid regarding something like this.
RE: How iCloud was hacked and the nudes were leaked - Poogie416 - 09-02-2014
in this day and age its really scary about what others can see that you dont want them to
RE: How iCloud was hacked and the nudes were leaked - Adorapuff - 09-02-2014
(09-02-2014, 05:47 AM)Poogie416 Wrote: in this day and age its really scary about what others can see that you dont want them to
Don't be stupid and store clouds on a public network regardless of how secure you think it is /point
RE: How iCloud was hacked and the nudes were leaked - vortex29 - 09-03-2014
and this is why i dont trust the cloud. it needs more security before i will trust it.
RE: How iCloud was hacked and the nudes were leaked - bluewood32 - 09-03-2014
Yeah I agree with some people on here that the cloud needs better defenses. I think google will lead the way with some good mainstream cloud services and then there will be better higher quality ones that will pop up.
RE: How iCloud was hacked and the nudes were leaked - Nyx - 09-03-2014
(09-03-2014, 07:43 AM)bluewood32 Wrote: Yeah I agree with some people on here that the cloud needs better defenses. I think google will lead the way with some good mainstream cloud services and then there will be better higher quality ones that will pop up.
Just don't save nude pictures when you're famous, because some dude who wants to see your tits will eventually hack you.
OT: The hacker could have just kept it all private and even used this on people he knew in real life. That probably would have benefited him more than having things like this going on:
http://www.vice.com/en_ca/read/this-porn-site-operator-is-offering-a-reward-for-bringing-the-fappening-leaker-to-justice-902?utm_source=vicefbca