AppleID password brute force proof-of-concept
1–10 of 83 posts
Re: AppleID password brute force proof-of-concept
#2This is interesting, but it seems irresponsible to even attempt expose the endpoint at fault for this until it is fixed.
Re: AppleID password brute force proof-of-concept
#3Weird that this surfaces right after the celebrity photo leak eveyone attributes to an iCloud breach..
Re: AppleID password brute force proof-of-concept
#4anyone has confirmed that the leak is from icloud and thats the way they did it?
Re: AppleID password brute force proof-of-concept
#5Does anyone else prefer to entirely avoid signing up for an Apple ID?
I absolutely refuse to do so, and therefore use only software that doesn't require it. I suspect I'm not entirely alone out here on the sidelines...
Re: AppleID password brute force proof-of-concept
#6It should be noted that the attack has just been patched by Apple, so no longer works....
Re: AppleID password brute force proof-of-concept
#7does this mean that you can bypass the icloud activation ?
Re: AppleID password brute force proof-of-concept
#8Weird that this surfaces right after the celebrity photo leak eveyone attributes to an iCloud breach..
This attack was already described by JB'ers for a long time.
Re: AppleID password brute force proof-of-concept
#9Hopefully apple is doing more than just fixing the code flaw, and is using logs to see which emails had brute force attempted on them and locked/reset those apple ids.
Re: AppleID password brute force proof-of-concept
#10Dictionary attacks are incredibly effective. Humans have a hard time coming up with unique passwords.