iCloudHack: DropBox the More Likely Source

#1

Post by searchmartin » Tue, Sep 02, 2014, 6:40 PM UTC

iCloudHack: DropBox the More Likely Source
webmarketingschool.com

Re: iCloudHack: DropBox the More Likely Source

#2

Post by searchmartin » Tue, Sep 02, 2014, 6:46 PM UTC

I'd welcome the YCOM analysis of whats actually happened here, but iCloud just doesnt feel like the issue...

Re: iCloudHack: DropBox the More Likely Source

#3

Post by sp332 » Tue, Sep 02, 2014, 7:03 PM UTC

It certainly looks like multiple leakers and multiple sources. There are various "official" bitcoin addresses, connected to different leaked content. Most of it looks pretty amateurish. Probably after the first guy started getting paid for leaked files, a bunch of other script kiddies jumped in.

Re: iCloudHack: DropBox the More Likely Source

#4

Post by searchmartin » Tue, Sep 02, 2014, 7:05 PM UTC

sp332 wrote: post #3

It certainly looks like multiple leakers and multiple sources. There are various "official" bitcoin addresses, connected to different leaked content. Most of it looks pretty amateurish. Probably after the first guy started getting paid for leaked files, a bunch of other script kiddies jumped in.

I'd agree with that - on the press flaming that Apple are getting though - Im just not buying it. Really feels more like a cloud storage hack than iCloud, right?

Re: iCloudHack: DropBox the More Likely Source

#5

Post by sp332 » Tue, Sep 02, 2014, 7:42 PM UTC

searchmartin wrote: post #4

sp332 wrote: post #3

It certainly looks like multiple leakers and multiple sources. There are various "official" bitcoin addresses, connected to different leaked content. Most of it looks pretty amateurish. Probably after the first guy started getting paid for leaked files, a bunch of other script kiddies jumped in.

I'd agree with that - on the press flaming that Apple are getting though - Im just not buying it. Really feels more like a cloud storage hack than iCloud, right?

Edit: Apple has confirmed that it was breached and celebrities were targeted. https://arstechnica.com/tech-policy/2014/09/apple-confirms-c...

Some of the leaks do look like iCloud backups though. Videos don't get uploaded to Apple's "photo stream" so it would have to be an iCloud backup or, less likely, a local backup that was uploaded to Dropbox. Right now it "feels like" a lot of different leaks and leakers jumping on 4chan and demanding bitcoins for their own little dumps.

Re: iCloudHack: DropBox the More Likely Source

#6

Post by jschrf » Tue, Sep 02, 2014, 8:07 PM UTC

If I go to upload file A.zip to Dropbox, and it already exists in someone else's Dropbox (has a matching hash), does Dropbox bother re-upload the entire thing?

If not, then perhaps there's a way to test if the files came from Dropbox or not.

Re: iCloudHack: DropBox the More Likely Source

#7

Post by Nexxxeh » Thu, Sep 04, 2014, 6:32 PM UTC

The author seems to be assuming that any files on an iPhone were generated originally by that iPhone. This obviously isn't the case, as I send stuff to Android users, iPhone users, even WinMo users. And thus, photos from an Android show up on an iPhone and, depending on the software used, are then backed up to iCloud.

Another assumption is that it was the celebrity's account and only that account that was compromised in every case. It could have been JLaw's (ex-)boyfriend's iCloud account that was hacked, surely?