I don't know if this was the attack used in the hack, but it is really, really bad news for Apple. The public is not going to trust iCloud any more. I'm pretty sure Apple will drop iWallet from the keynote, or it'll end up like their maps.
AppleID password brute force proof-of-concept
11–20 of 83 posts
Re: AppleID password brute force proof-of-concept
#12Dictionary attacks are incredibly effective. Humans have a hard time coming up with unique passwords.
They are also quite easy to prevent, though.
Re: AppleID password brute force proof-of-concept
#13anyone has confirmed that the leak is from icloud and thats the way they did it?
Nobody is sure how they did it. Or even if it comes from iCloud.
The leakers themselves claim it was from iCloud (the actual leaker only bought it online from various hackers though, again according to him).
Re: AppleID password brute force proof-of-concept
#14I don't know if this was the attack used in the hack, but it is really, really bad news for Apple. The public is not going to trust iCloud any more. I'm pretty sure Apple will drop iWallet from the keynote, or it'll end up like their maps.
Since they've already patched it, this seems unlikely.
Re: AppleID password brute force proof-of-concept
#15Weird that this surfaces right after the celebrity photo leak eveyone attributes to an iCloud breach..
Not weird at all, makes perfect. The code/idea is so trivial that I would find it hard to believe any accusations on the author of the code...
One could probably modify a much more sophisticated/fast brute-force software to attack iCloud, like hydra[1].
Given the deep pockets Apple has, I don't understand how something like this was even possible.
Re: AppleID password brute force proof-of-concept
#16Re: AppleID password brute force proof-of-concept
#17It's sad that there aren't legal requirements for security hardening. There are massive corporations which retain sensitive information that are low hanging fruit for script kiddies.
Re: AppleID password brute force proof-of-concept
#18Re: AppleID password brute force proof-of-concept
#19I don't know if this was the attack used in the hack, but it is really, really bad news for Apple. The public is not going to trust iCloud any more. I'm pretty sure Apple will drop iWallet from the keynote, or it'll end up like their maps.
Yeah, no one plays Playstation since the Sony hack.
And I bet no one shops at Target any more.
TKMaxx ceased trading right after their hack.
Linked In is a thing of the past.