Ibrahim Balic breaks silence on hacking Apple developer site

Post by badman_ting » Wed, Jul 24, 2013, 1:36 PM UTC

threeseed wrote: post #7

bsaul wrote: post #4

The fact that the site is still down makes wonder what they're doing. Provided that the hacker did report all the security bugs to Apple, one could suppose that it would only require of couple of days to fix the bugs, put the site back online, and start performing a full security audit along with massive code rewrite in parallel. The only reason i see why they would still be offline, is that they instead decided to r…

The developer portal is written in WebObjects/Java. And whilst I am sure they are using Project Wonder which wraps up a lot of the old WebObjects code there is still the fact that it is a deprecated technology. And it's never just write some code and deploy in these situations. It will involve testers signing it off, performance testing, security testing, deployment etc. So all those parts add up. Plus there's no "St…

Post by pornel » Wed, Jul 24, 2013, 1:56 PM UTC

kybernetyk wrote: post #16

> I have taken 73 users details (all apple inc workers only) and prove them as an example ... > I have over 100,000+ users details ... > I do not want my name to be in blacklist One would think that 73 compromised Apple employee accounts should be enough to make a point. Why would he take another 100k user accounts hostage?

Post by [deleted] » Wed, Jul 24, 2013, 2:10 PM UTC

67726e wrote: post #20

mikhailt wrote: post #10

Earlier quoted context omitted.

disgrace |disˈgrās| noun loss of reputation or respect, esp. as the result of a dishonorable action [ in sing. ] a person or thing regarded as shameful and unacceptable How is it a disgrace? You're making it sound like Apple meant for this to happen, this could've happen to any companies. Apple should not be portrayed to be perfect at everything, they're lead by humans who can make mistakes, just like everybody else.…

> How is it a disgrace? You're making it sound like Apple meant for this to happen, this could've happen to any companies. Well if Ibrahim is to be believed, Apple failed to reasonably handle his disclosure of the security flaws. Apple is not entirely at fault, but they surely failed to protect their users' data. Users trusted Apple to prevent this from happening, but they have failed. That is a disgrace.

Post by kylebrown » Wed, Jul 24, 2013, 2:15 PM UTC

bsaul wrote: post #4

The fact that the site is still down makes wonder what they're doing. Provided that the hacker did report all the security bugs to Apple, one could suppose that it would only require of couple of days to fix the bugs, put the site back online, and start performing a full security audit along with massive code rewrite in parallel. The only reason i see why they would still be offline, is that they instead decided to r…

Post by racl101 » Wed, Jul 24, 2013, 2:22 PM UTC

terabytest wrote: post #5

With the iOS 7 launch already on a tight schedule this is a disgrace for both Apple and developers trying to renovate their apps.