Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


iCloud leak - Page 2
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

iCloud leak

2

Comments

  • wych said: I do agree that looks similar although the hand changes... But maybe after that video they made a private video?

    Could be, or it could be the hand is part of the original pornographic pic.

    I dunno though, just thought that guy must be very happy if he got $50k anonymously for some photoshops ;P

    Thanked by 1netomx
  • @AThomasHowe said:
    just thought that guy must be very happy if he got $50k anonymously for some photoshops ;P

    I know I would be!

    Thanked by 2AThomasHowe netomx
  • jarjar Patron Provider, Top Host, Veteran
    edited September 2014

    Apple just needs to learn from Google. You can't secure the accounts of people who don't want the security over convenience, you just can't, someone else will give them the convenience over security and their stuff will just get compromised over there. Apple needs actual 2 factor authentication support. Right now it is very selective about where it is required when enabled, and not required in many areas that contain private data.

    In after android fanboys.

  • netomxnetomx Moderator, Veteran

    @wych said:
    I know I would be!

    I am happy

    Thanked by 1ATHK
  • Don't forget that Android also automatically syncs with Picasa unless you disable it.

    Thanked by 1netomx
  • @MrObvious said:
    Don't forget that Android also automatically syncs with Picasa unless you disable it.

    Yep, that is quite annoying.

  • Just had to throw that out there for the Android fanboys that might be oblivious to that.

    lol

    Thanked by 1Amitz
  • But how hard is it to obtain a Google account vs an Apple account? :P

  • @black said:
    But how hard is it to obtain a Google account vs an Apple account? :P

    Google's login has a pretty solid 2FA setup. Apple's is kind of, "lacking". It's kind of hit and miss, and doesn't work on iCloud. Apparently Apple is working on fixing this, but who knows.

    On the other hand, apparently this hack was by brute force and not an exploit. Apple has fixed the loophole from what I read.

  • hostnoobhostnoob Member
    edited September 2014

    I never noticed how great JLaws body is until these pics.

    On one hand, I kinda feel bad because of the invasion of their privacy... but on the other hand... well, that hand is busy.

  • If these were your normal run of the mill people you probably wouldn't care about privacy as much, just because they're celebrities doesn't mean they're any different to us..

  • jarjar Patron Provider, Top Host, Veteran

    Every company needs a kick in the butt every now and then. I've been waiting for iCloud to get a solid one for lack of quality 2 factor authentication implementation. There's always an upside. It would be odd to not see that implemented within the next couple of months.

    Thanked by 1netomx
  • raindog308raindog308 Administrator, Veteran

    jmginer said: Seems the hack was caused with ibrute

    I'm totally shocked that models and movie stars don't pick strong passwords.

    Thanked by 3Chuck Nekki Amitz
  • @raindog308 said:
    I'm totally shocked that models and movie stars don't pick strong passwords.

    Because they're any different than us? We all know a few people here who don't or didn't have secure SSH passwords..

  • hostnoob said: On one hand, I kinda feel bad because of the invasion of their privacy... but on the other hand... well, that hand is busy.

    You stole that!

    :P

  • @thehray said:
    Who all are android fans here(me too).?

    Me. iPhone is just for some simple man who just want a phone to call or take some pictures. Android is much more powerful than iOS.

  • jarjar Patron Provider, Top Host, Veteran
    edited September 2014

    How do you know an android user when you see one? Just give them a minute, they'll let you know.

    Thanked by 1Amitz
  • @Jar said:
    How do you know an android user when you see one? Just give them a minute, they'll let you know.

    Hey.

    Thanked by 2jar netomx
  • raindog308 said: I'm totally shocked that models and movie stars don't pick strong passwords.

    They probably didn't have an IT firm that makes sure they're "secure online"

    Some celebs do.

  • netomxnetomx Moderator, Veteran

    @Jar said:
    How do you know an android user when you see one? Just give them a minute, they'll let you know.

    Like vegans?

    Thanked by 1jar
  • Apple forgot to set a limit for the specific login page so that everyone could bruteforce an account. I think that's a major issue nowadays since passwords has to be very secure (More than 16 chars), even if 2FA is enabled.

    The hackers behind the attack used a known tool called iBrute (https://github.com/hackappcom/ibrute)

    It uses Find My Iphone service API, where bruteforce protection was not implemented. Password list was generated from top 500 RockYou leaked passwords, which satisfy appleID password policy. Before you start, make sure it's not illegal in your country.

  • @duyan13 wasn't that posted earlier too?

  • @wych said:
    duyan13 wasn't that posted earlier too?

    Oh well damn, didn't noticed that @jmginer already posted that. Sorry xD.

  • @duyan13 said:
    Oh well damn, didn't noticed that jmginer already posted that. Sorry xD.

    I just wonder when the next unsecured page will be found.

  • @Jar said:
    How do you know an android user when you see one? Just give them a minute, they'll let you know.

    How do you know there is a Apple user on the other side of you? They'll start complaining the second they see me getting my Android phone.

  • jarjar Patron Provider, Top Host, Veteran

    Brute force protection shouldn't be on a page by page basis for the same authentication system. Makes you wonder if they sync the same data to each part of the service. Poor design is all, really. I love Apple products but it's easy to forget that this is a product built as .Mac which was a horribly buggy service for years. They just need better sys admins.

  • alexhalexh Member
    edited September 2014

    taronyu said: How do you know there is a Apple user on the other side of you? They'll start complaining the second they see me getting my Android phone.

    Lol, iPhone user here and advised my girlfriend (wife I guess due to common law) to buy an S5 recently. I wouldn't recommend Apple for anybody, except those who drop their phone commonly, like me. Android-based phones are much faster, less subject to performance degradation over time, and most importantly you're supporting open source.

  • Jar said: Brute force protection shouldn't be on a page by page basis for the same authentication system. Makes you wonder if they sync the same data to each part of the service. Poor design is all, really. I love Apple products but it's easy to forget that this is a product built as .Mac which was a horribly buggy service for years. They just need better sys admins.

    I used to like my @mac.com e-mail address. Fuck paying the yearly fee once the 12 month trial was up though.

  • @netomx said:
    Like vegans?

    And Mac users.

  • jarjar Patron Provider, Top Host, Veteran
    edited September 2014

    I don't know how android users get work done. Is it difficult to balance spending your day telling everyone how your pocket warmer is better than theirs while still working full time and getting enough sleep?

Sign In or Register to comment.