Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Cupertino rushing to fix Apple ID security breach
#1
Just a couple days after rolling out an optional two-step ID verification system, somebody published step-by-step instructions on how to change the password on another person's Apple ID account, starting with nothing more than the victim's email address and date of birth.

Apple has shut down its password reset system as an immediate response to prevent exploitation as they work on a fix.

http://www.theverge.com/2013/3/22/413624...e-of-birth
Reply
#2
LMFAO.
Reply
#3
Just so we're clear, the exploit doesn't work against anybody using the new 2-step process. It's the old procedure that is vulnerable.

Those of us who haven't moved our accounts to the new secure process should be okay, since Apple took out the password reset mechanism. For now, you won't be able to change your password, but neither will a hacker.
Reply
#4
http://www.theverge.com/2013/3/22/413772...ty-exploit
Reply
#5
Speedy wrote:
LMFAO.

Let it all out, Speedy. It's therapeutic.
Reply
#6
How long ago was it Mac users were touting with Macs you don't have the security and trojan problems you do with WIN????
Reply
#7
samintx wrote:
How long ago was it Mac users were touting with Macs you don't have the security and trojan problems you do with WIN????

A. This problem is not with the Mac OS. It is an Apple corporate server security issue.

B. You still don't have anywhere close to the Windows security and trojan problems with the Mac OS. Most of the security issues there are still fall into the PEBKAC area, many users should not have easy access to privileges or Admin passwords. But that also applies to Windows users, and there are a lot more trojan and malware for Windows to snare them.
Reply
#8
PEBKAC == Problem Exists Between Keyboard And Chair

Security, like quality, must be designed into the OS and its interfaces, and propagated to the applications that run on the OS. It is not something to be slapped on after implementation, like a coat of paint.

Microsoft has never let security stand in the way of sales anything.
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)