Hackers leak 1 million Apple IDs - and now I have an unauthoried download on my iTunes acct!!

Forums › Off topic › Hackers leak 1 million Apple IDs - and now I have an unauthoried download on my iTunes acct!!

1 | 2 | 3

gzt

17139 posts

Uber Geek

Lifetime subscriber

#682964 7-Sep-2012 22:49

keewee01: Have now changed my Apple ID so hopefully that is the end of it...

Hopefully so. With both Apple and the game company not doing any kind of responsible disclosure around your problem (so far) it is hard to know how the compromise occurred and therefore hard to know if changing your apple id provides any mitigation.

Btw, new post from Anonymous about the origin of the UUIDs.

NSFW language as usual: http://pastie.org/4678441

KellyP

1245 posts

Uber Geek

ID Verified

Subscriber

#684219 11-Sep-2012 08:58

http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week

There you have it

keewee01

1737 posts

Uber Geek

Trusted

#684236 11-Sep-2012 09:30

That is really strange! As it is the only devices ever connected to my iTunes account were 2 iPods. So either the account hack is unrelated (just a complete coincidence in timing!), or something (a default app) on the Gen 5 iPod (Nike app maybe???) is the reason Blue Toad had my details.

Interestingly, iTune won't reveal the UDID of my iPod - it only shows the serial even after clicking it.

freitasm

BDFL - Memuneh
79294 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#684237 11-Sep-2012 09:31

[tinfoil hat]

FBI: Oh, damn they found out about our surveillance program. Mr Developer you're not making much money anyway, would you take $1 million to get the blame?

Small developer: Sure, more than I make in a million years in the App Store...

[/tinfoil hat]

keewee01

1737 posts

Uber Geek

Trusted

#684240 11-Sep-2012 09:52

freitasm: [tinfoil hat on]

FBI: Oh, damn they found out about our surveillance program. Mr Developer you're not making much money anyway, would you take $1 million to get the blame?

Small developer: Sure, more than I make in a million years in the App Store...

[/tinfoil hat off]

I'm not sure whether the ROTFLMAO or sit up straight and take notice

gzt

17139 posts

Uber Geek

Lifetime subscriber

#684253 11-Sep-2012 10:33

BlueToad is a fairly substantial publisher if their own numbers are to be believed.

BlueToad says they were attacked about a week ago. Contrast this to the Anonymous statements (links earlier) where they say the data was obtained from an FBI laptop months ago.

The FBI would aggregate data from a number of different sources and additionally purchase data from contractors so it is not impossible they would have had this data earlier. Especially if Blue Toad had been insecure for a while which is probably the case.

In the case where it can be shown this data was effectively stolen and later found present on an FBI laptop - you would expect a confidential settlement between BlueToad and the FBI. Rather than xmillion dollars it would probably involve BlueToad being selected as a preferred contractor for expensive and pointless government work.

gzt

17139 posts

Uber Geek

Lifetime subscriber

#684353 11-Sep-2012 13:02

keewee01: Interestingly, iTune won't reveal the UDID of my iPod - it only shows the serial even after clicking it.

The iPhone configuration utility displays the id on the summary without additional clicks:

Windows version: http://support.apple.com/kb/DL1466

If you are on Mac you can go applications > utilities > system > hardware > usb > [hub level] > iPhone. If Apple intended to display the serial number there - they selected the wrong field for display. It is the UUID displayed in the serial number field in the lower panel.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

keewee01

1737 posts

Uber Geek

Trusted

#684393 11-Sep-2012 14:26

gzt:
keewee01: Interestingly, iTune won't reveal the UDID of my iPod - it only shows the serial even after clicking it.

The iPhone configuration utility displays the id on the summary without additional clicks:

Windows version: http://support.apple.com/kb/DL1466

If you are on Mac you can go applications > utilities > system > hardware > usb > [hub level] > iPhone. If Apple intended to display the serial number there - they selected the wrong field for display. It is the UUID displayed in the serial number field in the lower panel.

I don't have an iPhone, but will see of I can find something similar in the menus of my iPod. Thanks.

gzt

17139 posts

Uber Geek

Lifetime subscriber

#684437 11-Sep-2012 15:28

Forgot to mention that part. The config utility works with all iDevices.

1080p

1332 posts

Uber Geek
Inactive user

#685719 13-Sep-2012 17:13

So apparently the hack was a farce :P

I guess the rouge app download was likely user error.

keewee01

1737 posts

Uber Geek

Trusted

#685777 13-Sep-2012 20:48

1080p: So apparently the hack was a farce :P

I guess the rouge app download was likely user error.

Nope - definitely not user error - but thanks for suggesting. Maybe you iPad/Phone/Touch users can make user errors like that, but I hardly ever fire up iTunes and the only iDevices we have are iPods. It was definitely some kind of hack or forced access against my account. (Apple do not refund people lightly)

The refund from Apple appeared earlier in the week.

It will be interesting to see what the truth behind the leaked account info really is - if it ever comes out.

1 | 2 | 3