funsec mailing list archives

Re: Apple's faith-based security taking a hammering


From: Joel Esler <joel.esler () me com>
Date: Tue, 13 Sep 2011 12:18:06 -0400

On Sep 13, 2011, at 5:17 AM, Jeffrey Walton wrote:

http://news.techeye.net/security/apples-faith-based-security-taking-a-hammering

For the last year, hackers have been able to crash through Apple's
faith-based security and spend other user's cash, and Jobs' Mob has
been unable to stop them.

The first reports were in November 28, 2010, when a user moaned on an
Apple support forum that someone had spent more than $50 of his iTunes
Store credit on iPhone apps. His home address was replaced with an
address in Towson, Maryland... The list of complaints has gone to 700
posts with a hacker, or hackers able to spend iTunes gift card credit
without permission.

While Apple has been refunding some of its users, it has not given
cash back to others, but acknowledged no wrongdoing or iTunes
hacking.... However Apple will only refund money once, and customers
that are hit for a second time are being told to go forth and
multiply.

Protip:  Use better passwords.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: