Šodien notikumiem bagāta diena. Viena no tām ir par to, ka hakeri it kā ir uzlauzuši Apple iCloud mākoņu datu glabātuves un no turienes izzaguši slavenību datus. Šobrīd slavenību kailfoto klejo internetos.

Internetā nopludinātas neskaitāmas šovbiznesa zvaigžņu pikantas fotogrāfijas, un šoreiz cietušo vidū ir tādas slavenības kā Kērstina Dansta, Keita Aptona, Arianna Grande, Selēna Gomesa, Teilore Svifta un daudzas citas.

Kā raksta 9to5mac.com, tad pie vainas varētu būs serviss Find My iPhone caur kuru bija iespējams minēt paroles bez ierobežojumiem.

The vulnerability allegedly discovered in the Find my iPhone service appears to have allowed attackers to use this method to guess passwords repeatedly without any sort of lockout or alert to the target. Once the password has been eventually matched, the attacker can then use it to access other iCloud functions freely.

Apple patched the service at 3.20am PT today. While it’s possible that the timing was coincidental, an iCloud exploit being posted online just two days before the photos appeared, and being patched shortly after the story broke, makes this seem unlikely. Apple has not yet responded to a request for comment.

It’s worth noting that the vulnerability did not allow access to iCloud passwords, it only permitted repeated guesses or an automated dictionary attack. In order for it to succeed, relatively weak passwords would need to have been used on the accounts accessed.

Iekš Hacker News ir nopublicēts AppleID password bruteforce proof-of-concept.

Pagaidām gan nav apstiprinājumu, ka tas bija patiesais caurums.

Papildināts

Apple nāca klajā ar paziņojumu, ka pēc 40h izmeklēšanas ir secinājuši, ka sistēmas nav uzlauztas, bet atsevišķu lietotāju kontiem ir veikti mērķtiecīgi uzbrukumi.

After more than 40 hours of investigation, we have discovered that certain celebrity accounts were compromised by a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the Internet,” the statement read.

“None of the cases we have investigated has resulted from any breach in any of Apple’s systems including iCloud or Find my iPhone. We are continuing to work with law enforcement to help identify the criminals involved.”