ibrute

Apple hasn't been forthcoming with details. They have thus far denied any responsibility. However, there is substantial evidence that it was indeed at least partly their fault. There was a flaw that allowed brute force password attempts exposed here: https://github.com/hackappcom/ibrute Apple also follows poor security practices like asking insecurity questions to allow users to gain access to an account. Apple has claimed that it was most likely a 'phishing' attack. However, given the large number of victims, and the lack of any evidence presented to support such a theory, I am rather hesitant to believe them. Until further information is made available, I am forced to consider Apple to be at fault.

There's another story listed in HN "new" linking to this (though it appears to be falling off the front page of "new"): https://github.com/hackappcom/ibrute Possibly related? Seems possible hackers are brute forcing Apple ID passwords for known celeb emails to get to their photo stream using this assuming: #1) the source really is iCloud (which I've heard people say though I don't know where that's coming from) and #2) this ibrute thing really works (I don't have an Apple ID to test it against nor any interest in hacking accounts, so I have no idea if that's legit). If #1 and #2 are legit and this is the source, then Apple is going to have a lot of egg on their face because not only would this be a horrible security oversight but the public impact of it due to celeb nudie involvement would be much bigger than your average nebulous securi