Think your i-Phone or MAC are safe? Guess again

[ArcticLight]

Worth the read.

I work in Information Assurance and am paranoid about linking anything, or showing information (I still do tho)....

Many of these steps could be prevented:

http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking/

 

[Lowlight]

Re: Think your i-Phone or MAC are safe? Guess again

They got him through social hacking using live Customer Service people to gather information and reset his accounts.

Since that article, and situation Apple has changed the process on how you can access a user's account via Apple Care. Not to mention he also used Amazon for information gathering.

Reseting a system remotely is possible with just about anything nowadays

 

[ArcticLight]

Re: Think your i-Phone or MAC are safe? Guess again

I agree but some people just believe because they have a MAC/I-<insert favorite device> that they are safe...

Kevin Mitnick hacked motorola, AT&T, Novell, all of them using social engineering.

But according to the end of the article, while they claim to have changed the process, would you trust your data to that?

i-drive.com - 256bit AES encrypted - love it, free 5 gigs...I pay $50 a year for 150 gigs.

PS - I see you were smart Frank - private registration on the domain name - I did the same thing....good move!

 

[ArcticLight]

Re: Think your i-Phone or MAC are safe? Guess again

Which leads me to my NEXT story

Daughter lost her $350 Gen4 I-pod I purchased for her, she had it with the TEXTNOW app on it so she could call/text me if the SHTF at home.

She lost it. It never came online from the findmyIPOD app.

So finally school year coming up I purchase her another, $200 this time vs $350, and she loads TEXTNOW up.

Suddenly we get texts from strange girl we don't know...so after doing some baiting and some "Social engineering" we find out who she is.
The TEXTNOW may be tied to a serial number by account, unsure - but it was sending HER texts to US....

Next day Sheriffs office calls, verifies serial number and picks up my I-pod.

Yay...

 

[KJMOC]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: ArcticLight</div><div class="ubbcode-body"><span style="text-decoration: underline"><span style="font-style: italic"><span style="font-weight: bold"><span style="color: #FF0000">I agree but some people just believe because they have a MAC/I-<insert favorite device> </span>tha</span>t t</span>hey are safe...</span>

Kevin Mitnick hacked motorola, AT&T, Novell, all of them using social engineering.

But according to the end of the article, while they claim to have changed the process, would you trust your data to that?

i-drive.com - 256bit AES encrypted - love it, free 5 gigs...I pay $50 a year for 150 gigs.

PS - I see you were smart Frank - private registration on the domain name - I did the same thing....good move! </div></div>

Equally obtuse is starting a thread on a known controversial topic with a incendiary title that contains absolutely zero facts. I suppose the greater ignorance is knowing the difference between social engineering and true hacking, as you admit, and still deciding to engage in the listed behavior.

FYI, i-devices use AES-256.

http://www.technologyreview.com/news/428477/the-iphone-has-passed-a-key-security-threshold/

 

[JohnnyC]

Re: Think your i-Phone or MAC are safe? Guess again

Mac, not MAC. It's not an acronym unless you're talking about Media Access Control.

Words have meaning, and I think everyone appreciates when people take the time to use the correct word in the correct situation, especially when discussing things in the same field.

 

[Maggot]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: JohnnyC</div><div class="ubbcode-body">Mac, not MAC. It's not an acronym unless you're talking about Media Access Control.

Words have meaning, and I think everyone appreciates when people take the time to use the correct word in the correct situation, especially when discussing things in the same field. </div></div>

Thought it meant Military Arms Corporation , as in MAC-10

 

[Hink]

Re: Think your i-Phone or MAC are safe? Guess again

Macaroni And Cheese....good stuff, and always safe in the cabinet. Toss in some cream cheese and it's good to go.

 

[ArcticLight]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: KJMOC</div><div class="ubbcode-body"><div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: ArcticLight</div><div class="ubbcode-body"><span style="text-decoration: underline"><span style="font-style: italic"><span style="font-weight: bold"><span style="color: #FF0000">I agree but some people just believe because they have a MAC/I-<insert favorite device> </span>tha</span>t t</span>hey are safe...</span>

Kevin Mitnick hacked motorola, AT&T, Novell, all of them using social engineering.

But according to the end of the article, while they claim to have changed the process, would you trust your data to that?

i-drive.com - 256bit AES encrypted - love it, free 5 gigs...I pay $50 a year for 150 gigs.

PS - I see you were smart Frank - private registration on the domain name - I did the same thing....good move! </div></div>

Equally obtuse is starting a thread on a known controversial topic with a incendiary title that contains absolutely zero facts. I suppose the greater ignorance is knowing the difference between social engineering and true hacking, as you admit, and still deciding to engage in the listed behavior.

FYI, i-devices use AES-256.

http://www.technologyreview.com/news/428477/the-iphone-has-passed-a-key-security-threshold/ </div></div>



All the encryption in the world does no good if your service provider is willing to give me your information, a hack is a hack.

I'm just saying, if you use amazon and you use gmail and you use an i-device this article may pertain to you.

So rather than be negative about it maybe take it as a learning experience, because it CAN happen, i don't care how careful you are.

 

[ArcticLight]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: JohnnyC</div><div class="ubbcode-body">Mac, not MAC. It's not an acronym unless you're talking about Media Access Control.

Words have meaning, and I think everyone appreciates when people take the time to use the correct word in the correct situation, especially when discussing things in the same field. </div></div>

Now we have grammar nazi's? I take a short break and come back and this is who's on the board now?

Maybe I should not have come back.

 

[JohnnyC]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: ArcticLight</div><div class="ubbcode-body"><div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: JohnnyC</div><div class="ubbcode-body">Mac, not MAC. It's not an acronym unless you're talking about Media Access Control.

Words have meaning, and I think everyone appreciates when people take the time to use the correct word in the correct situation, especially when discussing things in the same field. </div></div>

Now we have grammar nazi's? I take a short break and come back and this is who's on the board now?

Maybe I should not have come back. </div></div>

If you're going to speak accurately regarding a topic, you would best be served by actually speaking accurately.

This board prides itself on accuracy in one regard, why would you not strive to be accurate in all facets of your life?

The fact that the articles author was on a "MAC or i-device" has nothing to do with the fact that he was hacked through social engineering. The result could just have easily occurred regardless of his choice of communications platform.

But by all means, turn it into some random hatchet job to suit whatever you think you're trying to accomplish.

 

[bassani]

Re: Think your i-Phone or MAC are safe? Guess again

wonder why he didnt get the PIN from his "partner" so that the guy could restore his iPad to save his pictures

 

[ArcticLight]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: JohnnyC</div><div class="ubbcode-body"><div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: ArcticLight</div><div class="ubbcode-body"><div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: JohnnyC</div><div class="ubbcode-body">Mac, not MAC. It's not an acronym unless you're talking about Media Access Control.

Words have meaning, and I think everyone appreciates when people take the time to use the correct word in the correct situation, especially when discussing things in the same field. </div></div>

Now we have grammar nazi's? I take a short break and come back and this is who's on the board now?

Maybe I should not have come back. </div></div>

If you're going to speak accurately regarding a topic, you would best be served by actually speaking accurately.

This board prides itself on accuracy in one regard, why would you not strive to be accurate in all facets of your life?

The fact that the articles author was on a "MAC or i-device" has nothing to do with the fact that he was hacked through social engineering. The result could just have easily occurred regardless of his choice of communications platform.

But by all means, turn it into some random hatchet job to suit whatever you think you're trying to accomplish. </div></div>

It was a Mac hack, not a Windows 8 phone hack. It was accurate.

If Windows 8 had been succeptable to the customer service of Amazon and Apple I CERTAINLY would have posted that.

I work in IA so I'm usually specific.

Now go change your passwords and hint words to Amazon Accounts and Apple accounts, that was the point of this, not to get into a dick measuring contest.

 

[aur0ra145]

Re: Think your i-Phone or MAC are safe? Guess again

Meh, change your passwords, change them often. Also, make your PW not have anything to do with you. Protip: numbers, different case letters and symbols are good.

 

[jasonk]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Aur0ra145</div><div class="ubbcode-body">Meh, change your passwords, change them often. Also, make your PW not have anything to do with you. Protip: numbers, different case letters and symbols are good.</div></div>

Did you read the article? It had nothing to do with his password being hacked due to lack of strength.

Protip? Is that some 1993 tip? Most real sites require at least 2 if not all 3 of those things already. Thanks, Bill Gates.

 

[wfjames22]

Re: Think your i-Phone or MAC are safe? Guess again

<div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: jasonk</div><div class="ubbcode-body"><div class="ubbcode-block"><div class="ubbcode-header">Originally Posted By: Aur0ra145</div><div class="ubbcode-body">Protip: numbers, different case letters and symbols are good.</div></div>

Protip? Is that some 1993 tip? Most real sites require at least 2 if not all 3 of those things already. Thanks, Bill Gates. </div></div>

Respect the "Protip", dude!