Journalist blames iCloud for hack

[Jeremy Proome]

Apple to blame for iCloud hack

A tech journalist is holding Apple responsible for an iCloud hack

[zamicro]

This sounds like a lawsuit in the making...

[koffiejunkie]

Turns out this had nothing to do with Apple. The attackers go all the information they needed to identify him to Apple.

The hackers got Honan's residential address from whois records for a personal domain he had registered. The last four digits of the credit card were obtained through Amazon. The technique involves first contacting Amazon as Honan saying you wish to add a credit card to an Amazon account; at this point bogus generated credit card details were given and the hackers then hung up.

They then called Amazon again, this time saying they were locked out of their account and needed to add a new email address to the account, presenting the newly added bogus credit card details as identification verification. This gave the attackers access to the Amazon account, but as Amazon users know the site does not show full credit card numbers, only the last four digits. It was those last four digits that Apple customer service use to verify the identity of an iCloud user and so, using this, they took over the account.

While Apple's choice of verification information is questionable, it sounds more like Amazon's support was the failure here.

[Sputnik]

Talk about a house of cards.

[Tns]

tsk tsk a lacks security