icloud Hack: Amazon and Apple respond to security problems

The much acclaimed icloud account hack at the U.S. journalist Mat Honan, which allowed the attackers, among other things, to delete Apple's remote wipe function data of the iPhone, iPad, and MacBook Air has a sequel: Both Amazon and Apple have changed their security procedures. As PC Magazine reports that the e-commerce giant will no longer be allowed to modify customer information such as your e-mail addresses or credit card information over the phone.
The attackers had it been successful, reaching over a two-step process to Honans Amazon account: First, they supplemented by telephone a credit card that would have been sufficient which according to the Wired reporter e-mail address, name of account holder and billing address. With a second call, it would then have been possible to deposit a new e-mail address for this account - with the help of the previously mentioned new credit card and the statement that they had lost access. This should no longer be possible.

With Apple's support department has also responded. The attackers were there to capture Honans icloud account, because they coincided with the takeover of the Amazon also access the last four digits of his credit card in their hands. According to Honan, it should have been sufficient so far from Apple, get with these four digits, the name and billing address to a temporary password, which was transferred to the icloud access then. Correct answers to the security deposited by him would not have had the attackers, said Honan.

According to Wired, Apple has now banned its supporters, the Apple ID reset by telephone request. However, this will initially only be temporary, "at least 24 hours," said the hotline staff to demand from Wired. Apple seems to be currently in the process of rethinking its processes - this had already announced a spokeswoman. An opinion on the telephone password reset is prohibited from Apple yet.

No comments:

Post a Comment