Find My Phone Archives - 9to5Mac

Apple aware of iCloud brute-force vulnerability six months before ‘Celebgate’

Ben Lovejoy Sep 25 2014 - 5:34 am PT

celebgate

The software developer credited by Apple for discovering last year’s developer center flaw says that he informed Apple of an iCloud weakness that may have been used to obtain celebrity nudes more than six months before the photos were accessed.

The Daily Dot reports that Ibrahim Balic advised Apple in March of a Find My Phone weakness that would allow brute-force attacks on iCloud accounts. It has been suggested that this may have been one of the methods used to access the accounts – or even complete iPhone backups – of celebrities …
Expand
Expanding
Close

Vulnerability in Find My Phone service and weak passwords may explain alleged celebrity photo leaks

Ben Lovejoy Sep 1 2014 - 4:47 am PT

50 Comments

celebrity-hack

The Next Web is reporting that a vulnerability in the Find My Phone service may have allowed attackers to brute-force passwords in order to access the iCloud accounts of celebrities.

The vulnerability allegedly discovered in the Find my iPhone service appears to have allowed attackers to use this method to guess passwords repeatedly without any sort of lockout or alert to the target. Once the password has been eventually matched, the attacker can then use it to access other iCloud functions freely.

A tool to exploit the weakness was uploaded to Github, where it remained for two days before being shared on Hacker News …
Expand
Expanding
Close

Find My Phone tracks stolen car with 5yo child inside it, allowing police to intercept

Ben Lovejoy Sep 10 2013 - 4:33 am PT

8 Comments

A stolen SUV with a five-year-old boy in it was successfully intercepted by police in northwest Houston last night after the child’s father used the Find My Phone feature on his iPad to track an iPhone in the car.

The father had left his son in the car while he ran into a store, when it was stolen.

“The father had an iPad that he’d taken in with him and he utilized that iPad with the iPhone that was in the car and was able to track it,” said Lt. Wayne Schultz with the Harris County Precinct 4 Constable’s Office. “And the information was provided from our deputies to our dispatch, that was able to be communicated through the Harris County Sheriff’s Office dispatch also and they were able to get information out to the troops in the field to where we could disseminate information in almost a real-time environment to put it out to guys who were looking for the vehicle with the child in it.”

Police stopped the SUV 15 minutes later and re-united the child, who was unharmed, with his father. The suspect was arrested.

While we might raise an eyebrow at leaving a 5yo child in a car on his own, credit has to be given for having the presence of mind in such circumstances to use Find My Phone in such stressful circumstances.