View Single Post
Old 06-14-2010, 11:54 AM   #10
=X=
Wizard
=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.=X= ought to be getting tired of karma fortunes by now.
 
=X='s Avatar
 
Posts: 3,671
Karma: 12205348
Join Date: Mar 2008
Device: Galaxy S, Nook w/CM7
Quote:
Originally Posted by HarryT View Post
This appears to have been a pretty minor "breach". All that was revealed were peoples' e-mail addresses, and an e-mail address is essentially public information - you "reveal" it every time you send an e-mail.
Well the real story isn't so much the security breach, but the fact that the Feds are looking into this story. This kind of exposure for AT&T and Apple is not good. Esp. for Apple who the Feds where considering investigating Apple for it's Anti-Competitive tactics. I believe they just announced this morning that they will conduct an official investigation in the matter.

But a breach is a breach, there is nothing minor about it. Let me put it to you this way. If someone broke into your house and stole a gallon of Milk, would you just shrug it off and say "Hey it was just a gallon" and go about business as usual. Most likely not, you would feel vurnable and question all of the security in you house. Because it is not so much the actual loss but the exposure you have to more damaging intrusions.

You have mentioned you do have a Web/IT background I would imagine you would take such security breaches more seriously.


They did not only capture the email but the ICC-ID's and here is the type of activity somebody can perform when they are equipped with confidential information. Per the DailyTech

Quote:
With the ICC-ID and unique email in hand, malicious parties could easily launch mass attacks to try to gain further access. For example, it's likely that at least one of those email addresses with the password "darthvader" would return account access.
=X=

Last edited by =X=; 06-14-2010 at 11:59 AM.
=X= is offline   Reply With Quote