Massive hacking of iTunes accounts happening right now! - Page 4

kjk · 07-05-2010, 07:53 PM

Quote:

Originally Posted by Kali Yuga

Yeah, I have to generally agree with the Macrumors summary. As usual with all things Apple, it's likely to get hyped beyond all reason.

This pales in comparison to, say, someone nickel and diming $10 million from compromised credit cards, or stealing 45 million credit card numbers.

Of course this isn't a good thing, but in the grand scheme of things it's not a big deal.

Hey, I was one of those 45 million!

vaughnmr · 07-05-2010, 08:11 PM

Quote:

Originally Posted by kjk

Hey, I was one of those 45 million!

I was too, that's why I started this thread yesterday.

During that, a manager at my bank told me they had to replace almost all of the debit/credit cards at their bank (thousands) and they weren't the only bank involved. Millions of dollars in losses. Not a word on the news. You didn't find out until you were notified by the bank or noticed the losses. They want to keep it very quiet...

J. Strnad · 07-05-2010, 10:52 PM

A word about debit cards:

If your debit card has a MasterCard or Visa logo, and if you can "charge" purchases without entering a PIN number, anyone with your card or its number can wipe out your checking account. Also, if you continue to use the card after the account has been wiped out, your "overdraft protection" will kick in and you'll be charged $20-30 per overage. And, if you have written paper checks on this account, once it's wiped out, you'll have checks bouncing all over town at $20 or so a pop.

Never, ever, link your debit card to MasterCard or Visa, and never, ever sign up for "overdraft protection." Every purchase should require your PIN number. And when you overdraw the account accidentally, the clerk should tell you, "Sorry, but this purchase has been declined."

Lessons learned from experience, BTW. And even if the bank gives you credit for all of the purchases, those bounced check fees from retailers aren't going away.

Sydney's Mom · 07-06-2010, 05:32 PM

American Express actually called me, and asked if I made $400 worth of purchases at itunes (music). I checked with my daughter (boy, would she have been in trouble!), and found out they were fraudulent. AE immediately issued another card, and said they had a lot of trouble with this. It was about a month ago for me.

NNolan · 07-06-2010, 07:40 PM

And this is why B&N's "social DRM", tied to a valid credit card, gives me the heebie-jeebies.

Kali Yuga · 07-06-2010, 10:58 PM

Quote:

Originally Posted by NNolan

And this is why B&N's "social DRM", tied to a valid credit card, gives me the heebie-jeebies.

Oh, please. Your credit card number can get nailed just about anywhere, and B&N's system does allow you to change your CC.

Turns out that only 400 iTunes accounts were compromised. Even if this is off by a factor of 10, this is a pretty puny scam.

Dopedangel · 07-06-2010, 11:59 PM

Quote:

Originally Posted by Kali Yuga

Oh, please. Your credit card number can get nailed just about anywhere, and B&N's system does allow you to change your CC.

Turns out that only 400 iTunes accounts were compromised. Even if this is off by a factor of 10, this is a pretty puny scam.

400 * $500 = $800000.00
4000 * $500 = $8000000.00

Not a puny scam by any accounts. And Apple not coming out and giving a forceful statement that the problem is limited point to a bigger problem.

BenLee · 07-07-2010, 12:45 AM

Just amazed at how insecure your digital data really is, even with huge companies like Apple. This will not help increase consumer confidence for purchasing online, that's for sure.

HarryT · 07-07-2010, 03:24 AM

Quote:

Originally Posted by NNolan

And this is why B&N's "social DRM", tied to a valid credit card, gives me the heebie-jeebies.

Sorry, why does it? It's tied to a credit card number; there's no requirement that the card be valid after you've bought the book.

NNolan · 07-07-2010, 07:26 AM

Quote:

here's no requirement that the card be valid after you've bought the book.

Tell that to the Nook owner on the B&N boards who was locked out of all her books because her husband didn't mail the credit card payment on time.

kindlekitten · 07-07-2010, 08:40 AM

Quote:

Originally Posted by NNolan

Tell that to the Nook owner on the B&N boards who was locked out of all her books because her husband didn't mail the credit card payment on time.

how could that happen? once they are purchased, they are purchased. they aren't rented

HarryT · 07-07-2010, 08:42 AM

Quote:

Originally Posted by NNolan

Tell that to the Nook owner on the B&N boards who was locked out of all her books because her husband didn't mail the credit card payment on time.

Certainly; I'd be happy to. Would you like to give me the person's e-mail address?

The credit card number is used purely as the encryption key for the books. Nothing more. What you describe is simply not possible.

HarryT · 07-07-2010, 09:52 AM

More information is emerging about the recent iTunes App Store issues. This article by The Register suggests that around 400 accounts were compromised, and that logon credentials were obtained by a phishing attack; the security of the iTunes Store itself was not hacked.

HamsterRage · 07-07-2010, 10:17 AM

Quote:

Originally Posted by Dopedangel

400 * $500 = $800000.00
4000 * $500 = $8000000.00

Not a puny scam by any accounts. And Apple not coming out and giving a forceful statement that the problem is limited point to a bigger problem.

I'm going to have to call you on the math there, Dopedangel.

400 * $500 = $200,000.00
4000 * $500 = $2,000,000.00

Still not puny.

kjk · 07-07-2010, 10:39 AM

Quote:

Originally Posted by HarryT

More information is emerging about the recent iTunes App Store issues. This article by The Register suggests that around 400 accounts were compromised, and that logon credentials were obtained by a phishing attack; the security of the iTunes Store itself was not hacked.

Probably the most directed example of a phishing attack that I've read about:
Guy sends out fake iTunes related emails
Guy gets people to click
Guy steals account info
Guy uses everyones account info to...buy his app
App goes to top 10 list in that category
?
Profit?

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Massive wave of ebook piracy?	fjtorres	News	608	11-10-2010 12:52 PM
Massive iTunes hacking/stolen money underway at this time	vaughnmr	Apple Devices	62	07-09-2010 10:12 PM
iTunes Accounts Being Hacked On Mass	Lotus Esprit	Apple Devices	0	07-04-2010 09:13 PM
Massive conversion in .prc	idum	Kindle Formats	2	11-10-2008 09:22 AM

07-05-2010, 10:52 PM	#48
J. Strnad Guru Posts: 915 Karma: 3537194 Join Date: Feb 2009 Device: Kobo, Kindle 3, Paperwhite	A word about debit cards: If your debit card has a MasterCard or Visa logo, and if you can "charge" purchases without entering a PIN number, anyone with your card or its number can wipe out your checking account. Also, if you continue to use the card after the account has been wiped out, your "overdraft protection" will kick in and you'll be charged $20-30 per overage. And, if you have written paper checks on this account, once it's wiped out, you'll have checks bouncing all over town at $20 or so a pop. Never, ever, link your debit card to MasterCard or Visa, and never, ever sign up for "overdraft protection." Every purchase should require your PIN number. And when you overdraw the account accidentally, the clerk should tell you, "Sorry, but this purchase has been declined." Lessons learned from experience, BTW. And even if the bank gives you credit for all of the purchases, those bounced check fees from retailers aren't going away.

07-06-2010, 05:32 PM	#49
Sydney's Mom Wizard Posts: 2,899 Karma: 6995721 Join Date: Dec 2008 Location: Idaho, on the side of a mountain Device: Kindle Oasis, Fire 3d Gen and 5th Gen and Samsung Tab S	American Express actually called me, and asked if I made $400 worth of purchases at itunes (music). I checked with my daughter (boy, would she have been in trouble!), and found out they were fraudulent. AE immediately issued another card, and said they had a lot of trouble with this. It was about a month ago for me.

07-06-2010, 07:40 PM	#50
NNolan Compulsive Gadget Geek Posts: 407 Karma: 4219324 Join Date: Mar 2010 Location: South Central Virginia Device: One of each, and two in some cases	And this is why B&N's "social DRM", tied to a valid credit card, gives me the heebie-jeebies.

07-07-2010, 12:45 AM	#53
BenLee eReader Junkie Posts: 304 Karma: 1220 Join Date: Jun 2010 Location: New York City, NY Device: Kindle + Sony	Just amazed at how insecure your digital data really is, even with huge companies like Apple. This will not help increase consumer confidence for purchasing online, that's for sure.

07-07-2010, 09:52 AM	#58
HarryT eBook Enthusiast Posts: 85,560 Karma: 93980341 Join Date: Nov 2006 Location: UK Device: Kindle Oasis 2, iPad Pro 10.5", iPhone 6	More information is emerging about the recent iTunes App Store issues. This article by The Register suggests that around 400 accounts were compromised, and that logon credentials were obtained by a phishing attack; the security of the iTunes Store itself was not hacked.