Apple Learning Interchange: Security Compromise

Apple is apparently alerting ALI forum members that Learning Interchange account passwords have been compromised. In a message forwarded to us by several TUAW readers, Apple warns that members who commonly use the same credentials on multiple sites may be at risk. If you are an ALI account user, please consider updating any accounts that use identical credentials. Here is the Apple quote that was sent to us.

We recently learned that the security of Apple Learning Interchange (ALI) members' names and passwords may have been compromised. These accounts are limited to accessing the ALI discussion board and do not contain sensitive information such as credit card or social security numbers.

While ALI member names and passwords are not linked to your Apple ID, our records indicate that your ALI member name and Apple ID are the same. For this reason we strongly recommend that you change your Apple ID password as well as any others that might have the same name and password combination.

At the time of posting, the ALI site (also linked to in the Source link) is unavailable. We do not have confirmation from Apple about this situation, although we have contacted them for a statement.

View Tags

Source: http://edcommunity.apple.com/ali/

Categories

Apple Security

Apple is apparently alerting ALI forum members that Learning Interchange account passwords have been compromised. In a message forwarded to...

Add a Comment

Sign in »

9 Comments

Filter by:

Roberto

I thought that the /etc/password file only contained the hash of each user password. So, even the webmaster or root cannot see your password, but the authentication algorithm can verify your entered password with the hash.

Were they using MD5?

July 03 2009 at 9:32 PM Report abuse Permalink rate up rate down Reply

Geeker

As far as I know the only place you can procure official Apple gear is from their company store in Cupertino.

http://www.apple.com/companystore/

July 03 2009 at 8:38 AM Report abuse Permalink rate up rate down Reply

ButisitArt

I recently had my Apple ID hijacked when I joined the iPhone Dev Center. I was asked to log in with my username & password for the Apple Dev Center, which of course your my Apple ID.

Within an hour or two, someone logged into iTunes changed my username & password, locking me out. They also bought two $50.00 iTunes Gift Certificates.

Being that Apple doesn't have 24 hr customer service I couldn't straighten it out until the next day.

There are many ways, someone can either change a password on an account. There is even a simple web eMail form where you can just ask to have it done. But no one has told me yet how it was changed. I want to know how this person got my info by joining one of the Apple Dev Connections?

This has Apple ID hijacking has been going on for years, and Apple has done nothing about it.

I documented the whole thing on my blog, if anyone is interested.

http://is.gd/1lJ0U

July 03 2009 at 2:19 AM Report abuse Permalink rate up rate down Reply

1 reply to ButisitArt's comment

boatbasin

Erica - Where can we cop that sweet hoodie in the pic?

July 03 2009 at 5:50 AM Report abuse Permalink rate up rate down Reply

designr

Well that's why I use 1Password. I can create a new password for every site I visit but only every have to type in my master password. One password to rule them all.

July 03 2009 at 12:39 AM Report abuse Permalink rate up rate down Reply

Ken

Where can I get the Apple sweatshirt in the photograph? It looks sweet.

July 03 2009 at 12:24 AM Report abuse Permalink rate up rate down Reply

2 replies to Ken's comment

Edward

+1 would love one of those!

July 03 2009 at 7:24 AM Report abuse Permalink rate up rate down Reply

Erica Sadun

Store Hours:
Monday - Friday 10:00 a.m. to 5:30 p.m.

Phone: (408) 974-5050

July 03 2009 at 9:12 AM Report abuse Permalink rate up rate down Reply

Kensico