Back to Mobile View

Skip to Content

Apple servers hacked by Anonymous

According to Anonymous' twitter account, the hacking group used a SQL injection exploit to pull down the usernames and passwords of several accounts from an Apple-run server (abs.apple.com). The passwords appear encrypted so there is little threat that others can abuse this account information. It's more a blow to the company's reputation. The hackers implied they could do more if they wanted, but told the company and the public not to worry as they "are busy elsewhere."



Categories

Apple

According to Anonymous' twitter account, the hacking group used a SQL injection exploit to pull down the usernames and passwords of...
 

Add a Comment

*0 / 3000 Character Maximum Comment Moderation Enabled. Your comment will appear after it is cleared by an editor.

15 Comments

Filter by:
Eric LaRue

Anonymous was better off when they were targeting the Church of Scientology. Why can't they find another worthy target? Like, say, the Republican party?

July 07 2011 at 1:30 PM Report abuse rate up rate down Reply
hereticmonkey

"busy elsewhere" = "we hit a dead end and rather than admit it, we're going home and taking our ball with us."

The server they hit smells like a honeypot to me.

July 05 2011 at 11:24 AM Report abuse rate up rate down Reply
Cy Starkman

Once you hack you've hacked. The claim they could have done more is hot air, there was no more to do. If they could have done more they would have.

Weffle runners. I'm glad I left that scene when I did, which was a very long long time ago.

July 05 2011 at 3:32 AM Report abuse rate up rate down Reply
Winnie Doodle

Even though I am a dog, I'm pretty sure the first sentence should read "an SQL" instead of "a SQL".

July 04 2011 at 3:46 PM Report abuse rate up rate down Reply
1 reply to Winnie Doodle's comment
Rdnymllnsktr

Wrong, this is correct, if you read it as "SEE-QWELL", instead of "S. Q. L.".

July 04 2011 at 5:18 PM Report abuse rate up rate down Reply
5 replies to Rdnymllnsktr's comment
Greg Peterson

Anonymous is boring

July 04 2011 at 3:13 PM Report abuse +2 rate up rate down Reply
Travis A.

"The passwords appear encrypted so there is little threat that others can abuse this account information."

Since when is this true? A decent machine can brute force a hash in anywhere from a few seconds to a few hours. Anything less than eight characters might as well be in plain text.

If your hashed password leaks, assume it compromised. The only thing having a strong 10+ character password grants you is that most likely nobody is going to waste the hours of CPU cycles cracking it when there are hundreds of idiots with "password" or "monkey" they can unlock in seconds. If there is reason for a particular account to be targeted, then it's only a matter of time.

Wearing those nice running shoes doesn't mean you can outrun the bear. It just helps you outrun your friends.


----------
(I realize the threat is small in this case as it's just a few passwords that will likely be changed before any real abuse occurs, but I felt the wording of the article might be a bit misleading to some concerning the amount of security afforded by the hashed form of a password being leaked)

July 04 2011 at 3:04 PM Report abuse rate up rate down Reply
Jacob Hulmston

What is the honest point! Seriously.

July 04 2011 at 1:33 PM Report abuse +3 rate up rate down Reply
bk

can someone please arrest these kids and put them away for longer than 2 months?

July 04 2011 at 1:27 PM Report abuse +3 rate up rate down Reply
1 reply to bk's comment
Mabhatter

They'll have to send in Foxconn's "accident" crew!

July 04 2011 at 9:42 PM Report abuse rate up rate down Reply
Buy an ad here

Tweets

© 2012 AOL Inc. All Rights Reserved.