Forum Settings
       
« Previous 1 2 3
Reply To Thread

12 million iOS users' info released into the wild.Follow

#1 Sep 04 2012 at 3:20 PM Rating: Good
******
21,720 posts
http://blogs.computerworld.com/itbwcw/20120904/antisec-lulzsec-fbi-iphone-ipad-udid

There's a million stories on the web, I just picked the first one that came up. The gist of it is that an FBI officer had personal data (UDID, names, addresses, phone numbers, etc.) for over 12 million iOS device users sitting on a laptop. Said laptop was hacked by a group called #AntiSec and the file was stolen. They released 1 million of the abridged records (sans PII) as a kind of "FU" to the FBI to raise public awareness that this data was being compiled.

I posted about it on facebook and nobody said a word. I've also not seen anything posted here. Have we become so jaded on the subject of internet security that the potential for the FBI to have this data in the first place sparks absolutely zero discussion on the origin of the data or the security of the individuals whose information may now be compromised?
____________________________
R.I.P. Jessica M. 5/3/2010
This post brought to you by Carl's Jr.
gbaji wrote:
You guys keep tossing facts out there like they mean something.


#2 Sep 04 2012 at 3:40 PM Rating: Excellent
Sage
****
4,042 posts
Quote:
Have we become so jaded on the subject of internet security that the potential for the FBI to have this data in the first place sparks absolutely zero discussion on the origin of the data or the security of the individuals whose information may now be compromised?


Yes. It's amazing the things that we humans become accustomed to.
#3 Sep 04 2012 at 3:40 PM Rating: Default
The All Knowing
Avatar
*****
10,152 posts
I think it's ironic that its IOS given that the "knowledgeable" IOS users claim security as one of their primary reasons for choosing the iPhone.

Honestly, at this point, I think it's naive if you don't think that your information isn't readily available to someone.
#4 Sep 04 2012 at 3:46 PM Rating: Excellent
Meat Popsicle
*****
13,399 posts
I always assume the government is spying on me, but take solace in the fact nothing I do or have is interesting to anyone.
____________________________
That monster in the mirror, he just might be you. -Grover
#5 Sep 04 2012 at 4:23 PM Rating: Good
******
21,720 posts
someproteinguy wrote:
I always assume the government is spying on me


Well, the first question would be "What was the FBI doing with personal data for 12 million iOS users in the first place?", but at this point, the primary concern would be what whomever has access to the actual data chooses to do with it.
____________________________
R.I.P. Jessica M. 5/3/2010
This post brought to you by Carl's Jr.
gbaji wrote:
You guys keep tossing facts out there like they mean something.


#6 Sep 04 2012 at 4:34 PM Rating: Excellent
Meat Popsicle
*****
13,399 posts
BrownDuck wrote:
Well, the first question would be "What was the FBI doing with personal data for 12 million iOS users in the first place?"


Personally I'd rather not know, but I imagine such a list would be quite useful in many ways.

BrownDuck wrote:
the primary concern would be what whomever has access to the actual data chooses to do with it.


Sell it to someone would be my guess. Hello spam-bot!
____________________________
That monster in the mirror, he just might be you. -Grover
#7 Sep 04 2012 at 4:41 PM Rating: Excellent
Liberal Conspiracy
*******
TILT
I assumed it was God punishing the Apple users.
____________________________
Belkira wrote:
Wow. Regular ol' Joph fan club in here.
#8 Sep 04 2012 at 6:17 PM Rating: Default
The All Knowing
Avatar
*****
10,152 posts
Pretty sure it's a sin to use an iPhone.
#9 Sep 04 2012 at 7:07 PM Rating: Decent
Encyclopedia
******
34,982 posts
BrownDuck wrote:
someproteinguy wrote:
I always assume the government is spying on me


Well, the first question would be "What was the FBI doing with personal data for 12 million iOS users in the first place?", but at this point, the primary concern would be what whomever has access to the actual data chooses to do with it.


Isn't that data that's basically published to every app you use? Don't get me wrong, I think it's moronic how Apple set this up (it's the equivalent of a cookie that hands every web site you visit your personal information), but that's Apple being the evil empire that it is. I hardly blame the FBI for this.
____________________________
King Nobby wrote:
More words please
#10 Sep 04 2012 at 7:10 PM Rating: Excellent
Scholar
****
4,559 posts
Ignoring the questions about why they have it (I mean really? How many of us really think governments don't have this kind of data?) .

Why is it on a **** laptop? And further to that, why is it on ANY device with an internet connection?
#11 Sep 04 2012 at 7:39 PM Rating: Excellent
Avatar
******
29,913 posts
You have to remember that there are a very large population of federal and state high ranking law enforcement agents who have essentially only the slightest clue how electronic information security works. Which is ironic because many of these same individuals could probably give a lecture on how to find and disable phone taps and secure perimiters from optical microphone spying. But anyways, they have enough rank to get the data whenever they want it, the data is small enough to be moved easily and quickly in a variety of forms, and most small law enfocement agencies are more connected to the bigger data sources due to homeland security than they ever were before. Aside from the NSA and a few domestic CIA areas, no one has the budget to put up dedicated secured fiber optic links with sufficient security to ensure they aren't being tapped. Everyone else is relying on internet service providers of some sort, with antiquated computer equipment often running outdated software / firmware. Even the best of them tend to have some sort of pre-patch deployment testing, which leaves things open for targetted zero day attacks. That and so many people are conditioned to give information to "bob from IT" over the phone. In many instances corporations are even worse, because they give their data to Marketing People, who probably would sell the data under the table to a hacker for the right price. As much as I hate apple, its not just them either. Somewhere, there is a record of serial numbers that go with my motherboards. Those serial numbers theoretically tie to the list of MAC addresses for devices on those boards, and since they are registered for warranty purposes, they probably tie to my personal info, which given websites for certain motherboard makers, a toddler could probably accidentally hack. I can mitigate that somewhat from my end of course, but all data phones period are in the same boat. Apple just happens to make alot of them and has a really stupid way of storing the data.

The problem is that there are no concequinces. No requirements for my bank to disclose to me personally what retailer I use got hacked when they issue me a new credit card, no requirement that apple give these people new phones to complensate for the released data. If its a corporation there is at least a chance that someone will sue, but if its government, there is almost no chance of any action occuring at all, no matter how severe the breach. It's a broken system, and its going to remain broken until people start learning how to implement encryption and stop treating dataphones as a good place to do their banking on.
____________________________
Arch Duke Kaolian Drachensborn, lvl 95 Ranger, Unrest Server
Tech support forum | FAQ (Support) | Mobile Zam: http://m.zam.com (Premium only)
Forum Rules
#12 Sep 05 2012 at 7:37 AM Rating: Good
******
49,821 posts
Yodabunny wrote:
And further to that, why is it on ANY device with an internet connection?
Probably because he's not the only one working with that information.
____________________________
George Carlin wrote:
I think it’s the duty of the comedian to find out where the line is drawn and cross it deliberately.
#13 Sep 05 2012 at 7:51 AM Rating: Default
The All Knowing
Avatar
*****
10,152 posts
lolgaxe wrote:
Yodabunny wrote:
And further to that, why is it on ANY device with an internet connection?
Probably because he's not the only one working with that information.

You can create a network that isn't on the Internet though. Anything that sensitive shouldn't be accessible outside of one location.
#14 Sep 05 2012 at 7:52 AM Rating: Good
Skelly Poker Since 2008
*****
16,595 posts
Nokia Lumia with Windows 8 launches today.





Edited, Sep 5th 2012 3:57pm by Elinda
____________________________
Alma wrote:
I lost my post
#15 Sep 05 2012 at 8:46 AM Rating: Good
****
6,471 posts
Elinda wrote:
Nokia Lumia with Windows 8 launches today.


Lots of phone press events going on today. Nokia, Microsoft, Motorola, Verizon, & I believe Samsung/HTC are in a couple weeks.

Nokia/Microsoft's thing is going on now. I've been paying close attention to this stuff based on what I mentioned in the Windows Phone thread.

On that, note, if I don't hear anything compelling about Verizon Windows Phones, I'm probably going to just go for a Droid Razr Maxx. It's supposed to have pretty nice battery life, and it's 4G.
#16 Sep 05 2012 at 9:35 AM Rating: Decent
******
21,720 posts
Almalieque wrote:
You can create a network that isn't on the Internet

SIPRNet.

Or, you know, my perfectly good home network sans router.

Also, I have a friend who works network security analysis for the US military and I can assure you they have multiple private internal networks you have no clue about. That movie cliche about a facility being so secure that no personal items (even coffee mugs and key chains) are allowed inside isn't entirely made up.

Edited, Sep 5th 2012 10:38am by BrownDuck
____________________________
R.I.P. Jessica M. 5/3/2010
This post brought to you by Carl's Jr.
gbaji wrote:
You guys keep tossing facts out there like they mean something.


#17 Sep 05 2012 at 10:05 AM Rating: Default
The All Knowing
Avatar
*****
10,152 posts
BrownDuck wrote:
Almalieque wrote:
You can create a network that isn't on the Internet

SIPRNet.

Or, you know, my perfectly good home network sans router.

Also, I have a friend who works network security analysis for the US military and I can assure you they have multiple private internal networks you have no clue about. That movie cliche about a facility being so secure that no personal items (even coffee mugs and key chains) are allowed inside isn't entirely made up.

Edited, Sep 5th 2012 10:38am by BrownDuck


I'm a Signal Officer for the Army. I'm very familiar with SIPRNET, as I've been working with it in the past 6 years.I also spent the last 5 years as a COMSEC custodian...I'm familiar with the G-14 rooms.
#18 Sep 05 2012 at 10:06 AM Rating: Good
******
21,720 posts
Almalieque wrote:
BrownDuck wrote:
Almalieque wrote:
You can create a network that isn't on the Internet

SIPRNet.

Or, you know, my perfectly good home network sans router.

Also, I have a friend who works network security analysis for the US military and I can assure you they have multiple private internal networks you have no clue about. That movie cliche about a facility being so secure that no personal items (even coffee mugs and key chains) are allowed inside isn't entirely made up.

Edited, Sep 5th 2012 10:38am by BrownDuck


I'm a Signal Officer for the Army. I'm very familiar with SIPRNET, as I've been working with it in the past 6 years.I also spent the last 5 years as a COMSEC custodian...I'm familiar with the G-14 rooms.


Then you should realize how stupid your previous blanket statement was.
____________________________
R.I.P. Jessica M. 5/3/2010
This post brought to you by Carl's Jr.
gbaji wrote:
You guys keep tossing facts out there like they mean something.


#19 Sep 05 2012 at 10:08 AM Rating: Default
The All Knowing
Avatar
*****
10,152 posts
BrownDuck wrote:
Almalieque wrote:
BrownDuck wrote:
Almalieque wrote:
You can create a network that isn't on the Internet

SIPRNet.

Or, you know, my perfectly good home network sans router.

Also, I have a friend who works network security analysis for the US military and I can assure you they have multiple private internal networks you have no clue about. That movie cliche about a facility being so secure that no personal items (even coffee mugs and key chains) are allowed inside isn't entirely made up.

Edited, Sep 5th 2012 10:38am by BrownDuck


I'm a Signal Officer for the Army. I'm very familiar with SIPRNET, as I've been working with it in the past 6 years.I also spent the last 5 years as a COMSEC custodian...I'm familiar with the G-14 rooms.


Then you should realize how stupid your previous blanket statement was.


Or maybe you misunderstood?
#20 Sep 05 2012 at 10:12 AM Rating: Good
******
21,720 posts
Almalieque wrote:
BrownDuck wrote:
Almalieque wrote:
BrownDuck wrote:
Almalieque wrote:
You can create a network that isn't on the Internet

SIPRNet.

Or, you know, my perfectly good home network sans router.

Also, I have a friend who works network security analysis for the US military and I can assure you they have multiple private internal networks you have no clue about. That movie cliche about a facility being so secure that no personal items (even coffee mugs and key chains) are allowed inside isn't entirely made up.

Edited, Sep 5th 2012 10:38am by BrownDuck


I'm a Signal Officer for the Army. I'm very familiar with SIPRNET, as I've been working with it in the past 6 years.I also spent the last 5 years as a COMSEC custodian...I'm familiar with the G-14 rooms.


Then you should realize how stupid your previous blanket statement was.


Or maybe you misunderstood?


You're right. I completely misunderstood
Quote:
You can create a network that isn't on the Internet


Perhaps you could tell me how that statement possibly has more than one meaning.
____________________________
R.I.P. Jessica M. 5/3/2010
This post brought to you by Carl's Jr.
gbaji wrote:
You guys keep tossing facts out there like they mean something.


#21 Sep 05 2012 at 10:21 AM Rating: Default
The All Knowing
Avatar
*****
10,152 posts
Quote:
Perhaps you could tell me how that statement possibly has more than one meaning.


So, you don't understand.. There's no other meaning. How about you tell me how that is stupid or contradicts your statement?

You clearly don't understand COMSEC. Take that from a COMSEC Custodian and don't even bother trying to get out of this without looking silly. I assure you that you can't.

Edited, Sep 5th 2012 6:23pm by Almalieque
#22 Sep 05 2012 at 10:28 AM Rating: Good
Scholar
****
4,559 posts
I went home last night and unplugged my broadband modem from my router. BAM! Network that isn't connected to the internet...it's like...magic or something.
#23 Sep 05 2012 at 10:35 AM Rating: Excellent
Meat Popsicle
*****
13,399 posts
Yodabunny wrote:
I went home last night and unplugged my broadband modem from my router. BAM! Network that isn't connected to the internet...it's like...magic or something.


You don't get it, it's more complicated than that. You clearly don't understand COMSEC.

Smiley: disappointed
____________________________
That monster in the mirror, he just might be you. -Grover
#24 Sep 05 2012 at 10:44 AM Rating: Default
The All Knowing
Avatar
*****
10,152 posts
So, are you saying that a standalone computer is a network? Else, unplugging it doesn't make it a "network not connected to the Internet". 'Tis indeed "more complicated than that". I don't even mess with networks like that and I know that much.
#25 Sep 05 2012 at 10:47 AM Rating: Excellent
******
21,720 posts
Almalieque wrote:
So, are you saying that a standalone computer is a network? Else, unplugging it doesn't make it a "network not connected to the Internet". 'Tis indeed "more complicated than that". I don't even mess with networks like that and I know that much.

Hey dumb ***. If I unplug the internet cable from my router, all of my computers (wired and wifi) are still connected to each other, but there is zero internet connectivity. It really is no more complex than that.

It's OK though, keep talking out of your ***.

Edited, Sep 5th 2012 11:49am by BrownDuck
____________________________
R.I.P. Jessica M. 5/3/2010
This post brought to you by Carl's Jr.
gbaji wrote:
You guys keep tossing facts out there like they mean something.


#26 Sep 05 2012 at 10:53 AM Rating: Decent
Scholar
****
4,559 posts
Standalone? Dude, I have 7 systems running...
« Previous 1 2 3
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 3 All times are in CST
Anonymous Guests (3)