Reply to: Bloke gets hacked big style.Google, Twitter, Aoole ID, iPhone, iPad, MacBook wiped

[NickFitz]

Yeah.

Remote wipe plus no backup ever? I may be lazy sometimes but I could never be that lax.

Exactly. It's not as if it's hard to back up a Mac: plug in a USB drive (or get an Airport Extreme and plug a drive into that) and the OS will ask if you want to use it for Time Machine backups. Say yes and hey presto, you have regular backups happening silently in the background.

The other day I managed to screw up my Eclipse setup at ClientCo. I just logged into my network at home, opened up the Time Machine backup of the Applications directory and restored a working Eclipse from there

In fact, thinking about it, the only time I ever use the backup is restoring Eclipse to a previous working copy when a new plugin has destroyed things. I should stop using Eclipse

[Sysman]

The consensus of opinion seems to be that you should only set it up for a laptop when taking it somewhere it might be nicked, like when on holiday.

Unless of course you are a Civil Servant or work for the MoD and are prone to leaving the things in pubs, on buses or in taxis

[Ignis Fatuus]

Yeah.

Remote wipe plus no backup ever? I may be lazy sometimes but I could never be that lax.

[Sysman]

Apple only allowed them to remotely own all his apple devices.

Only because he'd set them up that way.

There's a good argument for setting a phone up for remote wipe, less so for a laptop.

The consensus of opinion seems to be that you should only set it up for a laptop when taking it somewhere it might be nicked, like when on holiday.

The moral in this story is that you don't want to set up remote wipe for all your stuff, at least not where it can be done from one account.

[Sysman]

Secure your digital self: auditing your cloud identity

Ars Technica: Secure your digital self: auditing your cloud identity

[vetran]

Yes, you'd expect better than that from Amazon and Apple.



Ah, just Apple getting the blame is it? Despite the fact that it was only Amazon's ludicrously insecure procedures that allowed them to hack Apple's system as the second step in the process?

good point they managed to get into Amazon's system as well, add a credit card and view the last 4 digits of another card a bit like every person who looks at a credit card receipt.

Now if they had been able to order a £100k of porn and deliver to another address then Amazon might have been in a worse state. But they didn't.

Apple only allowed them to remotely own all his apple devices.

[norrahe]

Dunno what online banking he's using but I need a lot more than e.mail to get at mine.

Cooperative bank used to have really crap security for their business banking, e-mail address/account number and password.

Not sure if they have improved it.

[NickFitz]

ably assisted by a wide open security model supplied by the fanbois favourite vendor.

Yes, you'd expect better than that from Amazon and Apple.

you would have thought that Apple would have run their security systems by a few experts before allowing remote wipe and chaining.

Ah, just Apple getting the blame is it? Despite the fact that it was only Amazon's ludicrously insecure procedures that allowed them to hack Apple's system as the second step in the process?

[Sysman]

Melodramatic muppet. He's lucky they didn't do a great deal more damage.

They could have used my e-mail accounts to gain access to my online banking, or financial service

Dunno what online banking he's using but I need a lot more than e.mail to get at mine.

[Ignis Fatuus]

In short, the very four digits (of a credit card number) that Amazon considers unimportant enough to display in the clear on the web are precisely the same ones that Apple considers secure enough to perform identity verification.

I do think that shows how ad hoc and poorly planned many security procedures are.

[vetran]

ably assisted by a wide open security model supplied by the fanbois favourite vendor.


you would have thought that Apple would have run their security systems by a few experts before allowing remote wipe and chaining.

[SupremeSpod]

Melodramatic muppet. He's lucky they didn't do a great deal more damage.

whs++;

He's a journalist, he's hyped up a situation that he brought upon himself.

[Mose]

Melodramatic muppet. He's lucky they didn't do a great deal more damage.

[farout117]

true - I'm changing all my passwords from "passw0rd" to "pa55w0rd", that should do it

cracking idea

[FiveTimes]

True or not, this article really makes you think how vulnerable we can be online, if you do not take the necessary precautions

true - I'm changing all my passwords from "passw0rd" to "pa55w0rd", that should do it