[Coalition]

Source

A Guardian investigation has cast doubt on claims by a UK-based Turkish researcher that he hacked into Apple's Developer portal, which has been offline for more than a week.

Ibrahim Balic, who describes himself as a security consultant, claimed on Sunday that he had discovered a number of weaknesses in the site at developer.apple.com which allowed him to grab email addresses of registered developers.

Apple took its developer portal offline on Thursday 18 July. On Sunday it emailed developers warning that the site had been hacked and that some of their details might have been stolen. It has not given any more details of how the hack was carried out.

In all, Balic said he had been able to grab the details of 100,000 people registered on the site, and that he included 73 of them in a bug report to Apple. He claimed that he exploited a cross-site scripting (XSS) bug in the site, and noted 13 issues in a bug report to Apple between 16 and 20 July.

[Feat]

Wow, sometimes I think that these companies don't give a fuck about security because they think that they're invulnerable. I think forums are more secure than their sites sometimes.

[Coalition]

Wow, sometimes I think that these companies don't give a fuck about security because they think that they're invulnerable. I think forums are more secure than their sites sometimes.

Sites like Apple have a lot more aspects to the site than MyBB forum software. I'm sure that if some of the more skilled pentesters went search on MyBB forum software, they would find some flaws. Apple, in my opinion, is very well secured. Just because of one breach does not mean that they do not care about their security. I'm sure that they took this very seriously and if they haven't already patched it, are working on patching it.

[Sin]

lol I read about this.

Apple needs to step up their security

[Eclipse]

Haha. I just find this amusing.Good on the guy that hacked it. *Respect. But seriously Apple need to step up their security.

[Crimin4L]

lmfao, that't too good. Props to him for hacking them.

[Bliss]

Wow, sometimes I think that these companies don't give a fuck about security because they think that they're invulnerable. I think forums are more secure than their sites sometimes.

Sites like Apple and the developers section are really complex and larger than most if not all forums making it sometimes even easier to find an exploitation. I think Apple and other companies do need to employ more security experts to run tests on their websites, as I bet other companies have weaknesses that are just waiting to be found.