+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: The Lounge (https://sinister.li/Forum-The-Lounge)
+--- Thread: Apple's Dev Panel Was Hacked (/Thread-Apple-s-Dev-Panel-Was-Hacked)
Apple's Dev Panel Was Hacked - Coalition - 07-26-2013
Quote:A Guardian investigation has cast doubt on claims by a UK-based Turkish researcher that he hacked into Apple's Developer portal, which has been offline for more than a week.
Ibrahim Balic, who describes himself as a security consultant, claimed on Sunday that he had discovered a number of weaknesses in the site at developer.apple.com which allowed him to grab email addresses of registered developers.
Apple took its developer portal offline on Thursday 18 July. On Sunday it emailed developers warning that the site had been hacked and that some of their details might have been stolen. It has not given any more details of how the hack was carried out.
In all, Balic said he had been able to grab the details of 100,000 people registered on the site, and that he included 73 of them in a bug report to Apple. He claimed that he exploited a cross-site scripting (XSS) bug in the site, and noted 13 issues in a bug report to Apple between 16 and 20 July.
RE: Apple's Dev Panel Was Hacked - Feat - 07-26-2013
Wow, sometimes I think that these companies don't give a fuck about security because they think that they're invulnerable. I think forums are more secure than their sites sometimes.
RE: Apple's Dev Panel Was Hacked - Coalition - 07-31-2013
(07-26-2013, 06:42 PM)G Wrote: Wow, sometimes I think that these companies don't give a fuck about security because they think that they're invulnerable. I think forums are more secure than their sites sometimes.
Sites like Apple have a lot more aspects to the site than MyBB forum software. I'm sure that if some of the more skilled pentesters went search on MyBB forum software, they would find some flaws. Apple, in my opinion, is very well secured. Just because of one breach does not mean that they do not care about their security. I'm sure that they took this very seriously and if they haven't already patched it, are working on patching it.
RE: Apple's Dev Panel Was Hacked - Sin - 07-31-2013
lol I read about this.
Apple needs to step up their security
RE: Apple's Dev Panel Was Hacked - Eclipse - 07-31-2013
Haha. I just find this amusing.Good on the guy that hacked it. *Respect. But seriously Apple need to step up their security.
RE: Apple's Dev Panel Was Hacked - Crimin4L - 07-31-2013
lmfao, that't too good. Props to him for hacking them.
RE: Apple's Dev Panel Was Hacked - Bliss - 08-01-2013
(07-26-2013, 06:42 PM)G Wrote: Wow, sometimes I think that these companies don't give a fuck about security because they think that they're invulnerable. I think forums are more secure than their sites sometimes.
Sites like Apple and the developers section are really complex and larger than most if not all forums making it sometimes even easier to find an exploitation. I think Apple and other companies do need to employ more security experts to run tests on their websites, as I bet other companies have weaknesses that are just waiting to be found.