funsec mailing list archives

Re: Apple's faith-based security taking a hammering


From: Valdis.Kletnieks () vt edu
Date: Wed, 14 Sep 2011 12:41:30 -0400

On Wed, 14 Sep 2011 10:40:22 EDT, Joel Esler said:
My thought behind the whole thing is that iTunes accounts are getting hacked 
by brute force of the password.

There are indications that at least some are being done via phishing, and there have
been complaints about the fact that iTunes passwords get cached - which means
that if you enter the iTunes password for one purpose and then your kid is playing
with the device, the app can zing you for a second transaction without the kid
having to enter the password again.

Attachment: _bin
Description:

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread: