Skip to main content

Security

See All Stories

Comment: Text message security breach underlines sense of Apple’s approach to 2FA

A major security breach, reported by TechCrunch, has underlined the sense of Apple’s approach to two-factor authentication (2FA).

A security lapse has exposed a massive database containing tens of millions of text messages, including password reset links, two-factor codes, shipping notifications and more.

The exposed server belongs to Voxox (formerly Telcentris), a San Diego-based communications company. The server wasn’t protected with a password, allowing anyone who knew where to look to peek in and snoop on a near-real-time stream of text messages …


Expand
Expanding
Close

Some iPhone users finding their Apple ID accounts have been inexplicably locked, requiring password resets

apple id phishing

We haven’t quite yet worked out the pattern or the cause but we have received many reports of users waking up to find that their Apple ID has been locked, and plenty more are complaining on social media. Apple will lock accounts for many different reasons, usually when someone attempts to access an ID by entering their incorrect password too many times.

Access to the account can be restored by answering the security questions and entering a trusted phone number for validation. Users may also have to reset their passwords.


Expand
Expanding
Close

Former Facebook security chief criticizes Apple’s privacy practices in China

On the heels of Tim Cook’s comments at a Brussels privacy event this afternoon, Facebook’s former security chief is criticizing Apple privacy practices in China. Alex Stamos, who served as Facebook’s chief security officer from 2015 through this year, took to Twitter to voice his concerns regarding Apple privacy in the country (via CNBC).


Expand
Expanding
Close

Apple apologizes for hacked Apple IDs in China, says account details were phished

Apple has apologized following a recent spate of account hacks in China. The company said ‘we are deeply apologetic about the inconvenience caused to our customers by these phishing scams’, which it said affected a ‘small number’ of user accounts.

Although details on exactly what happened have not been disclosed, Apple said that the affected accounts were not secured with two-factor authentication. This allowed criminals to phish for account credentials and then extract money using apps like Alipay, as reported last week.


Expand
Expanding
Close

One of Bloomberg’s sources told them Chinese spy chip story “didn’t make sense” [U]

Bloomberg

Bloomberg said that its sources were key to its decision to run the Chinese spy chip story, the site writing that ’17 people confirmed the manipulation of Supermicro’s hardware and other elements of the attacks.’

However, one of the named sources – a security researcher who seemingly backed the claims – has said that his comment was taken out of context, and he actually told the site that what it was describing to him “didn’t make sense” …


Expand
Expanding
Close

Comment: Four more reasons it’s now inconceivable Apple lied about Chinese spy chips

chinese spy chip

I wrote an opinion piece on Friday outlining the five reasons I believe Apple, not Bloomberg, about the Chinese spy chip story.

It’s a friend-of-a-friend story. The technical arguments suggest it didn’t happen in the way Bloomberg says it did. Apple’s denial appears unequivocal. The company has ruled out the gag order theory. And, if it were true, there would be no reason now not to come clean about it.

Since then, four further reasons to believe Apple have emerged …


Expand
Expanding
Close

Senior Apple execs deny allegations of iCloud server Chinese ‘spy’ chips in new report

Site default logo image

Following a string of denials from the company itself, “multiple senior Apple executives” have now spoken to BuzzFeed News regarding Bloomberg’s puzzling story alleging server infiltration by a Chinese spy chip. The executives, who spoke under the condition on anonymity, strongly denied the story to BuzzFeed and offered more details on the internal Apple investigation.


Expand
Expanding
Close

Bruce Sewell

Apple’s retired legal chief further confirms Apple has ‘never heard of’ these Chinese server spies

Over the past day or so, Bloomberg reported that some of Apple’s servers were compromised by way of a third-party implementing micro chips, and sending data back to China. Apple came back with a strong response noting that it was never made aware of such accusations nor did it have any ongoing investigations with the FBI or law enforcement.


Expand
Expanding
Close

Apple continues denial of Chinese server spy infiltration with new statement

Earlier today, Apple issued an incredibly strong denial in response to a report from Bloomberg, which alleged that Apple and a handful of other tech companies had some data compromised due to Chinese surveillance chips being found in a Super Micro server. The report noted that these chips were found on Apple’s servers sometime around 2015.

Following its earlier statement on the report, Apple has now published a press release on its website detailing what actually happened as it continues to deny the allegations.


Expand
Expanding
Close

Apple strongly refutes report that it found Chinese ‘spy’ chips in iCloud servers

Bloomberg has today published a report claiming that companies including Amazon and Apple found Chinese surveillance chips in their server hardware contracted from Super Micro. Bloomberg claims Apple found these chips on its server motherboards in 2015. Apple is strongly refuting this report, sending out press statements to several publications, not just Bloomberg.

In a statement to CNBC, Apple said ‘we are deeply disappointed that in their dealings with us, Bloomberg’s reporters have not been open to the possibility that they or their sources might be wrong or misinformed.’.


Expand
Expanding
Close