MacDailyNews Take: Gawker owns Gizmodo, which may or may not explain why Tate tries to claim that Apple has suffered an embarrassment when it was AT&T’s security that was breached.
Tate continues, “The breach, which comes just weeks after an Apple employee lost an iPhone prototype in a bar, exposed the most exclusive email list on the planet, a collection of early-adopter iPad 3G subscribers that includes thousands of A-listers in finance, politics and media, from New York Times Co. CEO Janet Robinson to Diane Sawyer of ABC News to film mogul Harvey Weinstein to Mayor Michael Bloomberg. It even appears that White House Chief of Staff Rahm Emanuel’s information was compromised.”
MacDailyNews Take: Again, Gawker owns Gizmodo, which may or may not explain why Tate maladroitly drops in the non-sequitur about how an “Apple employee lost an iPhone prototype in a bar.” It may also explain his use of the word “lost” as opposed to “stolen and fenced.”
Tate continues, “It doesn’t stop there. According to the data we were given by the web security group that exploited vulnerabilities on the AT&T network, we believe 114,000 user accounts have been compromised, although it’s possible that confidential information about every iPad 3G owner in the U.S. has been exposed.”
“Goatse Security obtained its data through a script on AT&T’s website, accessible to anyone on the internet,” Tate reports. “When provided with an ICC-ID as part of an HTTP request, the script would return the associated email address, in what was apparently intended to be an AJAX-style response within a Web application.”
Tate reports, “Exacerbating the situation is that AT&T has not yet notified customers of the breach, judging from the subscribers we and the security group contacted, despite being itself notified at least two days ago. It’s unclear of AT&T has notified Apple of the breach… Mobile security consultant and Nokia veteran Emmanuel Gadaix told us that while there have been “vulnerabilities in GSM crypto discovered over the years, none of them involve the ICC ID… as far as I know, there are no vulnerability or exploit methods involving the ICC ID. Another expert, white hat GSM hacker and University of Virginia computer science PhD Karsten Nohl, told us that while text-message and voice security in mobile phones is weak “data connections are typically well encrypted… the disclosure of the ICC-ID has no direct security consequences.”
Full article here.
MacDailyNews Take: Yet another screw up by AT&T used by Gawker to smear Apple. Wholly unsurprising.
[Thanks to MacDailyNews Readers “Fred Mertz” and “Steve” for the heads up.]
Who do I contact at AT&T;to find out if my iPad 3G was compromised? Why hasn’t AT&T;informed us about this already?
Your iPad was not compromised and these asshats could not wait to blame Apple.
Gotta love that unbiased reporting.
its Apple’s fault even though it is unknown if AT&T;has informed Apple of the breach.
and label it:
“Apples Worst Security Breach”
I wonder how much they paid the pretty shady looking Goatse Security org for the info? or if it really happened
…..what a bunch of A-HOLES at gizmo-gawk
I am suddenly rooting for the prosecutors……
Great!
Another good reason to jump off of the incompetent AT&T;and build iPhone/iPad for Verizon!
Don’t ask don’t tell method. You can’t call to complain if you don’t know.
It’s the simple issue of sweeping the broken lamp under the rug in hopes no one notices
So, the latest growing trend by all the in tech world, that feel helpless ( and incompetent) in the face of Apple’s paralyzing innovations and trailblazing inroads is to attack and smear without any relationship to truth or fact.
Apple’s leaving all the competition in the shit hole, because, as always, its easier to imitate and ripoff rather than innovate and invent.
Well you can fool some people sometimes but not even the dumbed down ones all the time.
Apple will shine because it produces the best value for your money and the best products ever that anyone and everyone can use and enjoy – out of the box.
Think Different, all others continue your mundane rhetoric and FUD.
@caddisfly “its Apple’s fault even though it is unknown if AT&T;has informed Apple of the breach.”
Er, well actually it is Apple’s fault…. WHO made the choice of AT&T;and signed an exclusive contract with them?
Apple is a fault. They would not be if hey gave their customers freedom of choice in wireless providers.
Wait a minute…Goaste Security? Couldn’t they have chosen a different name other than one of the internets most shocking sites?
At first I panicked, but then I realized that I was in elite company. I’m cool with that, especially since it’s your *account* email they may have obtained, not the actual email addresses you use with your iPhone. Your account emaill address should be the one you don’t mind being spammed.
Also…Goatse Security????
I can only imagine their logo…their tagline must be “we won’t let this happen to you”.
I long for the simple times. Vinyl records, black and white tv, and rotary phones.
Gawker should be taken out and shot for misrepresentation and defamation. I could do a better job of reporting than any Gawker hack.
Truly despicable. I’m boycotting all Gawker news sites forthwith.
=:~)
Wireless Test Man:
You have the logic of an unseasoned 2×4. Is Apple it’s brother’s keeper moron?
Chas:
Gawkers days are numbered, so is it’s credit and debt…
My response:
————————-
This article is pathetic. The color of Gawker Media’s “journalism” is pure piss yellow at this point.
Your loser efforts to smear Apple obfuscate the real issue, and that’s AT&T;security.
The article’s over bashing of Apple because of an AT&T;leak is so pathetically obvious it makes you look like simpering whiners. Ryan Tate you should be ashamed. Do you really think your readers are this stupid? Do you really think they aren’t snickering at you?
Are you this bitter for being outed as thieves and lowlives? It’s no one’s fault that you chose to purchase stolen property but your own.
A professional would simply have said, “Upon reflection, we realize that we were wrong and that our actions were not protected by the shield law and we humbly apologize to all serious journalists for our actions, and of course Apple Computer.” You might have garnered a bit of respect.
Instead, you blatantly whine like immature children.
Sad. I for one will be contacting your advertisers and telling them what I think.
Smiling like I’m unaffected because I am.
Smiling like I’m unaffected because I am.
Smiling like I’m unaffected because I am.
Smiling like I’m unaffected because I am.
Smiling like I’m unaffected because I am.
Smiling like I’m unaffected because I am.
Smiling like I’m unaffected because I am.
@Wireless Test Man
You have it completely wrong. If Apple had complete control from top to bottom, this shit wouldn’t happen. If Apple gave their “customers freedom of choice” then they would get blamed anytime these lousy companies screwed something up.
Apple needs to become their own wireless provider.
Those are strong words, compromised, when in fact all it is is an email address.
Plus, isn’t this illegal? Even when you find vulnerability, you should not take advantage of it and should not give that information away.
Hope AT&T;will sue that “security” company.
Something has to be the reason for AAPL being off way more than the market.
Could be all these un-Apple like blunders of recent weeks or it could be that the refresh of the phone is falling short of revolutionary expectations. Hmmmmm