News for hackers. Stuff that matters.
Re:No Thank You, Mr. Pecker by toephu2 on Friday February 08, 2019 @01:47AM (#19112074)
>"hacked" by either the US or Saudi government

You think the U.S./Saudi government can remotely grab pics from an iPhone?

Apple has disclosed lots of security info saying even they cannot do this. The iPhone/iOS wasn't built in that way.

I think the leak likely comes from someone close to Ms. Sanchez, or she fell victim to a phishing attack (or account recovery hack).

Re:No Thank You, Mr. Pecker by jayd16 on Friday February 08, 2019 @02:06AM (#19112136)
Just last week you could group facetime someone and get a audio feed without consent. Their security is not infallible.
Re:No Thank You, Mr. Pecker by rjf72 on Friday February 08, 2019 @03:37AM (#19112460)
Apple is part of the PRISM surveillance program [1] operated by the NSA. Internal slides from the NSA indicate that said program is capable of providing "extensive, in-depth surveillance on live communications and stored information" including email, video, voice chat, photos, and more.

When Apple was first approached about their role in PRISM they, unlike other companies, chose to outright lie stating that, "We have never heard of PRISM." along with the typical boilerplate about not allowing any government agency direct access to their servers. NSA access is presumably 'facilitated' indirect, explaining why most of all claims specifically state 'direct access' in their releases.

Other companies, for contrast, chose to offer misleading but technically honest responses. For instance Facebook said, "We do not provide any government organization with ~direct~ access to Facebook servers. When Facebook is asked for data or information about specific individuals, we carefully scrutinize any such request for compliance with all applicable laws, and provide information only to the extent required by law.".

The point of this is that what companies say, especially as it relates to their involvement in government surveillance programs is pretty much meaningless. We live in a world where their lying about participation is not illegal, but telling the truth would be. Quite a dystopic reality in many ways. As an aside this is not to say that leaks came from the government, but rather that it's extremely likely that the government could trivially obtain access to Bezos' online devices if desired. And given his position in the national economy (let alone media and space industries), I would expect such desires have long since existed even if only for 'national security', which in today's world of wide net surveillance happens to overlap with dick pics. And from there all it takes is one bad actor who gets tempted by the potential value of direct evidence showing the world's wealthiest man cheating on his wife.

[1] - https://en.wikipedia.org/wiki/PRISM_%28surveillance_program%...

Re:No Thank You, Mr. Pecker by sametmax on Friday February 08, 2019 @04:16AM (#19112625)
I find it amazing we have to repeat this again and again. People act like this never happened.

I'm really wondering what's the cognitive mechanism that allows people to just discard enormous informations like this one.

Re:No Thank You, Mr. Pecker by primroot on Friday February 08, 2019 @11:12AM (#19115546)
This, a thousand times. Besides, I recall someone saying (I think it was Bruce Schneier) that the way technology is making privacy something that cannot be taken for granted is similar to a process of pollution, in that the small effects accumulate until they become more visible in the future.

I think the analogy is even more appropriate, because the general attitude to pollution (especially Climate Metldown) seems to display that same cognitive mechanism you mention. There are the small cumulative effects, the ways in which taking any meaningful measure would uncomfortably interfere with our habits. The social fabric has just molded itself to the absurd reality, and our comfort and complicity is what makes the absurdity inspire oblivion and indifference instead of alarm and indignation. And then one day, unbreathable air, food insecurity, and nominal democracy become facts of life, and the dogma of progress (rather than progress itself) is what remains a constant.

Re:No Thank You, Mr. Pecker by astrange on Saturday February 09, 2019 @12:57AM (#19121023)
This description sounds like a database for results of subpoenas. It is not a secret that the government can send a subpoena…
Re:No Thank You, Mr. Pecker by baybal2 on Friday February 08, 2019 @05:09AM (#19112888)
> I would expect such desires have long since existed even if only for 'national security', which in today's world of wide net surveillance happens to overlap with dick pics.

Spooks like dirt and compromising materiel exactly because it is useful for blackmail.

Re:No Thank You, Mr. Pecker by thecatspaw on Friday February 08, 2019 @02:18AM (#19112170)
Remember the fappening? It doesnt need to be remote grabbing, people just upload their nudes to the icloud. Maybe jeff did as well.

While apple says they are end to end encrypted, I also assume they work with the FBI/whoever to catch owners of illegal content, so they probably would have a way to get the unencrypted content.

Re:No Thank You, Mr. Pecker by gbear605 on Friday February 08, 2019 @02:40AM (#19112250)
The “fappening” was done by phishing, not a direct hack on iCloud servers.
Re:No Thank You, Mr. Pecker by fauigerzigerk on Friday February 08, 2019 @03:11AM (#19112355)
Photos and files stored in iCloud are not end to end encrypted: https://support.apple.com/en-gb/HT202303
Re:No Thank You, Mr. Pecker by thecatspaw on Friday February 08, 2019 @03:43AM (#19112476)
Oops, I actually looked at that page, but misinterpreted it
Re:No Thank You, Mr. Pecker by kkarakk on Friday February 08, 2019 @03:49AM (#19112501)
"working with" the fbi usually means the fbi provides hashes of images containing illegal content like child pornography and image providers give up any accounts that contain images with those hashes(google does it this way)

they don't just give the fbi data access without a court order

Re:No Thank You, Mr. Pecker by thecatspaw on Friday February 08, 2019 @04:28AM (#19112692)
Sure, but to be able to create the exact same hash as the FBI you need to be able to access the unencrypted content.
Re:No Thank You, Mr. Pecker by mschuster91 on Friday February 08, 2019 @08:06AM (#19113745)
Local client creates hashes and transmits them together with the metadata and the encrypted data, Apple compares incoming hashes with FBI/NCMC/... databases. Easy as that.
Re:No Thank You, Mr. Pecker by toephu2 on Friday February 08, 2019 @12:53PM (#19116818)
Please read my post again, my theory covers that: "or she fell victim to a phishing attack (or account recovery hack)."
Re:No Thank You, Mr. Pecker by sajohn6 on Friday February 08, 2019 @03:15AM (#19112373)
Have you read the latest Apple iO2 12.1.4 security updates? There are 3 escalation exploits, and at least one of them remote.

Don't think for a second that major players can't dial in whenever they want.

Re:No Thank You, Mr. Pecker by Tempest1981 on Friday February 08, 2019 @03:55AM (#19112531)
There was mention of Michael Sanchez: https://www.thedailybeast.com/bezos-investigators-question-t... (Link at bottom of the medium post)

So it may have been his mistress' phone that was compromised.

Re:No Thank You, Mr. Pecker by toephu2 on Friday February 08, 2019 @12:52PM (#19116810)
Thus my theory stands. It was someone close to them.
Re:No Thank You, Mr. Pecker by jonny_eh on Friday February 08, 2019 @01:50AM (#19112087)
A hack is a hack
Re:No Thank You, Mr. Pecker by toephu2 on Friday February 08, 2019 @12:54PM (#19116830)
Forgot password is not a hack.