Re:iCloud Apple ID Brute Forcer
by SecurityAlert on Friday January 02, 2015 @07:13AM
(#8826477)
Skip the link, but know it's out there.
[ Parent
| on HN ]
Re:iCloud Apple ID Brute Forcer
by Intermernet on Friday January 02, 2015 @07:28AM
(#8826517)
Why skip the link? Is knowledge dangerous, or is it a case of offending sensibilities? I'm not sure what you're implying.
I think what SecurityAlert is saying is that there isn't really any value in the repo: as others have pointed out, it's just a simple PHP script that iterates through a dictionary.
It's just meant to bring attention to the fact that Apple doesn't rate limit an endpoint that absolutely should be rate limited, and you don't actually need to see the repo to understand that.