Security

Viber attack may have been more broad than initially thought [updated]

Internet companies beware, hackers are out in full force this month. In the past two weeks, we've seen Apple's Dev Center hacked, several Instagram accounts hacked, and the popular voice and messaging service Viber attacked.

Viber claims, though, that the damage it suffered from its breach was minimal, saying the attacker only gained access to two minor support systems. But a quick glance at its App Store description suggests that wasn't the case...

Instagram users hacked by smoothie spammer [update]

If you've been having trouble logging into your Instagram account this morning, or have noticed any strange photos posted to your stream, you're not alone. Several users are reporting that they've been hacked on the popular photo sharing network.

Reports first started surfacing about the issue on Twitter around 11PM last night, according to a report by The Verge. Users who suffered attacks complained that unauthorized photos along with strange URLs had been posted to their accounts...

Joy of Tech jokes about Dev Center outage

It's been more than a week now since a security researcher tapped an iAd Workbench vulnerability, prompting an unprecedented shutdown of Dev Center, but Apple is still struggling to bring all of the fifteen different services back up (only Bug Reporter and iTunes Connect were live at post time).

The outage isn't alarming (yet) - at least compared to the PSN breach - and Apple assured no credit card data or iTunes accounts was compromised.

But tell that to frustrated Apple developers who are unable to access their documentation, beta code and development tools. You can tell the unnerving situation is getting out of hand when satirists start joking about it...

Now iTunes activation servers are experiencing outage

Just when I thought Apple has started to recover from the Dev Center breach and that the brouhaha couldn't get any worse, now comes word that iTunes activation servers have been experiencing an extended outage for the past few hours. No matter how you look at this, it's another blunder for Apple.

Without iTunes servers working, customers are unable to activate their handsets. Apple's servers used to melt under heavy load before, but it always happened shortly after a new iPhone had gone on sale (2007/2008/2009 iPhone launches), never mid-cycle like today.

It was unclear at post time whether this development had anything to do with a breach last Thursday which prompted Apple to take the entire Dev Center down...

Amid continuing outage, Apple launches Dev Center status dashboard

Seven days into the Dev Center outage and there's no end in sight to this major blunder. Developers use Apple's Dev Center to access technical documentation, download iOS 7 and OS X beta builds, file bug reports, give feedback, use web tools to manage their code and much more.

Therefore, this downtime is entirely unacceptable and it's become totally conceivable now that such a significant downtime might spoil Apple's blockbuster Fall. Realizing as much, the firm on Wednesday posted a notice outlining its steps going forward.

And, a brand new dashboard status page charts Apple's recovery from the hack...

Security researcher used iAd Workbench exploit to hack Apple’s dev center

Last Thursday, an intruder attempted to secure personal information from Apple's developer website. The company immediately took the dev center offline, and at the time of this writing it's still down, in order to rebuild its systems in a way that this won't happen again.

But just exactly how did it happen? Well according to Turkish security researcher Ibrahim Balic, who is claiming responsibility for the outage, he was able to infiltrate Apple's servers thanks to an exploit he discovered in the recently released iAd Workbench software...

Apple: dev portal breach hasn’t compromised iTunes accounts or credit cards

You're probably aware by now Apple's portal for its registered developers has been down since noon on Thursday, July 18. The firm on Sunday updated the standard "we'll be back soon" message at the service's landing page to warn the "maintenance will take longer than expected".

Adding fuel to fire, Apple soon after emailed developers with details on what they revealed as a nasty security breach that may have left some private information exposed. Unfortunately, the company stopped short of detailing precisely what information might have been compromised and how.

Be that as it may, the seeming privacy scare has left many scratching their head over the potential unpleasantries that might transpire next. Apple on its part did confirm the breach won't affect consumer iTunes account and said no credit card data had been compromised...

Researcher claims he alerted Apple of developer center vulnerability

As you've probably heard by now, Apple's developer center was hacked. The portal has been down for over 4 days now, as the company says it is completely overhauling its systems, updating its server software, and rebuilding its entire database.

A statement from Apple claims ‘an intruder’ attempted to secure personal information about developers from the site, but it provided no further details about the incident. Now, a security researcher is claiming responsibility for the attack...

Apple developer site hacked, some info may have been exposed

On Friday, we noted that Apple's developer center—where it hosts downloads, documentation and other resources—had been down for a record 48 hours. Well here it is Sunday, and the dev portal appears to still be out of commission.

At first, the company was mum on the outage, saying only that it was sorry that "maintenance was taking longer than expected," and that it would make up for the lost time. But today, it broke the silence, announcing it has been hacked...

Saurik posts exploit and fix for ‘Master Key’ Android vulnerability

Jay Freeman, also known as Saurik, is well known by iOS users for his work in the jailbreak community. Not only does he run Cydia, the definitive jailbreak store, but he also develops tweaks and handles a number of other aspects.

But Saurik is also making a name for himself among Android users as well. Back in May, he released a working form of his Cydia substrate for Google's platform, and this weekend he's posted a fix for a major security vulnerability...

Over 700 million phones could be vulnerable to SIM card flaw

A German security researcher has discovered a massive vulnerability—one of the first of its kind—in the encryption used by some mobile SIM cards that could potentially allow hackers to remotely take control of their host handsets.

According to a report by The New York Times, the flaw relates to cards using DES (Data Encryption Standard)—an older standard that's being phased out by a number of manufacturers, but is still used by hundreds of millions of SIMs...

Security experts contracted to attempt to bypass iOS 7’s Activation Lock feature

Earlier this year, San Francisco's district attorney George Gascón met with Apple's government rep Michael Foulkes to discuss the rising number of iPhone thefts. He felt like the company could be doing more, on a technological level, to thwart these would-be thieves.

Apple responded in a major way. In June, the company introduced a new feature in iOS 7 called Activation Lock, which can prevent thieves from activating a stolen handset without the proper credentials. But while Gascón says he appreciates the effort, he's not convinced...