Cyber Hacker has posted Naked photos of many celebs Online (according to Daily Mail)

[Ladybug09]

Putting something in 'Cloud storage' is putting it on the web. If you put it on the web, don't be surprised if it surfaces someday, somewhere, when you least expect it.

If you don't want it out here, don't put it out here. Keep it on physical media like a thumb drive or XD/SD card.

Even then, if it's in the device, hackers can still get access to the data.

 

[jimmyshoogirl]

Eh im all for taking pics for your husband. I'm sure those celebs weren't thinking that some unstable hacker with way too much time on their hands would go through great lenghts to tamper with ish thats not theirs. This is an example of why some things are way too overregulated. Too many rules because people cant and refuse to stay in their lane.

All these people thinking it's the celebs fault is ridiculous. Basically, stop living your life because people refuse to take responsibility for messing with private information and the victim is the villain. I would like to see the hacker use that defense, "well they shouldnt have put it in the cloud." BS.

I definitely will not be feeding into this by looking at the pics because they weren't meant for my eyes to see.

 

[Chanel522]

Eh im all for taking pics for your husband. I'm sure those celebs weren't thinking that some unstable hacker with way too much time on their hands would go through great lenghts to tamper with ish thats not theirs. This is an example of why some things are way too overregulated. Too many rules because people cant and refuse to stay in their lane.

All these people thinking it's the celebs fault is ridiculous. Basically, stop living your life because people refuse to take responsibility for messing with private information and the victim is the villain. I would like to see the hacker use that defense, "well they shouldnt have put it in the cloud." BS.

I definitely will not be feeding into this by looking at the pics because they weren't meant for my eyes to see.

Best post here IMO. You hit the nail on the head w everything you said 👍

 

[Nathalya]

Has Jennifer Lawrence already responded? I feel like almost all headlines about this topic include Jennifer Lawrence name and picture. Why? Are most of the pictures hers?

 

[Echoes]

I'm sure those celebs weren't thinking that some unstable hacker with way too much time on their hands would go through great lenghts to tamper with ish thats not theirs.

Have you not been paying attention over the last 10-15 years? Hackers will go after anything. Or nothing. They break into systems just to see if it can be done, even if they don't take anything. They'll go after a website like this just to put their name on the header page.

It may not be a legal defense, but it's simple basic common sense when it come to privacy and personal security. If you don't want it on the web, don't put it on the web.

 

[labelwhore04]

Celebs get hacked ALL the time, in fact if you're a big celeb, it's almost guaranteed that someone will hack you at one point. They should really know better than to have naked pics of themselves, especially with their face included. Even regular people know that if you're gonna take a nude, don't include the face. The hacker is obviously the one in the wrong but with everything else in life, you need to take precautions. It's not about "placing blame." There will always be bad, sick people out there waiting to pounce, you need to do your best to protect yourself and be smart about things, especially when you're in the public eye. You may not be able to keep everything sealed on your devices from a hackers point but you can at least make sure there are no compromising pictures. There are a lot of things in life that are out of your control but this isn't one of them. It's not gonna kill you or ruin your life to NOT take nudes.

 

[Echoes]

If this is true, they may not have even used secure passwords:

The online hack that led to the posting of hundreds of explicit photos of some of Hollywood’s most famous female stars could have been down to an attack on their passwords.

Stars including actress Jennifer Lawrence and model Kate Upton saw intimate photos posted on forum site 4chan on Sunday evening, with some reports initially concluding that Apple’s iCloud service had been compromised to access the images.

A piece of computer code that repeatedly guesses passwords has been found online. The script was posted to software site GitHub, but a message has since appeared saying that Apple has issued a “patch” or fix for the bug.

“The end of the fun, Apple has just patched,” read an update on the post. The technology giant is yet to make any comment on the incident.

According to the post, the script uses the top 500 most common passwords approved by Apple in order to try and gain access to user accounts. If successful, it would give the hacker full access to the iCloud account, and therefore photos.

Owen Williams from technology site The Next Web, who discovered the bug, said: “The Python script found on GitHub appears to have allowed a malicious user to repeatedly guess passwords on Apple’s ’Find my iPhone’ service without alerting the user or locking out the attacker.

“Given enough patience and the apparent hole being open long enough, the attacker could use password dictionaries to guess common passwords rapidly. Many users use simple passwords that are the same across services so it’s entirely possible to guess passwords using a tool like this.

“If the attacker was successful and gets a match by guessing passwords against Find my iPhone, they would be able to, in theory, use this to log into iCloud and sync the iCloud Photo Stream with another Mac or iPhone in a few minutes, again, without the attacked user’s knowledge. We can’t be sure that this is related to the leaked photos, but the timing suggests a possible correlation.”

Experts have pointed to the weakness of many internet users’ passwords, and basic security knowledge as being the cause for the widespread leak.

iCloud is Apple’s own cloud service, a wireless storage facility that can be used to access files remotely. Other notable services include Dropbox and Google Drive, which enable users to keep more of their files close to hand without taking up huge amounts of memory on their devices.

Rob Cotton, CEO at web security experts NCC Group said: “Cyber security is not just a technology problem, humans are very much key to its success. In our day-to-day work we see too many cases of employees divulging sensitive information without first verifying the legitimacy of the request.

“People often point the finger at technology when they’ve been the victim of a cyber attack, but poor password choices or naivety in the face of a seemingly innocent email is regularly to blame.”

Human error, in a variety of ways, said Mr Cotton, often played a part.

“Last year NCC Group successfully compromised the iCloud account of a journalist as part of an authorised demonstration using a mixture of social engineering techniques and subterfuge – and the amount of information we were able to access was shocking,” he said.

Separately, Wired reporter Mat Honan had his iCloud account breached and his devices wiped after hackers used a mixture of public information and social engineering when contacting Apple technical support, in order to gain access.

Stefano Ortolani, security researcher at online experts Kaspersky Lab said: “In order to make your private data more secure, you should cherry-pick the data you store in the cloud and know, and control when the data is set to automatically leave your device.

“For instance, in iCloud there is a feature called ”My Photo Stream“ which uploads new photos to the cloud as soon as the device is connected to Wi-Fi; this is to keep photos synchronised across all your devices. Disabling this option might be a good starting point to be a bit more in control.”

While the security of the cloud will now come under increased scrutiny, Mr Ortolani points out that some element of risk has always existed.

“The security of a cloud service depends on its provider,” he said. “However, it’s important to consider that as soon as you hand over any data including photos to a third-party service, you need to be aware that you automatically lose some control of it. This is also the case for when you upload something online.”

http://www.irishexaminer.com/breaki...-passwords-to-hack-celeb-accounts-640782.html


A 'secure' personal password would not be on a list of 5,000 common passwords, let alone 500.

 

[Echoes]

They should really know better than to have naked pics of themselves, especially with their face included. Even regular people know that if you're gonna take a nude, don't include the face.


You may not be able to keep everything sealed on your devices from a hackers point but you can at least make sure there are no compromising pictures. There are a lot of things in life that are out of your control but this isn't one of them. It's not gonna kill you or ruin your life to NOT take nudes.

Yes, but there's this HUGE ego issue involved with being a 'celebrity'.

 

[HauteMama]

While I agree that this is a crime, it is also a crime of opportunity. A city in my state last year put out a warning for people not to leave their cars unlocked and running and especially not to leave their personal belongings (purse, briefcase, etc.) inside because people were either stealing things out of the cars or stealing the cars themselves. Now, in a case like that, it is STILL a crime to steal a car or someone else's things, but the police weren't lambasted for telling people ways they can avoid being a victim. I equate it to leaving $100 bills littered across my front seat. Even if I lock the car, that is an attractive hazard. It doesn't mean I deserve to be a victim, but it does mean that I could have easily prevented it.

My kids are not yet old enough to engage in this sort of thing, but I have been telling them since the time they were little that NOTHING online is "safe", "private", or can ever be fully deleted. Once it is online, it is out there FOREVER. I tell them that unless they would be comfortable having whatever they write printed and distributed to everyone at school, they should not write it, either on their phones or in an email. My mum used to tell me the same thing about writing notes, and that once something was in writing, it was potentially dangerous and no longer a "he said-she said" sort of thing.

In a perfect world, anyone could write anything, anyone could store money and their bank records in the front seat of their unlocked cars, and anyone could walk anywhere at anytime and not have any fear. But the world isn't perfect. A person should not have to protect themselves from being a victim, but I'd much rather take measures to protect myself than lament that I was a victim later.

 

[Echoes]

As yet though, no one has been able to confirm how the images actually leaked, but some keen programmers think they may have spotted at least one (now fixed) route into accounts.

The potential exploit relates to a project on the code hosting site Github called, imaginatively, ibrute. Just a day before the images leaked, the developers of ibrute announced a bug in the Find My iPhone service means it doesn't employ bruteforce protection (i.e. an attack can continue using different passwords until the right one if found).

The good (and either timely, or coincidental) news is, that the same developers have confirmed this exploit has just been patched.

http://www.engadget.com/2014/09/01/find-my-iphone-exploit/?ncid=rss_truncated


That would be awfully low security for a company that big. Usually after a number of attempts (5 or 10, sometimes as low as 3), the account gets locked until it gets proper verification of ownership.

 

[smilerr]

I don't know why Victoria would say hers weren't real...I just saw them all over tumblr, they don't look the slightest be shopped.

It's sad things get leaked but with that being said I wouldn't so such things if I were famous.

 

[Sassys]

Celebs get hacked ALL the time, in fact if you're a big celeb, it's almost guaranteed that someone will hack you at one point. They should really know better than to have naked pics of themselves, especially with their face included. Even regular people know that if you're gonna take a nude, don't include the face. The hacker is obviously the one in the wrong but with everything else in life, you need to take precautions. It's not about "placing blame." There will always be bad, sick people out there waiting to pounce, you need to do your best to protect yourself and be smart about things, especially when you're in the public eye. You may not be able to keep everything sealed on your devices from a hackers point but you can at least make sure there are no compromising pictures. There are a lot of things in life that are out of your control but this isn't one of them. It's not gonna kill you or ruin your life to NOT take nudes.

This. How stupid can you be.

 

[labelwhore04]

While I agree that this is a crime, it is also a crime of opportunity. A city in my state last year put out a warning for people not to leave their cars unlocked and running and especially not to leave their personal belongings (purse, briefcase, etc.) inside because people were either stealing things out of the cars or stealing the cars themselves. Now, in a case like that, it is STILL a crime to steal a car or someone else's things, but the police weren't lambasted for telling people ways they can avoid being a victim. I equate it to leaving $100 bills littered across my front seat. Even if I lock the car, that is an attractive hazard. It doesn't mean I deserve to be a victim, but it does mean that I could have easily prevented it.

My kids are not yet old enough to engage in this sort of thing, but I have been telling them since the time they were little that NOTHING online is "safe", "private", or can ever be fully deleted. Once it is online, it is out there FOREVER. I tell them that unless they would be comfortable having whatever they write printed and distributed to everyone at school, they should not write it, either on their phones or in an email. My mum used to tell me the same thing about writing notes, and that once something was in writing, it was potentially dangerous and no longer a "he said-she said" sort of thing.

In a perfect world, anyone could write anything, anyone could store money and their bank records in the front seat of their unlocked cars, and anyone could walk anywhere at anytime and not have any fear. But the world isn't perfect. A person should not have to protect themselves from being a victim, but I'd much rather take measures to protect myself than lament that I was a victim later.

This! You said everything i wanted to say but worded it better. "Opportunity" and "easily preventable" are the key words here. It's the same thing as leaving your bike unlocked in the middle of a busy street. Can you really expect that it will still be there when you get back? You can't expect everyone to be good and honest. Many crimes occur because people aren't diligant, that's just the truth. It doesn't mean you're not a victim, just that there are things you could've done to prevent it.

 

[Echoes]

It's almost like the whole British phone hacking scandal never happened. People apparently learned nothing from it.

 

[jimmyshoogirl]

Have you not been paying attention over the last 10-15 years? Hackers will go after anything. Or nothing. They break into systems just to see if it can be done, even if they don't take anything. They'll go after a website like this just to put their name on the header page.



It may not be a legal defense, but it's simple basic common sense when it come to privacy and personal security. If you don't want it on the web, don't put it on the web.

Sure.

Please see my post above. You are doing exactly what I described and nothing YOU will say will change how I think.

We can end this convo right here. Thanks.