23 July, 2013

Tech Info: Apple Developer Site Compromised !!!!!

!!! Apple Dev. Center Hacked !!! And down since last 4 days !!!

 

Current Text of Apple Dev. Center’s Portal          :           http://devimages.apple.com/maintenance/

We’ll be back soon.

Last Thursday, an intruder attempted to secure personal information of our registered developers from our developer website. Sensitive personal information was encrypted and cannot be accessed, however, we have not been able to rule out the possibility that some developers’ names, mailing addresses, and/or email addresses may have been accessed. In the spirit of transparency, we want to inform you of the issue. We took the site down immediately on Thursday and have been working around the clock since then.

In order to prevent a security threat like this from happening again, we’re completely overhauling our developer systems, updating our server software, and rebuilding our entire database. We apologize for the significant inconvenience that our downtime has caused you and we expect to have the developer website up again soon.

If your program membership was set to expire during this period, it has been extended and your app will remain on the App Store. If you have any other concerns about your account, please contact us.

Thank you for your patience.

Copyright © 2013 Apple Inc. All rights reserved.

http://www.iphonehacks.com/2013/07/apple-dev-center-down-for-more-than-2-days.html

 

http://www.iphonehacks.com/2013/07/security-researcher-claims-responsibility-for-apple-dev-center-security-breach.html

 

http://www.wired.com/gadgetlab/2013/07/apple-dev-center-breach-faq/

 

http://inagist.com/all/359308457905623040/

 

http://nakedsecurity.sophos.com/2013/07/22/apple-takes-dev-center-down-for-days-finally-admits-we-got-owned/

 

Welcome > Blog Home>Apple > Apple Developer Site Compromised

 

 

Apple Developer Site Compromised

by Dennis Fisher    July 22, 2013 , 7:46 am

Several days after taking its developer Web site down without a mention of the reason, Apple has revealed that attackers had breached the site. The company said that while it can’t rule out the theft of developers’ data, all of the sensitive personal information was encrypted.

Apple posted a notice on its developer Web site and also sent an email to developers who have accounts with the company, saying that as a result of the breach Apple is making some changes on its back end infrastructure and also is rebuilding the developer database.

Related Posts

Ubuntu Forums Remain Down After Password Breach

July 22, 2013 , 11:07 am

Brute-Force Attack Leaks Data on 35,000 Konami Gamers

July 12, 2013 , 3:55 pm

IRS Exposes SSNs in Database of Public Tax Filings

July 11, 2013 , 12:01 pm

“Last Thursday, an intruder attempted to secure personal information of our registered developers from our developer website. Sensitive personal information was encrypted and cannot be accessed, however, we have not been able to rule out the possibility that some developers’ names, mailing addresses, and/or email addresses may have been accessed. In the spirit of transparency, we want to inform you of the issue. We took the site down immediately on Thursday and have been working around the clock since then,” the notice says.

“In order to prevent a security threat like this from happening again, we’re completely overhauling our developer systems, updating our server software, and rebuilding our entire database. We apologize for the significant inconvenience that our downtime has caused you and we expect to have the developer website up again soon.”

Apple’s developer site serves as a resource for people who write apps for the company’s various platforms, including OS X and iOS. The site, as the company said, has been down since July 18, but it wasn’t until Sunday that the company provided any information about the incident or why the site had been taken offline. Apple is a frequent target for attackers of all stripes, as are its users and developers. The company itself admitted earlier this year that it was hit by an intrusion from a group of attackers who used a Java zero day vulnerability. The same group had breached Facebook, as well.

Apple’s iTunes store has been hit by various attacks in recent years, as well.

Be Careful & Stay Secure …

 

Chirag Gandhi

"To create more positive results in your life, replace "if only" with "next time"."

~~~Author Unknown

 

No comments: