Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
TRENDING TODAY
Home > News > Apple > Apple & Mac Blog

October 14th, 2012, 07:44 GMT · By Bogdan Popa

BLOG

Mac OS X Hackers Can Steal Apple IDs in Just 10 Seconds

SHARE:

Adjust text size:


Apple has already been informed of the flaw Enlarge picture - Apple has already been informed of the flaw
Apple is yet to confirm this, but it appears that a Mac OS X vulnerability could allow hackers to access someone else’s Apple ID in just 10 seconds.

The guys over at shootitlive came across what seems to be a major security flaw that could be exploited by a hacker connected to the same Wi-Fi network as the victim.

The method is called “Session Fixation Attack” and basically comes down to using a previous browser session to extract private data and get access to an Apple ID.

This means that iTunes and App Store accounts can be compromised, as the hacker can change both the password and the email address.

Shooitlive says it has already informed Apple about the security flaw, but the Cupertino-based company has only replied with an automatic response.

TELL US WHAT YOU THINK:

4,504 hits · 1 comment · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


Firefox 16 Final Is the Last to Support Mac OS X 10.5 Leopard

Apple Prepping iPhone 6 NFC with Microlatch Acquisition

Big Developers Praise Mountain Lion’s Gatekeeper, But Hobbyists Don’t

VirusBarrier iOS Removes Subscription, Improves Experience

iPhone Factory Goes Back Online Following Brawl

READER COMMENTS:


Comment #1 by: ScienceOrNot on 15 Oct 2012, 00:23 UTC reply to this comment

It would be nice if Apple corp. let us know they have addressed this issue. I got an email with an .AU address that came through my Apple .me account asking for passwords info - I got in touch with Apple and they said it was fraud - Thanks and they were looking into it.

It DOES happen!

Copyright © 2001-2013 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM