Sensible Erection | Hackers Release 1 Million Apple Device IDs Stolen From FBI Laptop

Tuesday, 4 September 2012

Hackers Release 1 Million Apple Device IDs Stolen From FBI Laptop

quote [ AntiSec has released 1 million Apple device IDs that they say they obtained from an FBI computer. AntiSec says they actually stole 12 million IDs, including personal information, but released only 1 million in an encrypted file published on torrent sites. The file contained a list of more than 12 million Apple iOS devices, including UDID, user names, names of devices, types of devices, Apple Push Notification Service tokens, ZIP codes, cellphone numbers, and addresses ]

This is bad news; if true.

The OP:
http://pastebin.com/nfVT7b0Z

Another source, and they are Legion, same detail.
http://www.theverge.com/2012/9/4/3290789/antisec-fbi-udid-breach-iphone-ipad-apple

[by RedRiverRat@8:46pmGMT] [+10]

Comments

user420 said @ 9:26pm GMT on 4th Sep [Score:-2]
Is it bad that the first thing that I thought when reading this is 'HA! Fucking applefags deserve it'?

arrowhen said @ 9:31pm GMT on 4th Sep [Score:1 Insightful]
Yes, but only because of the word "Applefags".

ahPook said @ 9:32pm GMT on 4th Sep [Score:1 Underrated]
Dunno about bad but certainly it's douchebaggery. Also the stolen UDIDs are from iOS. Most likely the 'applefags' that you refer to are MacOS users. So not only are you are a douchebag revelling in the misfortune of others, you are also incorrect.

user420 said @ 10:07pm GMT on 4th Sep
So macOS isn't an apple product?

ahPook said @ 10:36pm GMT on 4th Sep
Both MacOS and iOS are Apple products. iOS is used on iPhones and iPads. iPhones outnumber iPads almost 10 to 1. So you are calling iPhone users, about 30% of the smartphone users worldwide, 'applefags'. Is that your intention? Or are you failing at an attempt to perpetuate the ancient and dreadfully dull Apple v Windows feces-throwing contest, and therefore incorrectly talking about computer users? My guess is the latter. Douchebag.

user420 said @ 10:55pm GMT on 4th Sep
Well no, it was more the former.

ahPook said @ 11:07pm GMT on 4th Sep
Ok. Still douchbagesque, also pathetic because you're talking about cellphones.

RedRiverRat said @ 12:08am GMT on 5th Sep
Pook, you calling me douchebag for reporting? I dont make the news, friend, I just point at stuff and let you decide.

spazm said @ 12:31am GMT on 5th Sep
He was replying to user420, not you.

Naruki said @ 1:11am GMT on 5th Sep
In RedRiverRat's defense, he doesn't have my extension, so it's not as easy for him to see who he is replying to. The douchebag.

RedRiverRat said @ 1:16am GMT on 5th Sep
hey...

ahPook said @ 1:52am GMT on 5th Sep
Not you RRR, but also you've alerted me that I didn't upmod this post; corrected.

puravida said @ 9:45pm GMT on 4th Sep [Score:2 Insightful]
No, I admit the same feeling came across me too.

Tribalist feelings are just as much of a part of being human as having an opposable thumb, having two lungs and a heart.

As long as you don't act on those feelings, I suppose it's ok =)

Viva la Android!

spite48 said @ 9:50pm GMT on 4th Sep [Score:5 Funny]
Every night I like to leave my Android phone on top of my wife's iphone in a sexually suggestive pose. Sometimes I use the kid's modeling clay to add appendages.

ComposerNate said @ 6:49am GMT on 5th Sep [Score:1 Underrated]
Meanwhile, my 2002 Nokia holds up the bed.

ahPook said @ 10:41pm GMT on 4th Sep [Score:2 Good]
Personally I am unable to find a capacity of feeling anything whatsoever by identifying myself by the brand of mobile phone I have. But that's just me.

foobar said @ 11:29pm GMT on 4th Sep [Score:2 Insightful]
Most tribal definitions and insignia are pretty trivial.

Khafra said @ 1:59am GMT on 5th Sep [Score:1 Insightful]
Don't worry; if you're an actual human, you have some trivial belief which gives you a tribal identity. If you didn't have the urge to identify with a tribe, you wouldn't be human; and you can't pick a nontrivial belief, because then everyone would share it.

derf said @ 9:52pm GMT on 4th Sep
>>>/g/

spazm said @ 10:01pm GMT on 4th Sep
Because everyone who uses something from Apple is automatically a fanboy?

Meh

user420 said @ 11:06pm GMT on 4th Sep
That's the "I have an iphone and I feel ashamed of it" response. It's OK though, it's an important first step.

spazm said @ 11:16pm GMT on 4th Sep
You have no idea what sort of phone I use, nor does it matter. But since you fail to even have the slightest clue about the true meaning of this situation I'll just assume it won't get any better than that level of stupidity.

dreamingzephyr said @ 1:43am GMT on 5th Sep [Score:3 Insightful]
His name is "user420" for crying out loud.

I consider myself a cannabis enthusiast, but I recognize the idiocy that's spewed from every "______420" I've ever encountered.

user420 said @ 2:47am GMT on 5th Sep
What won't get any better? Your comments, Or your sense of humor?

Cause it was a joke son.

-_- said @ 4:32am GMT on 5th Sep
Lemme help honey..

reading over things it appears that talking about cell phones is "pathetic" {insert demotivational jpeg here} and that "you" don't know what kind of cell phone a mutherfucker be using .. or words to that effect.

Setting aside my deep and abiding love for you (as well as my "unhealthy" lust) it seems you may have run afoul of someone who does not share your "opinion".
A joke that has to travel uphill often stumbles en-route.

Please come back again to contribute your unique "voice" to these discussions, some of us enjoy the threads more than the links ;D

user420 said @ 10:29am GMT on 5th Sep
ಠ_ಠ

solitude said @ 11:36pm GMT on 5th Sep
No no no... let me "help"!

lilmookieesquire said @ 10:35pm GMT on 4th Sep [Score:1 Insightful]
No. But I imagine this is far more widespread than just apple.

RedRiverRat said @ 12:19am GMT on 5th Sep [Score:1 Insightful]
YES, for fucks sake. That is the wrong response.

spite48 said @ 9:48pm GMT on 4th Sep
Does the FBI have any legitimate legal justification to be in possession of this personal information?

I wonder what else they found on the laptop. Besides porn in a folder labelled "Boring work data, not pornography"

structured_spirits said @ 10:08pm GMT on 4th Sep [Score:1 Insightful]
I'm sure that it's legal for the FBI to have it. But if you're asking if the FBI is justified in having 12million user profiles just sitting around, the answer is a huge No. Clearly the government is literally spying on all it's citizens, at least those who have nay kind of personal data on the internets, probably citizen's of foreign countries too. I'm sure it's for our "safety."

smoug said @ 10:21pm GMT on 4th Sep
Either that or they firmly believe the best porn is the kind other people download.

spazm said @ 10:45pm GMT on 4th Sep
That I'm curious of: are these user profiles American or also foreign? I can't find anything on it unfortunately, and haven't succeeded trying to unlock the file (I can crack open walnuts, but that's where my skills end apparently).

eIfish said @ 2:11am GMT on 5th Sep
No idea. I don't think that's determinable from the file, unless you happen to be "foreign" and own a device on the list.

It's a CSV, and the fields are simply "UDID", "APNS device token", "Name of device (as it appears in iTunes*".

* 249 of them are called "iPhone 4s", and 72291 "iPhone something"

eIfish said @ 3:32am GMT on 5th Sep

RedRiverRat said @ 5:45am GMT on 5th Sep
Agreed.

eIfish said @ 7:08pm GMT on 5th Sep
FWIW, there was a </a> in there to fix the dangling hyperlink.

eIfish said @ 2:28am GMT on 5th Sep
This is hardly watertight, non-circumstantial evidence, but some of the more uniquely-named devices have the same names as people who don't live in the USA ("Nicholas Grace-Wenzel", "Dave and Priscilla Blackbourn"). The vast majority of the couples I tried lived in the USA.

bruceski said @ 11:46pm GMT on 4th Sep [Score:1 Informative]
I'm an adult now. My porn is in a folder labelled "porn".

lilmookieesquire said @ 12:14am GMT on 5th Sep
What's that like? I hear that sucks.

zarathustra said @ 1:11am GMT on 5th Sep [Score:5 Funny]
I'm old. Mine is called "don't look, Ethel"

RedRiverRat said @ 3:21am GMT on 5th Sep
currently filed under windows/system/drivers/backups

backSLIDER said @ 8:17pm GMT on 5th Sep
Ihaven't used windows in a while, does this make windows back up your porn or is it just a hind away?

RedRiverRat said @ 9:00pm GMT on 5th Sep
it's a hide.

Mr. Langosta said @ 10:41pm GMT on 4th Sep
snapped @ my local

schatten00777 said @ 10:46pm GMT on 4th Sep [Score:1 Funny]
So Heisenburg is driving down the highway, when he sees cop lights flashing in his rear view mirror. Heisenburg sighs, then dutifully pulls over to the shoulder. He rolls down the window as the policeman approaches and says, "Sir, do you know how fast you were going?" Heisenburg smiles. "No, but I know exactly where I am!"

torinaga said @ 3:02am GMT on 5th Sep
We have this place.

Friesenburgers

damnit said @ 10:53pm GMT on 4th Sep

gunthar said @ 11:49pm GMT on 4th Sep [Score:1 Hot Pr0n]
On a completely unrelated topic, I look forward to seeing webbery's Burning Man 2012 pictures this year because I get to see friends and acquaintances naked on my fav porn/news community

RedRiverRat said @ 12:14am GMT on 5th Sep [Score:5 Insightful]
Amazing to me is where the bones of the post are FBI keeping tabs on millions of innocent people it so quickly devolves into a fanboy product war.

I give 0 fucks what you like. The disturbing thing is that the FBI is using 'whatever' tech to keep tabs on people.

spazm said @ 12:23am GMT on 5th Sep
Not exactly. One person tries to start off a fanboy war. Talk to him, not to the rest, who are in fact trying to keep the discussion about what it is.

For all we know it could be Android and Windows phones users as well, but that might just not have come out of the bag yet. And, if we really need to involve brands in this discussion, it would be to know if Apple gave access to the FBI or not. I for one would like to know.

RedRiverRat said @ 12:31am GMT on 5th Sep
No worries Spaz,

I just hate it when people start measuring dicks via electronic devices.

That was and is not the point. So I dont care if you are packing Apples or Androids, you are all fucked if you RTFO.

theRed said @ 4:51am GMT on 5th Sep
Really?!
I feel confident that you would in fact love my new app, CockComparer. Or if you want to give it a free try CockComparer Lite!

(Available for all your favourite smart phones!!!)

spite48 said @ 6:03am GMT on 5th Sep
The lite version is a rip off. It accurately describes the size of your penis.

backSLIDER said @ 8:14pm GMT on 5th Sep
I just hate that the ads give in the way of using my cock how I want.

Chop-Logik said @ 12:17am GMT on 5th Sep [Score:5 Interesting]
Your cellphone is a tracking device that lets you make calls

azazel said @ 4:42am GMT on 6th Sep
I don't have a cellphone. My old iPhone died, and I've yet to replace it. It's pretty liberating, actually. I know that at some point in the near future I will need to get some form of mobile phone again, because with kids and work I kindasorta need to be reached at times, but right now I don't want one.

Barnabas_Truman said @ 8:52am GMT on 6th Sep
I've never had a cell phone of any kind. Once every month or two I feel a need for one and end up having to borrow one or find another means of communication, but most of the time my reaction is not "I wish I had a cell phone!" but instead "I wish the phone companies hadn't deactivated all the pay phones after everyone else got cell phones!"

I should probably get one eventually. I'd really like one that makes and receives calls and does nothing else, but it's looking like that isn't really an option anymore.

eIfish said @ 12:36am GMT on 5th Sep [Score:1 Underrated]
FBI denies accusations...

spazm said @ 12:49am GMT on 5th Sep
If they say so then it must be true!

RedRiverRat said @ 1:17am GMT on 5th Sep [Score:1 Funny]
Don't taze me Bro!

sherlock said @ 5:38am GMT on 5th Sep
In this case I believe the FBI over a bunch of hackers with an ass-retarded manifesto. When I was an iOS developer I amassed a database of hundreds of thousands of UDIDs, and that was peanuts, I wasn't even a minor player in that scene. There was nothing in the database that thousands of iOS developers didn't collect. I'm inclined to believe the database never belonged to the FBI.

Fenny said @ 6:54am GMT on 5th Sep
Indubitably.

eIfish said @ 11:01pm GMT on 10th Sep [Score:1 Underrated]
Shocking development: FBI not lying.

sherlock said @ 5:04pm GMT on 11th Sep
This deserves its own post.

kichijoii said @ 1:13am GMT on 5th Sep
Oh well. Its not going to be much longer before electronic privacy goes completely out the window, anyway. As they say, once the tech is in place, there's no turning back.

the circus said @ 7:59pm GMT on 5th Sep
Man the no-ships!

torinaga said @ 2:59am GMT on 5th Sep
If you were of the opinion that this could or would not ever happen in America, please let me be the first to try to sell you something.

You should have no expectation of privacy in a public place. You should have no expectation of privacy on public networks. If you are using ANY service on the internet you should EXPECT that you are being tracked in some way.

Even without the help of companies that will gladly sell you out to make their own lives easier with certain regulators, it is just not that difficult to figure out who you are based on that clear text data that is sent back and forth from all of your devices each and every day.

In this world, if you are paranoid then you can't be paranoid enough and still live a normal lifestyle. You have to accept this or get off the grid.

eIfish said @ 3:54am GMT on 5th Sep [Score:1 Underrated]
This dump, however, appears to contain data that should only be available to something running on the target device. The push-token, used to route push-notifications to the correct iPhone/user combination, is never transmitted in the clear, and should be retrievable only by an active attack.

That said, the list as published could be generated by any app in the app store; nothing they've published (the UDID, the push token, and the device name) is considered sensitive or personal by the OS, and is accessible to any app-store app. Said attack need be no more sophisticated than releasing an app in the app store, and asking the user if it can please receive push notifications.

If I wanted to make it look like I'd pulled off a big raid on Apple or the FBI, this might be one way I'd do it: publish a dumb, free, do-nothing app (emoji text keyboard plus <3), then once I had a bunch of data* to publish, claim to have ten times more than I did, and imply that I had a bunch of personal information that I wasn't publishing 'to protect the named individuals'.

* (which is ordinarily collected by any app the user authorises to process push notifications and must be collected in order to send them)

cyrano said @ 5:13am GMT on 5th Sep [Score:2]
Looked into this today. There is no data in the dump that can't be obtained by any application vendor in the Apple store. There's any number of reasons, some of them legitimate, that an FBI agent has this data. Our working theory is there's an on-going investigation into an Apple Store breach. These things happen.

The idea that this is somehow an insight into some l33t government conspiracy is fallacious douchebaggery.

The idea that this is somehow proof of Apple collaboration with The Man is is fallacious douchebaggery.

The idea that Android (or anything else) is immune/better/stronger the iPhone is fallacious douchebaggery.

If your rationalization isn't more than derp-derp fainboi ewe sux, please do the adults in the room a favor and shut the fuck up. We're way to busy trying to figure if this is really something we need to be concerned about.