

Two-step verificationĪpple’s response, as we reported at the time, was to urge iCloud users to turn on its two-factor authentication system, known as two-step verification (2SV).ĢSV augments your password with a one-time login code sent via SMS:Įven a crook who knew your Apple ID password wouldn’t have enough to get into your account and restore your iCloud data onto his computer.Īlso, if you were to see SMS verification codes popping up when you didn’t expect them, you’d have an early warning that someone was trying (and failing!) to breach your account So phishing your Gmail password would get them into iCloud, or vice versa. → Remember, re-used passwords make the problem worse: if you have one password for all your accounts, the crooks can breach any one of them and that’s that. So stolen, phished, keylogged and otherwise illegally acquired Apple ID passwords are a better explanation for the iCloud-related celebrity selfie breaches than a problem in iCloud itself. He seems to have accumulated them in a series of underground trades and purchases. The photos were apparently stolen from multiple sources in various ways, but released as a job lot by a collector. We’re delighted to hear it! Bogus blame of iCloud in nude photo scandalĪt the start of September 2014, a scandal broke when illegally-collected nude photos of 100 celebrities were published online.Įarly rumours suggested that this might be down to some sort of iCloud “hack,” because at least some of the photos had been stolen from iCloud accounts, and because the photos all appeared at once, as though they had been grabbed as a job lot. The company backed down over the “foistware” U2 album that you recently received via iTunes, like it or not.Īnd later the same day, it announced that its two-step verification system would be applied to iCloud, effective immediately. Apple really is listening, and doubly so!
