Hacker News Reader

Counterpoint: a bunch of bored teenagers hacked every single iPhone in Hollywood just to get some celebrity nudes.

I don't believe in "hardened Android" either, unless it's developed and maintained by nsa or gchq.

That was password stuffing against iCloud. Only mandatory 2FA would’ve prevented it - which Apple did with the next release of iOS.

The hackers could bypass 2FA, see my other comment.

It was silently fixed by apple once the story hit the mainstream news.

That was iCloud.

Does it matter? The data is out, and while the attack surface was not the iphone itself it was a service closely connected to it.

Right, but the exact same thing could have happened with Google Photos or whatever it's called these days if you don't have 2fa enabled.

Not really. Google has invested heavily in making its login process as secure as possible. Unless you had a very easily guessed password and were unlucky enough to live in the same region as your attacker, it'd be very unlikely for this to happen to a Google Photos user.

That said, nudes don't belong in any cloud.

The vulnerabilities that opened iCloud to these attacks were due to its iPhone integration (restoring device from backup to be more specific). It also allowed the attacker to bypass 2FA (probably in the name of user experience).

Reply on news.ycombinator.com