Hacker News Reader

According to my friend at Apple, sometimes fairly low level employees have access to the internal system which can be used to dissociate devices from AppleIDs. I wouldn't be surprised if some of them were compromised, as the pay is not great.

What's more surprising is if they have no audit logs that would let them discover the compromised employee in these cases.

View on HN

Or they do have such logs, but don’t feel like taking the reputation hit of telling you what happened.

I worked on these systems when I worked there. I can tell you they have audit logs, but they're restricted to certain groups within Apple to see them

That sounds credible. The Apple Support person I spoke with denied such audit logs even exist, probably in some officially-coached language that they can bluff as being truthful when pressed.

Yup. The argument for end-to-end.

Reply on news.ycombinator.com