Hacker News Reader

> Borodin says Cupertino is transmitting its customers' Apple IDs and passwords in clear text, although he notes he can't see credit card information

It sounds like this means "If you point your iOS DNS servers to this guy's IP addresses, you will be sending him your Apple store password".

I think I'll probably not do this.

View on HN

Well yeah, that's exactly what's happening. It's scary but he's pulled off a massive man-in-the-middle attack.

Although isn't it pretty trivial to change your password? If I was an iOS user, I would have no problems changing my password to something stupid, using this hack to get all sort of free crap for a few minutes, and then changing my password back to what I normally have it. Wash, Rinse, Repeat.

Reply on news.ycombinator.com