How Apple and Amazon Security Flaws Led to My Epic Hacking (2012) | Hacker News Reader

How Apple and Amazon Security Flaws Led to My Epic Hacking (2012)

wired.com

75 pointsHydrus19 comments

From last time around:

https://news.ycombinator.com/item?id=4347985

OT: how do you resubmit stuff? I occasionally stumble upon stuff that had been submitted previously but for some reason failed to gain traction. If I try to submit it again the submission page only takes me to the previously submitted entry.

Usually there's a "timeout", which will let you resubmit if it has been a long time since the last submission.

But in this case, the URLs are actually different, though they redirect to the same canonical version.

In this case they're different URLs. But I believe generally the easiest way is to append some nonsense parameters to the url.

http://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/... http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-hona...

> the easiest way is to append some nonsense parameters to the url

I would advise against that...

https://i.imgur.com/XwzNt0Q.png

Your resubmission actually counts as a single upvote on the previous submission. I think this is in place to prevent too many duplicate stories.

(From 2012)

I was just about to comment on that.

Didn't you?

Then he/she did.

Cao I join the downvote train?

Enable 2FA everywhere is good advice.

The big issue for me though is Twitter. It does not support 2FA with FreeOTP (or the proprietary Google Authenticator). I don't want to install the Twitter App or hand over my phone number for privacy reasons.

Even with the Twitter app installed, I cannot enable 2FA.

I also do not get the option to enable 2FA with Apple when I log into the Apple ID site and go to the menu they instructed me to in the FAQ. The whole section they're talking about is just not there.

They're both failing if you ask me. And that also counts for the celebrity leaks; I blame the hacker first, and providers second. Especially with Apple, who push you to give them so much of your data, and then doesn't take the security of its customers seriously.

Heck, it doesn't matter that Google Authenticator is proprietary. The protocol it uses is open, and there are open-source apps implementing it. There really is no excuse.

"[...] And worst of all, my AppleID account was broken into, and my hackers used it to remotely erase all of the data on my iPhone, iPad, and MacBook. [...]"

Backup, backup and again back-up!

Yep, this is so old but enjoyed reading it considering the recent nude celebrity picture leaks.

A good reminder to go and tell your friends/family "Run, don't walk, to backup all of your important data right now." and hand them an external hard drive. 2FA + a password manager and whatnot would be a good idea, too :)

Timely refloat... I still remember this as if it was yesterday...

-Backs up all of his computer, changes all passwords and enables 2FA everywhere- It's in times like this I feel good I'm a nobody in the internet.

Makes me laugh every time

Reply on news.ycombinator.com