Hacker News Reader

What were the security implications for an entity that has applications there?

Anything we should check or change as soon as iTunes Connect is back up?

It sounds like the only issue would be that you could potentially see unreleased apps. You couldn't access financial/payment records and couldn't access app details. You could just see the app dashboard. This is all according to reports I've read in the last hour or so.

You definitely could access app details. Not sure if you could change them - I didn't try - but here's the evidence: https://www.dropbox.com/s/qd0clsmx10h4tpd/Screenshot%202015-...

egads!

Shit, even if not possible to edit that's worse as it includes an address and phone number for the business and the technical contact.

Somebody mentioned that trying to perform actions on the apps would error out, so it seems more like an information leakage issue.

That being said, when it come back online I'm definitely going to go through all my apps.

Check your users as well. Someone could have created an account.

The thought of someone creating a new user on your account like that is disturbing.

Yeah, I wonder how many paid apps are now free.

Reply on news.ycombinator.com