Tuesday, August 7, 2012

Cloud Security Fail

Mat Honan was hacked recently, and notes a huge problem in some of the cloud based security systems: the systems offered by separate vendors don't always work nicely together:
What happened to me exposes vital security flaws in several customer service systems, most notably Apple’s and Amazon’s. Apple tech support gave the hackers access to my iCloud account. Amazon tech support gave them the ability to see a piece of information — a partial credit card number — that Apple used to release information. In short, the very four digits that Amazon considers unimportant enough to display in the clear on the web are precisely the same ones that Apple considers secure enough to perform identity verification.
Scary stuff. h/t Boing Boing.

No comments: