The outage began last Thursday and has remained ever since, while Apple has worked "around the clock" in an effort to patch the apparent security issues.īalic's public comments are apparently in an effort to clear his name, as he said he's "not feeling very happy" about how the situation has been portrayed. He claims to have taken 73 user details all of whom are Apple employees and given them to the company as an example.īut 4 hours after he gave that user data to Apple, the company shut down its Dev Center website. But Balic suggested he has been able to obtain some user details as evidence to Apple of an apparent security flaw.īalic said he found a total of 13 bugs on Apple's site, one of which provided him with access to user information. Sensitive personal information included on the registered developers website was encrypted, and Apple does not believe the information can be accessed. His comments came in response to an admission by Apple on Sunday that its developer website was hacked. In a comment made on TechCrunch, Ibrahim Balic identified himself as a "security researcher" who attempted to point out serious issues to Apple about its Dev Center website. If you have any other concerns about your account, please contact us. If your program membership was set to expire during this period, it has been extended and your app will remain on the App Store. We apologize for the significant inconvenience that our downtime has caused you and we expect to have the developer website up again soon. In order to prevent a security threat like this from happening again, were completely overhauling our developer systems, updating our server software, and rebuilding our entire database. We took the site down immediately on Thursday and have been working around the clock since then. In the spirit of transparency, we want to inform you of the issue. Sensitive personal information was encrypted and cannot be accessed, however, we have not been able to rule out the possibility that some developers names, mailing addresses, and/or email addresses may have been accessed. Last Thursday, an intruder attempted to secure personal information of our registered developers from our developer website.
0 kommentar(er)
