Slashdot Mirror
Apple Support Allowed Hackers Access To User's iCloud Account
Robadob writes "Yesterday a hacker gained access to Mat Honan's (An editor at Gizmodo) Apple iCloud account allowing the attacker to reset his iPhone, iPad, and Macbook. The attacker was also able to gain access to Google and Twitter accounts by sending password recovery emails. At the time this was believed to be down to a brute-force attack, however today it has come out that the hacker used social engineering to convince Apple customer support to allow him to bypass the security questions on the account."
He was probably using his account wrong.
Seriously, it's too easy with most of these places. XBox live was getting hit by this a couple of years ago too. Even banks are using the "what was the name of your primary school" password recovery questions. Put 2 factor authentication in place at least.
Editor also added hyperlinks to the body of the submission to.