Anonymous Leaks 1M Apple Device UDIDs
Orome1 writes "A file containing a million and one record sets containing Apple Unique Device Identifiers (UDIDs) and some other general information about the devices has been made available online by Anonymous hackers following an alleged breach of an FBI computer. 'During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the AtomicReferenceArray vulnerability on Java,' the hackers claim."
Update: 09/04 13:44 GMT by T : A piece at SlashCloud points out that if the leak is genuine, this raises some sticky questions about privacy and security; in particular: "[H]ow did the agency obtain said information, and to what purpose? Why did all that personal data reside on the laptop of one special agent?"
Going to explain why they gave all the UID of their devices to the FBI?
UDID's aren't allowed to be used by apple anymore. Well maybe not disallowed but strongly discouraged, & depreciated in ios5, as far as I can tell.
geeks? I see no geeks there, why would geeks using fashion accessories instead of smartphones or using devices made by a company who likes to install rootkits on their users machines?
> Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team
This guy must have business cards 2 feet wide.
A lot of apps use it, and with one, you could spoof requests using a simulator. It isn't a secure form of identity, but at least a good way to troll.
while(1) attack(People.Sandy);
disappointing, i expected the page to reply "it's compromised now"
kind of like those password security checkers "not secure: reason: you typed it into a random site on the internet"
Snowden and Manning are heroes.
Eh, if the FBI wants to know where I am at all times, they can follow me on Foursquare like everyone else.
So what can you do with an Apple UDID?
Yeah that's a good question. As to what a UDID is:
http://theiphonewiki.com/wiki/index.php?title=UDID
UDID = SHA1(serial + IMEI + wifiMac + bluetoothMac)
So its not much more than a checksum of the serial num and the various RF ids. So given 5 pieces of information, the UDID is what amounts to a checksum of the other 4 parts proving that row of the database has no errors.
What it is, does not superficially seem to help much with what they do with it, but maybe it helps a little in isolating what it isn't (it isn't, for example, the itunes CC number for the account, or the owners SS number, so there's no point discussing those type of issues)
"Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
Linus Torvalds used a macbook pro with linux last I checked. Is he not a geek?
Seriously, does anyone really think this is not commonplace? If the government is doing this behind the scenes just imagine what Facebook does with the data you willingly sign over to it. This is just the tip of the iceberg. Sure it's not suppose to happen, sure it's wrong, sure no one agreed to it and it needs to be corrected...but if something can be abused, it will be.
A 'singular oddity' is an event that cannot be explained and only happens when you are alone.
Was the leak only for USA ID numbers, or are we talking major criminal action in foreign countries here?
It's always tempting to think the USA is the world police, but Apple do not have immunity from foreign courts if they've been handing over data like that.
Ok, yes yes, the crazy mugger (cracker) was clearly in the wrong. That does leave the question of why an unconnected, shady character (the FBI) was walking around with everyone's paychecks (Apple info for which the FBI has no clearly demonstrated need).
Nobody is declaring Anonymous innocent, but why the HELL does the FBI need a list of UDIDs? Are they tracking TERRISTS via their iPhones now, or is it more likely that the FBI just likes reading your mail, watching you in the shower, and knowing all your passwords?
The preceding comment is my own, and in no way construes an opinon of the Emperor of Mankind.
It sounds like this is a dump of data from an application vendor to the FBI: Apps have (in the past) used UUID for identification, and the push-notification tokens also suggest application, not apple, as the source.
So which application is responsible?
Test your net with Netalyzr
And you're a nice example.
It's because the average IQ is about 100.
It's not "about" 100. It is 100, because that's how they are designed.
When modern IQ tests are devised, the mean (average) score within an age group is set to 100
Dilbert RSS feed
Review the permissions of the app. It can read and write contact information and it can take pictures and video, access phone state and identity, determine your location and record audio. At any time. Anybody actually read 1984? But at least Android tells you about it.
"Why did all that personal data reside on the laptop of one special agent?"
Probably it didn't and doesn't.
Reside on the laptop of *just one* special agent, that is.
Whenever one of these special agents gets something particular from the boss, all the others want that, too.
So - why does a cop car need a million bucks worth of Heroin in their boot ?
One option is - they nabbed a criminal.
EMail: 0110001101100010010000000110001101110010 0110000101111010011011100110000101110010 0010111001100011011011110110
There are 1 million terrorist or criminal iPhone users?
Does that not seem high?
Install CM or an app that lets you block permissions you do not like. You will need to root of course.
I suppose that anonymous getting access to FBI computers (and making it public) answers the old question of who watches the watchers.
The single greatest threat to privacy worldwide is users who don't read the stuff above "I agree" or "Authorize App".
Please consider this account deleted, I just can't be bothered with the spam anymore.
"A piece at SlashCloud points out...."
Jeez. You mean "Us, standing over there." Why pretend it's an unrelated entity?
Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
That's okay, we already know you are 1153867, we don't need computer serials to identify you.
Change is certain; progress is not obligatory.
When the IQ tests were created, they did not evaluate every single individual, just a small sample. So it is fair to say that the average IQ of the population is near 100, but not exactly 100.
MOD THE CHILD UP!
Any evidence should have gone to the lab, not onto a laptop.
So no, you're not in the clear with any confidence, though you are more likely than not.
[FUCK BETA]