Slashdot Mirror

← Back to Stories (view on slashdot.org)

Linux Users Are Unable To Manage Their Apple ID on Applecom (9to5mac.com)

Posted by msmash on from the stranger-things dept.

For some reason, Apple's website where you can manage your Apple ID (appleid.apple.com) is blocking users of Linux browsers from accessing it. From a report: Having access to the website is important to manage things such as payment information, two-factor authentication, and other account details. Even though the number of Linux users accessing the website must be relatively small compared to other operating systems, some iPhone users who use Linux on the desktop noticed the issue. This behavior was first explained by user Alexander Martin on Mastodon. He discovered that when the browser reports itself as being a Linux browser, Apple's website will block the access by throwing a "Bad Gateway" error.

101 comments

  1. But not Android by Anonymous Coward · · Score: 3, Informative

    If the user-agent contains both Linux and Android, it's allowed.

    Sounds more like some intern fucked up.

    1. Re:But not Android by Anonymous Coward · · Score: 0

      Yeah, a "bad gateway" error does not sound like an intentional blocking. It sounds like someone managed to misconfigure some load balancing something such that it triggers off the User-agent for whatever reason (possibly to split mobile/desktop access?) and for whatever reason, there's a rule that matches Linux that points to servers that don't exist.

      On the other hand, this is Apple, so the only way to get them to fix it is to assume maliciousness and report it wide and far. Much like how they ignored both "root with no password" and FacePalm until people started spreading them on Twitter.

    2. Re:But not Android by Cito · · Score: 1

      I was gonna ask or suggest trying the user-agent switcher plugin for Firefox and if it'd work.

      I know I use that plugin for Firefox on my android tablet set for Linux desktop to avoid mobile themed redirected sites since they don't look good on a large tablet screen.

      But last and only apple device I ever owned was an iPod touch 3rd generation.

    3. Re:But not Android by jythie · · Score: 3, Insightful

      Yeah.. I suspect some horrible mess of nested if-then-else clauses with some fall throughs or cases with errors in them.

    4. Re:But not Android by BringsApples · · Score: 0

      In the end, this will probably affect 25 people. Making sure things work with Linux is probably a job given to interns.

      --
      Politics; n. : A religion whereby man is god.
    5. Re:But not Android by Anonymous Coward · · Score: 5, Informative

      In the end, this will probably affect 25 people. Making sure things work with Linux is probably a job given to interns.

      This statement demonstrates the kind of utter ignorance that is the source of such problems.

      Nothing is needed for any web site to "work with Linux" -- the problem is that such sites arbitrarily reject web browsers with user agent data that claims the OS is Linux. If you run Linux and change your web browser's user agent info to spoof OSX, then the site suddenly works on that browser.

      I would bet that this affects a lot more than 25 people, as not only are there plenty of Linux users with Iphones, but there also must be one or two savvy Windows and OSX users who employ user agent obfuscating plug-ins on their web browsers.

    6. Re:But not Android by Albanach · · Score: 4, Interesting

      Fortune.com reported over 700 million iPhones in use in 2017 with an expected billion within a few years.

      If only a tenth of one percent of those iPhones were owned by someone who uses Linux on their desktop. you have a million folk impacted.

      Sure, Linux is a niche, but when you're the size of Apple, even small percentages quickly become big numbers. Let's be conservative ans say just 20% of Linux users buy their iPhone new - that still points to 140 million in revenue, not including any app store sales.

    7. Re:But not Android by Anonymous Coward · · Score: 0

      5% of desktop users use Linux.

      The smart ones.

      That's a lot more than 25 people.

      Unless you meant 25 millions.

    8. Re:But not Android by BringsApples · · Score: 0

      I run only Linux at home. I have an iPhone. I don't go to appleid.apple.com. I manage my apple ID on my phone. I think a lot of folks do this. I said 25 users will be affected, but maybe it's actually less.

      --
      Politics; n. : A religion whereby man is god.
    9. Re: But not Android by Anonymous Coward · · Score: 0

      Linux users that use iPhones are traitors

      Serves Them right that they can not access their precious Apple online Temple

      - Dax

    10. Re:But not Android by Anonymous Coward · · Score: 0

      You do realize that the typical iPhone user has eight of them as they understand the need to comply with the command to upgrade every year.

      And to the best of my knowledge, neither Jobs, the ghost of Jobs, nor Cook have ever instructed iPhone users to use a Linux based desktop OS.

      Sorry dude, but there are no Linux users inside the walled garden.

    11. Re:But not Android by MessageDrivenBean · · Score: 1

      One here. Let's start counting by replying to your post.

      --
      Quisque verborum suorum optimus interpres...
    12. Re:But not Android by Anonymous Coward · · Score: 0

      > This statement demonstrates the kind of utter ignorance that is the source of such problems.

      Your statement demonstrates ignorance to the concept of a 'joke' or 'humor'. Start by looking up 'fun' in the dictionary.

    13. Re:But not Android by Chris+Hodges · · Score: 1
      It cost me several hours last time I worked from home. Have you had >25 replies from people affected yet?

      I tried things like brand new FF profiles but couldn't work out why a server-side error would be caused by my browser. In desperation fired up my chromebook. Tweaking a mac-users slides in keynote online is no fun on a 10" screen.

    14. Re:But not Android by Anonymous Coward · · Score: 0

      Your statement demonstrates ignorance to the concept of a 'joke' or 'humor'. Start by looking up 'fun' in the dictionary.

      Your statement demonstrates ignorance of how to interpret posts in forums. Start by looking up "reading comprehension" in the dictionary.

    15. Re:But not Android by infolation · · Score: 2
      Alexander Martin, the fosstodon.org person who discovered the issue writes:

      It sniffs your User-Agent.
      If it says Linux, Bad Gateway error.
      IT WORKS WITH A WINDOWS UA
      IT WORKS WITH A BSD UA
      IT WORKS WITH ... OS/2 UA

    16. Re: But not Android by infolation · · Score: 2

      Bear in mind we're talking about Apple, the company that maintains Linux's printing subsystem.

    17. Re: But not Android by Anonymous Coward · · Score: 0

      Bear in mind that CUPS was being used in Linux years before Apple bought the source code in 2007.

      As with most things involving Apple, it originated elsewhere -- not a Apple.

    18. Re:But not Android by BringsApples · · Score: 1

      Ha, great idea. ok, 1. Anyone others?

      Honestly I feel like Linux users already have dealt with shit for so many years that we're all quite thick-skinned when it comes to things not working smoothly. And when there's some shit situation where things don't work, a typical Linux user will simply carry on in another way.

      --
      Politics; n. : A religion whereby man is god.
    19. Re:But not Android by Anonymous Coward · · Score: 0

      Fortune.com reported over 700 million iPhones in use in 2017 with an expected billion within a few years.

      If only a tenth of one percent of those iPhones were owned by someone who uses Linux on their desktop. you have a million folk impacted.

      Sure, Linux is a niche, but when you're the size of Apple, even small percentages quickly become big numbers. Let's be conservative ans say just 20% of Linux users buy their iPhone new - that still points to 140 million in revenue, not including any app store sales.

      Right and how many of THOSE, actually have to go to iforgot.apple.com on a Linux based browser at a given time. I mean really... if your only computers are an iPhone and Linux desktop, then log in from someone else’s phone if the iPhone is out of commission. Buy a chrome book. Use a work computer, a tablet, anything. When was it that fucking hard to find another browser.. in 2019 ffs really.

    20. Re:But not Android by smpoole7 · · Score: 1

      > I would bet that this affects a lot more than 25 people

      My wife is one of them. She runs Fedora on her Dell laptop and the browser just would not work with Apple's support Website.

      --
      Cogito, igitur comedam pizza.
    21. Re:But not Android by paulatz · · Score: 1

      So when your iPhone get stolen, how do you manage to lock it remotely?

      --
      this post contain no useful information, no need to mod it down
  2. Apple and free don't mix well by kiviQr · · Score: 1, Insightful

    ...if you don't have $$$ then they do not want you.

    1. Re:Apple and free don't mix well by AmiMoJo · · Score: 1

      More likely it's an attempt to block attackers trying to get around 2 factor auth. The attackers trick the user into providing their 2 factor code and then do the actual login from a Linux server somewhere, so Apple's rather blunt but effective block is to return a bad gateway error for Linux clients.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    2. Re: Apple and free don't mix well by Anonymous Coward · · Score: 0

      That does not sound true what so ever

    3. Re:Apple and free don't mix well by JackieBrown · · Score: 2

      That doesn't make sense at all. Do you have an example of this - and that it only works using Linux servers?

    4. Re:Apple and free don't mix well by Anonymous Coward · · Score: 0

      ...if you don't have $$$ then they do not want you.

      I paid for their iDevice. Maybe they should.

    5. Re:Apple and free don't mix well by aardvarkjoe · · Score: 1

      ...so Apple's rather blunt but effective block is to return a bad gateway error for Linux clients.

      Yeah, "effective". Unless your attacker uses a common operating system instead of an unusual one. Or can figure out how to change their user agent string.

      That explanation isn't the least bit plausible.

      --

      How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
    6. Re: Apple and free don't mix well by Anonymous Coward · · Score: 0

      Windows is expensive. It takes significantly more time to run updates, recover from crashes, and fix. It has far less control than other operating systems, so more time and work are lost when it decides it wants to reboot while you are working.

      On my many systems, Linux is free, stable, and faster. The only update that ever requires a restart is a kernel update. It runs faster than Windows, and can run on cheaper hardware.

    7. Re: Apple and free don't mix well by Anonymous Coward · · Score: 2, Insightful

      Tell that to the cloud install that my business has. Right now, I'm paying the VPS for machine costs, and all my CM stuff is handled by Ansible playbooks. Total license cost? Zero. Were I to do the same in Windows, I would need at least 20 copies of Windows Server 2019 Data Center Edition, SCCM, a full volume license, and a metric ton of CALs. I then would need to throw in the time and effort to have patching done by SCCM, SCUP entries so third party stuff gets patched, AV software, and so on. Then, I'd need to have boxes for KMS activation, and so on.

      The Linux machines are configured so I can manually inspect erratas, and if the security patch is critical, they will fetch it themselves. Otherwise, I push stuff to them, test boxes first, then production.

      In house, I use KVM for virtualization. For authentication, FreeIPA. Backups? Cron + Borg Backup to borgbase, ensuring backups are encrypted, plus the SSH keys are append-only so ransomware can't take out backup repos.

      License costs $0. However, I do donate back to F/OSS projects because it is the right thing to do.

      Now, please explain to me again how Linux is expensive, and how it takes more time to learn, manage, and fix?

    8. Re: Apple and free don't mix well by Anonymous Coward · · Score: 0

      Linux is expensive. It takes significantly more time to learn, manage, and fix. Sudo.

      No. It doesn't.

    9. Re: Apple and free don't mix well by Anonymous Coward · · Score: 0

      Apple fanboys just make-up stuff.

    10. Re: Apple and free don't mix well by Anonymous Coward · · Score: 0

      If you paid for an Apple device then they have already "had" you... From behind!

    11. Re: Apple and free don't mix well by KendyForTheState · · Score: 1

      Sounds like yet another good reason to dump Apple, as if you really needed it.

      --
      ...I just came for the free beer.
    12. Re: Apple and free don't mix well by Highdude702 · · Score: 1

      Has nothing to do with apple, he's just a know nothing know it all.

    13. Re:Apple and free don't mix well by AmiMoJo · · Score: 1

      It's a pretty common first line of defence. If you notice that all the attacks are coming from a browser that lists the OS as Linux in the HTTP request, and 0.0001% of legitimate requests come from Linux users who presumably also have an iDevice anyway... Just send a fake error message.

      It actually works reasonably well against script kiddie types using cheap VPS systems, at least for a while as you get your other defences in place.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    14. Re:Apple and free don't mix well by infolation · · Score: 1

      Never attribute to malice that which is adequately explained by stupidity.

    15. Re: Apple and free don't mix well by Anonymous Coward · · Score: 0

      Linux is expensive. It takes significantly more time to learn, manage, and fix. Sudo.

      Just because you're having trouble with sudo doesn't necessarily mean it's broken. Anyhow, su is faster and easier.

  3. oops, they did it again by Anonymous Coward · · Score: 0

    Identifying browsers and blocking access is what they used to do with iTunes.

  4. intelligent person by Anonymous Coward · · Score: 0

    If you are an intelligent person, then they do not want you.

    1. Re:intelligent person by Anonymous Coward · · Score: 0

      If you're not gay, and emo, then they do not want you.

  5. Bank of America by Anonymous Coward · · Score: 0

    Bank of America website also used to complain about Linux (I was using the latest version of Firefox)

  6. Cause they R stupid by Anonymous Coward · · Score: 0

    Run Apple Gear and Warez and B Smart, or B Stupid and not run Apple Gear and Warez.

  7. Is it malice... by IWantMoreSpamPlease · · Score: 1

    or incompetence (on Apple's part)

    --
    So rise up, all ye lost ones, as one, we'll claw the clouds.
    1. Re:Is it malice... by Anonymous Coward · · Score: 1

      I think there is enough evidence to conclude is Apple's incompetence. Macbook Pro i9 throttling? keyboard broken by dust in the endless search of ultrathing laptops? audio glitches when syncing time? root access login with an empty password?

      Getting rid of audio jack? yeah, that's malice. Everything else I'd take as just plain incompetence.

    2. Re:Is it malice... by alvinrod · · Score: 1

      Maybe they're just trying to spare Linux users from their awful software. Everyone knew that iTunes used to suck horribly on Windows, but it's become a giant flaming pile of shit on Macs now as well. Hopefully Apple will extend this blocking to users of other operating systems so that everyone is spared the misfortune of using that wretched mess.

    3. Re:Is it malice... by fermion · · Score: 1, Interesting
      Apple overemgineers thie site and it makes no sense. They are one of the few companies that still, for instance, forces you to use an App instead of their site,

      In this case it is likely a badly implemented design decision.

      --
      "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
    4. Re:Is it malice... by ctilsie242 · · Score: 1

      Maybe Apple should just throw in the towel and support PTP/MTP like every Android phone since antediluvian days? Apple supports PTP/MTP on iOS, but Macs don't support it.

      That way, iTunes can be chucked completely as a "one size fits all app", and replaced by an app for DFU iOS firmware installs, and an app for music management/store.

    5. Re: Is it malice... by Anonymous Coward · · Score: 0

      Wait i could just plug the iphone instead of having to deal with awful icloud website ?

  8. Is this a big problem? by bigdavex · · Score: 0, Flamebait

    I imagine both users this affects are really angry.

    --
    -Dave
    1. Re:Is this a big problem? by zdzichu · · Score: 1

      Seriously? Deriding Linux users _on Slashdot_?

      --
      :wq
    2. Re:Is this a big problem? by Anonymous Coward · · Score: 0

      I imagine both users this affects are really angry.

      I was actually going to say "three people are angry", but you beat me to it, and with even greater exaggeration. Well done.

    3. Re: Is this a big problem? by Anonymous Coward · · Score: 0

      They certainly have it coming! The biggest assholes in tech, by far. There are a few decent ones not totally consumed by zealotry, but the rest need to get fucked.

    4. Re:Is this a big problem? by krray · · Score: 1

      Um ... there's four of us.

    5. Re: Is this a big problem? by Anonymous Coward · · Score: 0

      One could say the same about Apple users.

    6. Re:Is this a big problem? by bigdavex · · Score: 1

      I'm not deriding Linux users. I use Linux exclusively on my personal laptop. It's that the intersection of Linux and people who care about Apple ID and don't have access to alternative way to use it that seems pretty small.

      --
      -Dave
    7. Re:Is this a big problem? by Anonymous Coward · · Score: 0

      I think bigdavex's comment was nice. I would like to think most Linux users steer far away from iOS. I know I do.

    8. Re:Is this a big problem? by Anonymous Coward · · Score: 0

      That's a real funny joke, except there are probably quite a few Linux users who own Iphones.

      Also, there have to be at least one or two Mac and Windows users who are savvy enough to have user agent obfuscating plug-ins on their browsers that get rejected by the web site.

    9. Re: Is this a big problem? by zdzichu · · Score: 1

      I believe majority of Slashdot users are Linux users. And some of them may even used Apple devices.

      --
      :wq
    10. Re: Is this a big problem? by gnasher719 · · Score: 1

      They certainly have it coming! The biggest assholes in tech, by far. There are a few decent ones not totally consumed by zealotry, but the rest need to get fucked.

      Im not sure if you are trying to insult all Linux users here. Or all Apple users. Or is it the Android users? Or Microsoft users? No, I know what it is. You are the last living Amiga user and you try to insult everyone laughing about you.

  9. Change useragent... by Anonymous Coward · · Score: 1

    ... problem solved. That doesn't mean the web is well designed, but better than actually being unable to do anything with it... is to change the useragent in the browser of your choice.

  10. "For some reason" - what reason? by Anonymous Coward · · Score: 0

    This isn't news if they don't know the reason.

  11. Server to server access by Dan+East · · Score: 1

    More than likely it's an overbroad method of filtering to block requests to that page from servers.

    --
    Better known as 318230.
    1. Re:Server to server access by mccalli · · Score: 2

      That's what I thought too, although another possibility is that several JS frameworks compile for only specific browser targets. It's possible they have just omitted the target.

  12. Get a Mac by Anonymous Coward · · Score: 1

    It just works.

    1. Re:Get a Mac by Anonymous Coward · · Score: 0

      It does, once you have installed Ubuntu anyway.

    2. Re:Get a Mac by fbobraga · · Score: 1

      You will pay the overprice?

    3. Re:Get a Mac by Anonymous Coward · · Score: 0

      Using a Mac doesn't solve the problem.
      Apple's strange treatment of certain user agent strings appears to happen regardless of which hardware you're using.

  13. Works on FreeBSD by ottdmk · · Score: 1

    Weirdly enough, it works with the useragent set to FreeBSD (which, on my FreeBSD 12.0-RELEASE box, it is by default.) I'm used to websites working oddly with that useragent; this is the first time I've encountered the FreeBSD useragent being an improvement over a Linux one.

    1. Re:Works on FreeBSD by Nerdrockor · · Score: 1

      I was wondering about this, because Darwin the basis for Mac OSX is built on BSD.

    2. Re:Works on FreeBSD by Anonymous Coward · · Score: 0

      Why would it not work with FreeBSD? Browsers on FreeBSD do not use a user-agent string containing "Linux".

    3. Re:Works on FreeBSD by Anonymous Coward · · Score: 0

      It just solidifies the point that Apple isn't checking for Windows or OSX or iOS and sending the rest to the bad gateway. They're explicitly targeting Linux.

    4. Re: Works on FreeBSD by Anonymous Coward · · Score: 0

      Apple has recklessly forked and abandoned chunks of the BSD userland. It's a system with relics of BSD embedded in it, but a lot of neglected aged components

    5. Re:Works on FreeBSD by Anonymous Coward · · Score: 0

      It was already solidified as them explicitly targeting Linux. TFS plainly said "when the browser reports itself as being a Linux browser".

  14. Re:Who cares? by Anonymous Coward · · Score: 0

    at least a dozen people!

  15. DDOS mitigation by Anonymous Coward · · Score: 1

    I'd guess it's a side effect of DDOS mitigation, blocking incoming requests that probably aren't legitimate (the intersection of Apple and Linux users has got to be astronomically tiny), significantly more likely those requests are coming from an attacking botnet.

    1. Re:DDOS mitigation by Anonymous Coward · · Score: 0

      It is a good thing bots can't lie about their user agent. Apple will be safe now.

  16. Non sequitur by Anonymous Coward · · Score: 0

    This post seems completely off topic

  17. Working for me by Anonymous Coward · · Score: 0

    I just went to https://appleid.apple.com and logged in just fine using Firefox under Linux.

    1. Re:Working for me by quenda · · Score: 1

      Ditto for Ubuntu & Chrome.

      Fixed?

    2. Re:Working for me by Anonymous Coward · · Score: 0

      Just as I had a few days ago to update my address, when it was working fine.

      The outrage over this seems ridiculous.

  18. Deceptive headline by OneHundredAndTen · · Score: 1

    Unable? As in they are so stupid that they can't figure it out, or are they explicitly banned by Apple from doing it? It is of course the latter but, would it have killed you to come up with a less biased headline?

  19. Seems to be fixed by hawky · · Score: 2

    I just tried and it is working fine, yesterday I was getting the error.

  20. Linux Users Are Unable To Manage Their Apple ID by buddyglass · · Score: 0

    All three of them?

  21. Your using the wrong OS by Anonymous Coward · · Score: 0

    Apple want's you to use all Apple products, shame on you for using Linux. Apple doesn't care if you can't access their products with non Apple software, hardware, or OS. Because Apple only see's a world where everyone uses a iPhone, Mac and iCloud.

  22. Apple hates Linux by Anonymous Coward · · Score: 0

    Apple hates Linux and have always hated Linux

    1. Re:Apple hates Linux by CronoCloud · · Score: 1

      http://localhost:631/
      CUPS 2.2.8

      CUPS is the standards-based, open source printing system developed by Apple Inc. for macOS® and other UNIX®-like operating systems.
      CUPS and the CUPS logo are trademarks of Apple Inc. Copyright © 2007-2017 Apple Inc. All rights reserved.

      This is on a machine running Fedora 29.

    2. Re: Apple hates Linux by Anonymous Coward · · Score: 0

      CUPS was developed by Michel Sweet, and Apple uses it since 2002. They bought Sweet's company in 2007 to control it, but they can't close it (Apache License).

    3. Re: Apple hates Linux by Anonymous Coward · · Score: 0

      Thank you for heading-off yet another Apple fanboy attempting to revise history.

  23. Works for me by 0ryn · · Score: 1

    I just logged in ok using Debian / Firefox.
    I guess they fixed the issue??

    1. Re:Works for me by Anonymous Coward · · Score: 0

      I just logged in ok using Debian / Firefox.
      I guess they fixed the issue??

      Fedora 29 Firefox works.

  24. KDE Neon by Order_66 · · Score: 0

    Vivaldi working fine like always.

  25. Stupid Linux Users Everywhere! by Anonymous Coward · · Score: 0

    I don't understand why there even exist users who would put up with Apple's shit let alone Linux users. I don't have a lot of faith in people period though and my fellow Linux users are no exception. But like the majority who are mostly all utter retards there are bound to be a handful in the minority that are using both Linux and Apple products and fall into this same retard camp. However shitty Apple is it won't stop them from actual self-abuse. ie self-abuse in some nutter communities refers to masturbation, and there even includes laws and policies as such. Although I think they call that self-mutilation, but same difference.

  26. Headline should say "were maybe not able to" by thecombatwombat · · Score: 4, Informative

    I just got in fine with Firefox on Fedora 29 and I'm not spoofing the user agent or anything.

    It seems this was fixed within a few hours at most of the source article going up, and it's not clear exactly what user agent string got the error, or for how long, or even if that was definitely the thing that broke it. This is nothing.

    1. Re:Headline should say "were maybe not able to" by Anonymous Coward · · Score: 0

      Besides that, you can do anything at zombocom.

  27. Throwing versus making by JustAnotherOldGuy · · Score: 1

    "He discovered that when the browser reports itself as being a Linux browser, Apple's website will block the access by throwing a 'Bad Gateway' error."

    That sounds more like Apple pretending there's an error, since a 'Bad Gateway' isn't normally something that a browser could cause (unless you have a really, really shit site).

    Something similar happens on Hotmail when you go there with some browsers, the page will refuse to display and chokes up an error. Tell me how browser "A" requesting a page is materially different than browser "B" requesting a page? Unless they're going off of a User Agent string, there shouldn't really be any way the site would even know what's on the other end.

    --
    Just cruising through this digital world at 33 1/3 rpm...
  28. For several weeks by Anonymous Coward · · Score: 0

    I've had this same problem for several weeks. I didn't investigate the cause because that's not my job. I reported it to Apple by email several times and nothing happened. Looks like they finally fixed it now.