(July 31, 2017 at 5:12 pm)SteelCurtain Wrote:(July 31, 2017 at 4:58 pm)FFaith Wrote: I said in a way, but I know that's not technically consent, so I probably shouldn't have put it exactly like that, but what I meant is that it's like these people are begging to have their pictures leaked. They could choose to be a million times safer with it but decide not to think it through. It's like if you're a rich white guy who decides to take a walk through the hood showing off your nice watch. You're basically saying, please take my watch.
Except it's not like that at all. It's like putting your money in a bank and expecting the bank to keep your money safe. But one time when you go to the bank, someone dressed like a teller is behind the counter and instead of taking your debit card to perform a transaction, he steals your information and then has access to your account.
iCloud is not unsecure. It is reasonable to expect that your data is safe. Directed attacks on people are usually accomplished with credential stuffing and phishing, which is not breaching the security of iCloud, or a nerd sitting behind a computer looking for a back door. It is someone literally acquiring credentials from another website (Like the Linkedin breach) and using them to log in to your iCloud like they were you. Either that or tricking you into giving them to you. No hacking involved.
Yup, one of the biggest cybersecurity issues isn't configuration or encryption (although those can ruin your day if they're implemented poorly), but rather identity. Is the person attempting to access this data who they say they are? Is the site I'm actually visiting the real one, or some phishing endpoint?
"I was thirsty for everything, but blood wasn't my style" - Live, "Voodoo Lady"
