All Posts by Date or last 15, 30, 90 or 180 days.
also by Lloyd: photography and
Thank you for purchasing through links and ads on this site.
diglloyd Deal Finder...
Buy other stuff at
Memory Deals, Thunderbolt Drives, Performance Upgrades, and More
64GB for 2019 iMac 5K

$550 savings vs Apple!
64GB costs *less* than 32GB Apple!

The 'Cloud' is DEFINITELY a Huge and Tempting Target for Hackers

MPG advice is to avoid the Cloud as much as possible, and to never store sensitive information in the cloud. The Cloud is a Bad Idea in general, for a litany of reasons.

See also Apple iCloud: Promiscous Saving for Security Lapses.

About a week ago, MPG wrote The 'Cloud' Remains a Huge and Tempting Target for Hackers, one in a string of security-related posts over the years.

The Wall Street Journal reports today in Apple’s iCloud Service Is Under Attack in Mainland China of a widespread and highly sophisticated “man in the middle” attack:

Taiwan-based Chinese Internet activist Zhou Shuguang tested the service and found that communication channels between iCloud users and the iCloud server had been hijacked by an attacker in what is known as a “man-in-the-middle” tactic, Mr. Zhou said. Separately, Erik Hjelmvik, an analyst with Netresec AB, a network-security-software vendor in Sweden, said Tuesday he reviewed data posted online by Chinese Internet users and arrived at a similar conclusion.

“It’s evident that it’s quite massive,” Mr. Hjelmvik said. He said the perpetrators were able to attack users in different parts of China who used different Internet service providers. “The attack was quite sophisticated in that they apparently have quite a huge system set up in order to be able to intercept on such a large scale.”

The attack meant unauthorized parties would be able to decrypt the communication between iCloud users and the server, analysts said. This puts the iCloud users’ usernames, passwords, files, pictures and contacts at risk of being seen unencrypted.

Just today, I see a Chinese-origin IP attacking this site’s SSL link. The world is full of scum, and there are no security guarantees.

When a site uses TLS/SSL, a man-in-the-middle attack isn’t perfect—the user does get a warning that the security certificate is invalid. But many if not most users just will be confused, get annoyed and click right on through. NEVER, EVER do that—take the warning seriously, because it might really be a MITM attack and you’ve just logged logged your username and password in the hacker’s database. It is a fair question to ask why a browser should ever even allow a user to click through a failed certificate, but so it is.

Zeiss Batis for Sony
B&H Deal ZoneDeals by Brand/Category/Savings
Deals expire in 4 hours unless noted. Certain deals may last longer.
$3097 SAVE $200 = 6.0% Nikon D850 DSLR in Cameras: DSLR
$1797 SAVE $200 = 10.0% Pentax K-1 Mark II DSLR in Cameras: DSLR
$998 SAVE $400 = 28.0% Sony a7 II Mirrorless in Cameras: Mirrorless
$1798 SAVE $200 = 10.0% Sony a7R II Mirrorless in Cameras: Mirrorless
$2798 SAVE $400 = 12.0% Sony a7R III Mirrorless in Cameras: Mirrorless
$3998 SAVE $500 = 11.0% Sony a9 Mirrorless in Cameras: Mirrorless | Terms of Use | PRIVACY POLICY
Contact | About Lloyd Chambers | Consulting | Photo Tours
Mailing Lists | RSS Feeds | Twitter
Copyright © 2019 diglloyd Inc, all rights reserved.
Display info: __RETINA_INFO_STATUS__