Search results
The first attack vector affects everyone. The second affects everyone that hasn't dove into the obscure iCloud settings to manually generate a recovery key (so basically everyone). Trusting Apple's E2EE is trusting that (a) iCloud servers aren't compromised, and (b) the closed-source third-party HSMs aren't compromised.
It asked for my email linked to the account, my recovery phone number linked to the account and what I wanted my new password to be. When I finally got the recovery text, I went back to iforgot account recovery on Apple website with a link that was provided by the text message.
I logged onto iCloud to download photos from my account, not to change my password. I personally don't think it would even be possible for me to complete a password change within the one minute it took to do so according to the timestamps on the emails.
16 wrz 2024 · If you can't reset your Apple Account password or sign in to account.apple.com, go to iforgot.apple.com to start account recovery and regain access after an account recovery waiting period. Learn more about account recovery. Secure your Apple Account.
16 lut 2024 · If your Apple ID is hacked, you'll receive an email or notification indicating that your ID may have been used on a new device or that your password has been changed. If you suspect your Apple ID was hacked, change or reset the password immediately. If that doesn't work, use Apple's account recovery process.
If you don’t know your password and can’t verify your account information, you'll receive the option to start the account recovery process. You can also start account recovery from iforgot.apple.com through your device’s browser.
27 mar 2024 · If you received a notice from Reddit asking you to reset your password, please visit this article on Suspended or Locked Accounts. If you believe your account has been compromised, submit a request and select security problems, then I think my account has been hacked.
