According to time of Apple Insider Beijing: Reported on August 25, 5 have this week local time media coverage says, because the apple is online the flaw of store and website of Asurion of mobile phone insurance company, revealed number with 1 million plan the password of mobile phone account.
Article of print of American BuzzFeed News says, the apple is online the flaw of the shop, divulged " even more 72 million " T-Mobile user code. Asurion website is exposed to the sun to be put in another flaw, affect the password of AT&T client.
After BuzzFeed shares the flaw that researcher discovers, apple and Asurion already corrected flaw as soon as possible. The apple is online the account attestation page of the shop, date of mobile phone of T-Mobile of requirement user input and password or social insurance date -- the likelihood makes the hacker is not restricted second ground inputs information, use bump into a library to guess user account data.
A researcher says, this may be a technical error, the problem goes in a T-Mobile API (interface of applied process designing) during receiving malic website repeatedly.
Malic flaw and system of T-Mobile server security are had nothing to do by breach. T-Mobile server suffers attack to make the user individual information of about 3% is divulged.
To this incident, the apple still suggests the user that afore-mentioned involving, go changing as far as possible password and information, be used in order to prevent by hacker place. At present to domestic user, do not have any influences temporarily, everybody can be at ease practical. Chinese netizen god comments on: Oneself do not keep good, blame an apple? (product solid stylish hears more electron to pay close attention to 1000 machine to collect science and technology please)
