Actress Jennifer Lawrence has confirmed a leaked topless pho

[Terry]

Apple has confirmed that some celebrities' iCloud accounts were broken into, but says it has found no evidence that this was caused by a breach of its security systems.

Instead, the firm suggests perpetrators carried out their thefts by deducing victims' log-in credentials.

The statement follows the online publication of intimate pictures of about 20 personalities.

Actress Jennifer Lawrence has confirmed a leaked topless photo of her was real.

There had been speculation that the images were obtained due to a vulnerability in software that allows users to locate missing iPhones, since it had allowed unlimited password guesses.

But Apple has indicated that this was not the case.

"We wanted to provide an update to our investigation into the theft of photos of certain celebrities," said the firm in a statement.

"When we learned of the theft, we were outraged and immediately mobilised Apple's engineers to discover the source.

"Our customers' privacy and security are of utmost importance to us.

"After more than 40 hours of investigation, we have discovered that certain celebrity accounts were compromised by a very targeted attack on user names, passwords and security questions, a practice that has become all too common on the internet.

"None of the cases we have investigated has resulted from any breach in any of Apple's systems including iCloud or Find my iPhone. We are continuing to work with law enforcement to help identify the criminals involved."

The FBI said earlier that it was looking into the case.
Rihanna (May 2014) The pop star Rihanna is among those targeted by the hackers

Experts had highlighted that celebrities could be vulnerable to attacks if their passwords or security question answers could be guessed from articles written about them.

But one academic suggested that it would take more than obscure log-ins to shield internet accounts from the risk of theft.

"This isn't the first time photos have been taken off cloud storage and it won't be the last," said Dr Steven Murdoch, an information security researcher at University College London.

"And it's not fair to blame the victims of crime who may have simply been following the instructions websites are giving to protect their accounts.

"Authentication is not cheap to do right at large scale.
Jump media player
Media player help
Out of media player. Press enter to return or tab to continue.

Celebrities who were not targeted talk about the threat from hackers

"If you contrast what Apple and Dropbox and Google are doing with what banks are doing, then you can see the banks are taking significantly more steps to protect their customers. They are sending hardware and letters to customers, and sometimes requesting they come into branches, which gives better security but at a cost."

Dr Murdoch said that users wishing to do more to protect themselves could activate two-factor authentication - which can involve the user having to type in a short code sent via text message to their phone number as an extra security step before they are given access to their uploads.

'Creepy effort'

Images of the celebrities were leaked on image posting website 4Chan.

The user posting them - who defined him or herself as a "collector" rather than "hacker" - said more images of different celebrities would soon be posted.

Copies of the images spread to other services, including Reddit, Imgur and Twitter, from which they were subsequently deleted by administrators.

While some of the celebrities said the images were fake, others have confirmed their authenticity.
Sarah Schaaf tweet Imgur's director of community Sarah Schaaf tweeted about her efforts to delete copies of the leaked pictures

Actress Mary Elizabeth Winstead posted on Twitter: "To those of you looking at photos I took with my husband years ago in the privacy of our home, hope you feel great about yourselves.

"Knowing those photos were deleted long ago, I can only imagine the creepy effort that went into this."

Winstead's comments would suggest iCloud was not at play, as pictures on Apple's service are only viewable online for 30 days.

Raj Samani from Intel Security said: "Almost every service used online requires a password, and to ensure your passwords are secure, they must be complex."

But more often than not, it is human weaknesses that give hackers the simplest route to compromising accounts.

"Phishing" people - meaning to trick them into giving up their password - is considered perhaps the simplest and most targeted way hackers gain access to accounts.

...................................................................................................................

So - you're a famous celeb with a penchant for having photos of yourself naked or semi-naked.

Then you store them 'in the cloud'

How brainless is THAT

I just don't understand these half witted shit for brains people.

Frankly they deserve all they get................................

[hhfarang]

Is there anyone on here that believes that if the stuff stored on your own hardware in your own home is not safe, that it will be safer in "the cloud". I wouldn't store anything sensitive at a cloud site.

[J.J.B.]

It's amazing what some PRs will do to get their clients more publicity.

Why the world has to go crazy over the SHOCK, HORROR headline that "Actress Jennifer Lawrence Has Breasts" is beyond me.

Now if the pictures had showed her to be a ladyboy, that would have been more newsworthy. Possibly.

[PeteC]

I agree. These people are a commodity and in the business of selling their looks and, in some rare cases, talent. I wouldn't be shocked at all if this turns out to be a publicity stunt of some kind.

[Pleng]

This, to me, just highlights the stupidity of having these "security" questions to be able to reset passwords. Online services bang on about how secure your passwords need to be, random mixed of letters and numbers etc... and then it's all for shit because anybody who knows where you were born and the name of your first pet can reset your password.

[pdm3547]

anybody who knows where you were born and the name of your first pet can reset your password.

You don't use real answers for those questions do you? "Potato" and "Horatio" might be better.

[Lung Per]

Why did these dames have nude photos taken in the first place? Unless it´s really a publicity stunt?
Tweedledee-tweedledum....

[Pleng]

anybody who knows where you were born and the name of your first pet can reset your password.

You don't use real answers for those questions do you? "Potato" and "Horatio" might be better.

No. I don't use real answers. Because I have the simple ability the remember my passwords. In fact; when it came to it, I probably couldn't remember what I put for my 'security reset' questions. Which kind of defeats the point of them.

But you can bet that 90%+ of people DO use real answers.

[pdm3547]

No. I don't use real answers. Because I have the simple ability the remember my passwords. In fact; when it came to it, I probably couldn't remember what I put for my 'security reset' questions. Which kind of defeats the point of them.

Me too! You can also use some pretty useful programs, like Keepass and mSecure.