黑客曝FBI監(jiān)控蘋果移動(dòng)用戶
|
????反安全黑客集團(tuán)（AntiSec）發(fā)布了一段奇特的、慷慨激昂的公開聲明,。這份聲明以拉什迪的《撒旦詩(shī)篇》（The Satanic Verses）中的詩(shī)句開頭,，以說(shuō)給共和黨總統(tǒng)候選人聽的一句德語(yǔ)臟話結(jié)束（“不過(guò)，羅姆尼,，告訴他,，他可以去舔鞋！”）,。在聲明末尾,，黑客們終于拋出了想要表達(dá)的觀點(diǎn)： ????2012年3月的第二周，聯(lián)邦調(diào)查局（FBI）地區(qū)網(wǎng)絡(luò)行動(dòng)小組（Regional Cyber Action Team）兼紐約FBI辦公室證據(jù)響應(yīng)小組（Office Evidence Response Team）的主管特工克里斯多夫?K. 斯坦格爾使用的一臺(tái)戴爾Vostro筆記本被黑客入侵,。黑客利用了Java語(yǔ)言中原子引用數(shù)組（Atomic Reference Array）的漏洞，在shell會(huì)話過(guò)程中從他的桌面上下載了一些文件,。其中一個(gè)文件夾名為“NCFTA_iOS_devices_intel.csv”,，里面有一份包含12,367,232個(gè)蘋果iOS設(shè)備的清單，含有唯一設(shè)備標(biāo)識(shí)（UDID）,、用戶名,、設(shè)備名稱、設(shè)備類型,、蘋果推送通知服務(wù)標(biāo)識(shí),、郵編、手機(jī)號(hào)碼,、地址等信息,。提及用戶的個(gè)人細(xì)節(jié)字段出現(xiàn)了多次空白，致使整張清單留有多處未完成部分,。這個(gè)文件夾中沒有其他文件再提到過(guò)這份清單,，也沒有透露它的用途。 ????這份聲明稱,，這些數(shù)據(jù)是周二發(fā)布的,，其中一些用于識(shí)別身份的信息已被刪除。它們是用來(lái)警告公眾的,。聲明稱：“（不宜刊?。〧BI正在利用你們的設(shè)備開展一個(gè)或數(shù)個(gè)人員跟蹤項(xiàng)目（不宜刊印）,?！闭?qǐng)注意，這些黑客沒說(shuō)他們已經(jīng)獲得了蘋果設(shè)備的注冊(cè)號(hào)、密碼或信用卡卡號(hào),。 ????但是,，如果該聲明可信的話，廣大蘋果用戶的地址,、手機(jī)號(hào)碼和iOS設(shè)備注冊(cè)號(hào)到底是如何從蘋果公司的服務(wù)器上流向FBI特工的筆記本的,，這個(gè)問題需要有人給個(gè)解釋。 ????截至目前,，蘋果公司或FBI都還沒有就此事發(fā)表評(píng)論,。 ????黑客們聲稱，暫時(shí)不會(huì)發(fā)表進(jìn)一步聲明,，也不會(huì)接受媒體采訪,，除非明星八卦網(wǎng)站Gawker的狗仔隊(duì)在Gawker首頁(yè)上貼出狗仔記者身穿芭蕾短裙、頭上頂著一只鞋子的照片,。這支狗仔隊(duì)報(bào)道了兩大社交媒體網(wǎng)站——4chan（著名的匿名圖片分享社區(qū)）和Reddit之間的混戰(zhàn),。黑客在聲明中說(shuō)：“不穿上芭蕾短裙，就別想得到更多消息”（No tutu, no sources）,。 ????截至目前,，Gawker尚未就此發(fā)表評(píng)論。 ????點(diǎn)擊這里可以閱讀反安全集團(tuán)聲明的全文,。必須提出警告的是：它含有不雅的語(yǔ)言,。 ????The Next Web發(fā)布了一個(gè)查找工具，可以用它弄清自己的UDID是不是在已公布的1,000,001個(gè)UDID中,。 ????最新消息：Gawker負(fù)責(zé)報(bào)道Reddit/4chan的狗仔阿德里安?陳已經(jīng)在網(wǎng)站首頁(yè)上貼出了自己身穿芭蕾短裙,，頭頂鞋子的照片。與此同時(shí),，F(xiàn)BI也通過(guò)科技博客AllThingsD發(fā)表了一項(xiàng)聲明,。 ????FBI注意到，有公開報(bào)道聲稱FBI有一臺(tái)筆記本電腦遭盜用,，有關(guān)蘋果UDID的私人數(shù)據(jù)已遭泄露,。就目前而言，還沒有證據(jù)表明FBI有一臺(tái)筆記本電腦遭盜用,，或FBI曾試圖獲取,、或已經(jīng)取得了這些數(shù)據(jù)。 ????呃,?！熬湍壳岸浴€沒有證據(jù)……”也許是這樣。不過(guò)要是回到水門事件（Watergate）發(fā)生的年代里,，這就是我們稱之為“非否認(rèn)的否認(rèn)”（nondenial denial）了,。 ????譯者：清遠(yuǎn) |
????Toward the end of a bizarre rant that begins with a quote from Salman Rushdie's The Satanic Verses and ends with an off-color suggestion -- in German -- for the Republican candidate for President ("Romney aber, sag's ihm, er kann mich im Arsche lecken!") the anonymous AntiSec hacking group gets to the point: ????During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the Atomic Reference Array vulnerability on Java, during the shell session some files were downloaded from his Desktop folder one of them with the name of "NCFTA_iOS_devices_intel.csv" turned to be a list of 12,367,232 Apple iOS devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service tokens, zip codes, cellphone numbers, addresses, etc. the personal details fields referring to people appears many times empty leaving the whole list incompleted on many parts. no other file on the same folder makes mention about this list or its purpose. ????The statement says the data were released Tuesday -- with some identifying information removed -- to alert the public that, in its words,"[unprintable] FBI IS USING YOUR DEVICE INFO FOR A TRACKING PEOPLE PROJECT OR SOME [unprintable]" Note that the hackers don't say they have obtained Apple IDs, passwords or credit card numbers. ????Still, if the claims are to be believed, users whose addresses, cell phone numbers and iOS device IDs made their way from Apple's (AAPL) servers to an FBI agent's notebook computer deserve an explanation. ????No comment so far from either Apple or the FBI. ????The hackers, for their part, say that no further statements or press interviews will be forthcoming until Gawker's beat reporter for two rough-and-tumble social media sites, 4chan and Reddit, is pictured on Gawker's front page dressed in a tutu with a shoe on his head. "No tutu, no sources." ????No comment so far from Gawker. ????You can read the AntiSec post in fullhere. Warning: It contains language unsuitable for polite company. ????Via: The Next Web, which has posted a look-up tool here to determine if your UDID is one of the 1,000,001 that were released. ????UPDATE: Gawker's Reddit/4chan reporter, Adrian Chen, has complied, posting a photo of himself in tutu with a shoe on his head. Meanwhile, the FBI has issued a statement through AllThingsD: ????The FBI is aware of published reports alleging that an FBI laptop was compromised and private data regarding Apple UDIDs was exposed. At this time there is no evidence indicating that an FBI laptop was compromised or that the FBI either sought or obtained this data. ????Hmm. "At this time... no evidence...." Perhaps. But back in the Watergate era, that's what we used to call a nondenial denial. |
最新文章