did anyone have their icloud password compromised?

Posted on
Wed Oct 01, 2014 3:00 pm
kw123 offline
User avatar
Posts: 8333
Joined: May 12, 2013
Location: Dallas, TX

Re: did anyone have their icloud password compromised?

must be my english.. :oops:
I guess when the requestor has a different appleID than the target, it might not work..

could you just for testing , try to use your apple ID from your iPhone to populate the parameters, and see if that works?


karl

Posted on
Thu Oct 02, 2014 9:02 am
macpro offline
User avatar
Posts: 765
Joined: Dec 29, 2005
Location: Third byte on the right

Re: did anyone have their icloud password compromised?

Nah... it's probably my Dunglish :wink:

But I changed the iPad info to the info for my iPhone.
FMi locates the iPhones, which is good.
And I still get the e-mails about an iPad logging in. Which is not good.

Posted on
Thu Oct 02, 2014 9:26 am
kw123 offline
User avatar
Posts: 8333
Joined: May 12, 2013
Location: Dallas, TX

Re: did anyone have their icloud password compromised?

just to double check (because I tend to mess-up these things) did you change all 3 fields? os, device, and UUID?

Posted on
Thu Oct 02, 2014 9:54 am
five337 offline
Posts: 52
Joined: Jun 21, 2010

Re: did anyone have their icloud password compromised?

Which iOS is everyone using ? I can't get the emails to stop with 8.0.2 on all my devices and the edited config file.

Posted on
Thu Oct 02, 2014 11:01 am
kw123 offline
User avatar
Posts: 8333
Joined: May 12, 2013
Location: Dallas, TX

Re: did anyone have their icloud password compromised?

I have:
Code: Select all
    def get_partition(self):
        # TODO: log if debug
        body = json.dumps({
            "clientContext":{
                "appName":"FindMyiPhone",
                "appVersion":"%s" % FMIP_API_ID,
                "buildVersion":"145",
                "deviceUDID":"xxxxxxxxxxxxxxxxxxxxxxxxxxx",
                "inactiveTime":2147483647,
                "osVersion":"7.1.2",
                "personID":0,
                "productType":"iPad4,4"
            }
        })

with iphone on 8.02, that works

Karl

Posted on
Thu Oct 02, 2014 4:11 pm
five337 offline
Posts: 52
Joined: Jun 21, 2010

Re: did anyone have their icloud password compromised?

Very odd.

I tried the same settings and still get the emails. :(

Posted on
Sun Oct 05, 2014 8:52 pm
jltnol offline
Posts: 989
Joined: Oct 15, 2013

Re: did anyone have their icloud password compromised?

Apple saying that someone logged into their account on an ipad



Yes I got the same email, but I don't own an iPad.... so in a panic I changed the password twice... and both times got the same email..... after I logged into my account from another device I own(don't remember which one)

Anyway, from what I can tell, this is a bug in the Apple system concerning exactly which device has logged in.

And for the record, the computer that runs Indigo, and has the plugin you mentioned, was the LAST device I associated with my iCloud account, and the mysterious "iPad" email was received will before then.

And I'm sure you are aware that Apple now sends out an email to you when your iCloud account has been accessed by a non-registered device. So, if I'm at my mom's house and access my iCloud account thru the browser, Apple send an email informing me to this effect.

Posted on
Mon Oct 06, 2014 10:07 am
five337 offline
Posts: 52
Joined: Jun 21, 2010

Re: did anyone have their icloud password compromised?

jltnol wrote:

Anyway, from what I can tell, this is a bug in the Apple system concerning exactly which device has logged in.

And for the record, the computer that runs Indigo, and has the plugin you mentioned, was the LAST device I associated with my iCloud account, and the mysterious "iPad" email was received will before then.


It's not a bug from Apple. When FMi asks for your location it pretends to be an iPad.

Posted on
Fri Oct 10, 2014 9:45 am
jingai offline
Posts: 127
Joined: Apr 03, 2007

Re: did anyone have their icloud password compromised?

This seems to suppress the emails if you have only one iCloud account, but for those of us with multiple devices on multiple accounts that we want to track, there will have to be some provision in the plugin to add the correct deviceUDID and productType to each AppleID device.

Posted on
Fri Oct 10, 2014 2:36 pm
Shutter offline
Posts: 345
Joined: Mar 07, 2014
Location: London, UK

Re: did anyone have their icloud password compromised?

Just thinking out loud - the new provisions for app specific passwords?

Would really be nice to get this working again with multiple iPhones.

Posted on
Sat Oct 11, 2014 6:18 pm
alang_94526 offline
Posts: 250
Joined: Apr 13, 2009

Re: did anyone have their icloud password compromised?

I initially replaced UDID, osVersion and productType in def get_partition (self):
in the __init__.py file. I reloaded the plugin but FMID didn't ever attempt to find any of my devices as shown below:
Oct 11, 2014, 4:53:01 PM
Reloading plugin "Find My IDevices 1.715"
Stopping plugin "Find My IDevices 1.715" (pid 90858)
Stopped plugin "Find My IDevices 1.715"
Starting plugin "Find My IDevices 1.715" (pid 90878)
Find My IDevices Error Unable to reach update server.
Find My IDevices Error Unable to reach update server.
Started plugin "Find My IDevices 1.715"
Find My IDevices Find My iDevice Plugin Loaded...
Find My IDevices Registering Find My iDevice - iPhone - Alan (796088274)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Becky (545121419)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Mat (798751402)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Ross (1356191168)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Yvonne (999493973)
Find My IDevices Done registering Device ID
Find My IDevices Retrieving location data
Find My IDevices Done Locating all iDevices


It doesn't actually update any of the locations.

After some experimenting, I found that it was the osVersion that was upsetting it. I tried setting it as an 8.0.2 iPhone and a 7.0.4 iPad but neither worked.
I had to revert to 3.2 and it worked fine.
But now I'm back to getting my iCloud emails every time FMID is called.

Any thoughts?

Posted on
Sun Oct 12, 2014 5:27 pm
alang_94526 offline
Posts: 250
Joined: Apr 13, 2009

Re: did anyone have their icloud password compromised?

Clarification of my previous post, I am using FMID to track 5 iPhones, and replacing the UDID for my phone means I don't receive iCloud emails, but the other 4 continue.
I don't see a simple way to edit the Plugin to emulate 5 separate iCloud accounts.

Posted on
Mon Oct 13, 2014 9:47 am
bschollnick2 offline
Posts: 1355
Joined: Oct 17, 2004
Location: Rochester, Ny

Re: did anyone have their icloud password compromised?

Shutter wrote:
Just thinking out loud - the new provisions for app specific passwords?

Would really be nice to get this working again with multiple iPhones.


I don't know. In theory it's possible, but that would require multiple logins for each device, as FMIP switched UDID's.

Part of the issue, is that Apple has never officially opened Location Detection on the mobile devices / iCloud up to the public. So there is no official way to do this.

I'll discuss this on Github, but I don't know that there is a good answer at this time.

------
My Plugins for Indigo (v4, v5, and v6) - http://bit.ly/U8XxPG

Security Script for v4 - http://bit.ly/QTgclf
for v5 - http://bit.ly/T6WBKu

Support Forum(s) - http://www.perceptiveautomation.com/userforum/viewforum.php?f=33

Who is online

Users browsing this forum: No registered users and 5 guests