Page 3 of 3

Re: did anyone have their icloud password compromised?

PostPosted: Wed Oct 01, 2014 3:00 pm
by kw123
must be my english.. :oops:
I guess when the requestor has a different appleID than the target, it might not work..

could you just for testing , try to use your apple ID from your iPhone to populate the parameters, and see if that works?


karl

Re: did anyone have their icloud password compromised?

PostPosted: Thu Oct 02, 2014 9:02 am
by macpro
Nah... it's probably my Dunglish :wink:

But I changed the iPad info to the info for my iPhone.
FMi locates the iPhones, which is good.
And I still get the e-mails about an iPad logging in. Which is not good.

Re: did anyone have their icloud password compromised?

PostPosted: Thu Oct 02, 2014 9:26 am
by kw123
just to double check (because I tend to mess-up these things) did you change all 3 fields? os, device, and UUID?

Re: did anyone have their icloud password compromised?

PostPosted: Thu Oct 02, 2014 9:54 am
by five337
Which iOS is everyone using ? I can't get the emails to stop with 8.0.2 on all my devices and the edited config file.

Re: did anyone have their icloud password compromised?

PostPosted: Thu Oct 02, 2014 11:01 am
by kw123
I have:
Code: Select all
    def get_partition(self):
        # TODO: log if debug
        body = json.dumps({
            "clientContext":{
                "appName":"FindMyiPhone",
                "appVersion":"%s" % FMIP_API_ID,
                "buildVersion":"145",
                "deviceUDID":"xxxxxxxxxxxxxxxxxxxxxxxxxxx",
                "inactiveTime":2147483647,
                "osVersion":"7.1.2",
                "personID":0,
                "productType":"iPad4,4"
            }
        })

with iphone on 8.02, that works

Karl

Re: did anyone have their icloud password compromised?

PostPosted: Thu Oct 02, 2014 4:11 pm
by five337
Very odd.

I tried the same settings and still get the emails. :(

Re: did anyone have their icloud password compromised?

PostPosted: Sun Oct 05, 2014 8:52 pm
by jltnol
Apple saying that someone logged into their account on an ipad



Yes I got the same email, but I don't own an iPad.... so in a panic I changed the password twice... and both times got the same email..... after I logged into my account from another device I own(don't remember which one)

Anyway, from what I can tell, this is a bug in the Apple system concerning exactly which device has logged in.

And for the record, the computer that runs Indigo, and has the plugin you mentioned, was the LAST device I associated with my iCloud account, and the mysterious "iPad" email was received will before then.

And I'm sure you are aware that Apple now sends out an email to you when your iCloud account has been accessed by a non-registered device. So, if I'm at my mom's house and access my iCloud account thru the browser, Apple send an email informing me to this effect.

Re: did anyone have their icloud password compromised?

PostPosted: Mon Oct 06, 2014 10:07 am
by five337
jltnol wrote:

Anyway, from what I can tell, this is a bug in the Apple system concerning exactly which device has logged in.

And for the record, the computer that runs Indigo, and has the plugin you mentioned, was the LAST device I associated with my iCloud account, and the mysterious "iPad" email was received will before then.


It's not a bug from Apple. When FMi asks for your location it pretends to be an iPad.

Re: did anyone have their icloud password compromised?

PostPosted: Fri Oct 10, 2014 9:45 am
by jingai
This seems to suppress the emails if you have only one iCloud account, but for those of us with multiple devices on multiple accounts that we want to track, there will have to be some provision in the plugin to add the correct deviceUDID and productType to each AppleID device.

Re: did anyone have their icloud password compromised?

PostPosted: Fri Oct 10, 2014 2:36 pm
by Shutter
Just thinking out loud - the new provisions for app specific passwords?

Would really be nice to get this working again with multiple iPhones.

Re: did anyone have their icloud password compromised?

PostPosted: Sat Oct 11, 2014 6:18 pm
by alang_94526
I initially replaced UDID, osVersion and productType in def get_partition (self):
in the __init__.py file. I reloaded the plugin but FMID didn't ever attempt to find any of my devices as shown below:
Oct 11, 2014, 4:53:01 PM
Reloading plugin "Find My IDevices 1.715"
Stopping plugin "Find My IDevices 1.715" (pid 90858)
Stopped plugin "Find My IDevices 1.715"
Starting plugin "Find My IDevices 1.715" (pid 90878)
Find My IDevices Error Unable to reach update server.
Find My IDevices Error Unable to reach update server.
Started plugin "Find My IDevices 1.715"
Find My IDevices Find My iDevice Plugin Loaded...
Find My IDevices Registering Find My iDevice - iPhone - Alan (796088274)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Becky (545121419)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Mat (798751402)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Ross (1356191168)
Find My IDevices Done registering Device ID
Find My IDevices Registering Find My iDevice - iPhone - Yvonne (999493973)
Find My IDevices Done registering Device ID
Find My IDevices Retrieving location data
Find My IDevices Done Locating all iDevices


It doesn't actually update any of the locations.

After some experimenting, I found that it was the osVersion that was upsetting it. I tried setting it as an 8.0.2 iPhone and a 7.0.4 iPad but neither worked.
I had to revert to 3.2 and it worked fine.
But now I'm back to getting my iCloud emails every time FMID is called.

Any thoughts?

Re: did anyone have their icloud password compromised?

PostPosted: Sun Oct 12, 2014 5:27 pm
by alang_94526
Clarification of my previous post, I am using FMID to track 5 iPhones, and replacing the UDID for my phone means I don't receive iCloud emails, but the other 4 continue.
I don't see a simple way to edit the Plugin to emulate 5 separate iCloud accounts.

Re: did anyone have their icloud password compromised?

PostPosted: Mon Oct 13, 2014 9:47 am
by bschollnick2
Shutter wrote:
Just thinking out loud - the new provisions for app specific passwords?

Would really be nice to get this working again with multiple iPhones.


I don't know. In theory it's possible, but that would require multiple logins for each device, as FMIP switched UDID's.

Part of the issue, is that Apple has never officially opened Location Detection on the mobile devices / iCloud up to the public. So there is no official way to do this.

I'll discuss this on Github, but I don't know that there is a good answer at this time.