Archive for the ‘apple’ Category

iPad Security Breach – At least 114,000 Owners Exposed!

Thursday, June 10th, 2010

new ipad

So you may have thought that the “lost” iPhone 4’s were a bit of an embarrassment for Apple.  How about having at least (these are the ones we know about) 114,000 iPad owners private information exposed?  This included celebrities, government officials (see below) and the Department of Defense! (see more below).

some emails

According to reports on Gawker the breach has exposed the email accounts and the chip ID’s of the early adopters of Apple’s new iPad.  Emails such as those of New York Time’s CEO Janet Robinson, Diane Sawyer of ABC News, Mayor Michael Bloomberg and White House Chief of Staff Rahm Emanuel.  There were also a number of DARPA domain addresses which is the advanced research division of the Department of Defense.  One of those email addresses belonged to the highly respected William Eldredge who “commands the largest operational B-1 [strategic bomber] group in the U.S. Air Force.”

DARPA emailsBreach Details: Who did it, and how

The group who did this call themselves Goatse Security who claim to be security experts/hackers looking for flaws so they can be closed and we know they have highlighted vulnerabilities in Firefox and Safari recently.

The group obtained its data through a script on AT&T’s website which was accessible to anyone on the internet (we understand this has now been removed).  They guessed some data, made a fake “iPad request” which allows iPad users to connect to the websites and then wrote a script to harvest this information.  They say that the script had been shared with other parties prior to AT&T closing it down so it is not known how many users were compromised.

Goatse also say they informed AT&T though AT&T claims a customer informed them.  I doubt the latter unless the customer was extremely computer savvy, or was informed by Goatse or a 3rd party with access to the script.

AT&T has confirmed the breach (and the closure) and is investigating the damage.

Apple on the other hand have made no comment.  This is unusual, as to be fair, they have no involvement and it wasn’t the iPad that was breached but the AT&T servers, but we would have thought they would have at least made a statement.

Some Ramifications

There are some serious ramifications here.  AT&T are playing it down saying it is only email addresses.  This time is was – but next time?  Also having an email address of some of these VIPs is worth a lot of money.  And having an email address can lead to much more (just ask the Twitter executives when their emails were all hacked – from one simple email address).  Then there is the DARPA emails.

Worse, AT&T still haven’t contacted customers about the breach!

The New York Times has sent an email to its staff to “turn off your access to the 3G network on your iPad until further notice” and we suggest you all do the same.

Finally, one last food for thought for Apple and AT&T.  If you force people to give you private information (and we are directing this at Apple who force you to buy an iPad with a credit card or other private information so they can monitor your account) then make sure you keep it safe!

We sincerely hope that the extra money AT&T is going to be making with its new 3G data plans will be spent on upgrading its security for iPad owners.

Images courtesy of Gawker.com

Ask Holly: Is the iPad Worth It?

Wednesday, June 2nd, 2010

Dear Holly,

I have heard all the hype about the new iPad but I don’t know if I should get one. Is it just a big iPod Touch? What is the difference between a Wi-Fi and a Wi-Fi + 3G and if I do get one, what size should I buy?

Frances.

Dear Frances,

With all the hype surrounding the iPad it seems they did forget to explain to a lot of people all the differences.

Wi-Fi or Wi-Fi + 3G

I will start by explaining the difference between the Wi-Fi and Wi-Fi + 3G model. The Wi-Fi only model will allow you to connect to the internet only via a Wi-Fi connection.  For most users this is more than sufficient. Most people will be using the iPad in and around the home or office. Or they will be visiting their local cafe and other places and can use the free Wi-Fi there. If you don’t have Wi-Fi at home now, it is very inexpensive to buy a Wireless Access Point for your home network and set it up.  Some cable/DSL companies will even let you upgrade your modem for a wireless version which has the access point built in.

Wi-Fi outside the home or office is free in many places, but be aware that not all places offer it for free and so you may have to pay to use it while you are out, but there are so many places that do offer free Wi-Fi that you can find one within a mile of where you are usually.

You need the internet access to access the internet, email, iTunes and most apps you use.

Some people want to be “always connected” even when they are away from the home or travelling in the car. To do that you need to get onto a cellular data network (3G or later 4G). There are two ways to do this, either using the 3G iPad or by hopping onto another device that is already connected to the 3G network (called tethering). The iPad Wi-Fi + 3G is to the iPad Wi-Fi only what the iPhone is to the iPod Touch (without the phone calls). The iPod needs Wi-Fi and the iPhone can use the 3G AT&T data network.

The big difference is the plans with AT&T for the iPad compared to the iPhone and other smartphones. There is no contract so you do not have to sign up and pay the monthly fee as soon as you buy a 3G iPad. As soon as you want to use the 3G service you can sign up from your iPad. The prices are $14.99 for 250Mb for 30 days or $29.99 for unlimited data for 30 days (similar to a lot of smartphone data plans). Be aware that although you can cancel at any time, you have to explicitly do that otherwise you will be charged every 30 days for your chosen plan.

This is an easy way for most casual users to get on the 3G network but there is another way, especially for users on other networks such as Verizon, Sprint etc.  A number of heavy users of 3G have a data plan with their cellphone provider. I have mine with Verizon and I use the MiFi that comes with it (I know Sprint has a similar version). These devices automatically connect to their carriers 3G network and allow up to 5 users to connect to them (and therefore the internet) via the MiFi. It is about the size of a credit card and has a secure wireless access point built in. No configuration is needed just push the button to turn it on and it connects itself.

I prefer this method for a number of reasons. I can use my MiFi that I already have for work. Multiple people can hop onto my MiFi (when I give them the password) so if you are travelling, you can have the kids on their iPad/iPods, someone else on  their laptop or any wireless enabled device, all for the one low price.  And I dont have to pay the extra $130 for the 3G iPad. All that gives me much more flexibility.

And there are some apps that will only work over the WiFi network and not 3G. Using the MiFi the iPad is always connected via WiFi and so all the apps will work wherever you are so that is another reason for the MiFi over the 3G iPad, but I should point out that the iPad will automatically switch to WiFi when it can connect to it, which will save your data usage.

There is one downside for not having the 3G iPad and that is the GPS. But with most cell phones (especially Android) having GPS navigation built in I am not sure if that is going to be missed – I prefer to use my small cellphone for navigation that a 10inch handheld.

When you ask about the size, the screen is the same size 9.7 inches so I am guessing you mean the storage size.  The iPads come in three sizes currently – 16Gb, 32Gb and 64Gb and the price difference is $100 between each model. This seems a strange pricing model to me – $100 for a 16Gb increase in storage or $100 for a 32Gb increase – but that is Apple for you.

There is no built in USB port to connect extra storage and no built in SD card slot either. The camera connector kit which is extra has an SD slot which you can use to transfer pictures to the iPad but I am not aware that you can use it for extra storage for other things such as music and video or eBooks. We suspect that this is another typical Apple ploy. They will bring out iPad 2 next year and these will have the extra ports but you will have to buy a new one (just like the 1st Generation iPod Touch. I mean really???!! A music and video player with no speaker built in???).

You can sync the iPad to your computer just like the iPhone and iPod so you can control the storage used on the iPad.  But most people will be using the iPad for videos and eBooks (we wont count email and websites as they wont normally take up much storage on your iPad).  If it was just for music then an iPod will do.  So you have to work out how many books and videos you want to carry around without having to sync with your computer. And how likely are you to buy the iPad 2 when and if it comes out – probably within 2 years (but this is pure guesswork by me based on iPods and iPhones).  If you want the latest iPad2 then get the 16Gb. If you don’t want the hassle of monitoring your storage or will keep it forever then get a larger one. It really will depend on how much you think you will want to use it and only you will know that.

There are some other limitations that you should also be aware of. There are no user accounts on the iPad, just like the iPod so everything is on there and open to who has access to it.  This is not like your computer where each person can have their own private account.  Some people don’t mind this but as Apple is also touting the iPad as a great tool for businesses – then I have to point out the limitations.  I think there will be a software update at some point in time and user accounts will be available – but again this is just a guess on my behalf and I don’t know what Steve Jobs is thinking.

We won’t go into the Flash debate or any of those.  They will play out over time and everyone will settle down again and carry on as normal.

Some of the things I do like about the iPad is the fact that it IS an oversized iPod touch.  A nice large screen, HD (720p) video, all the same apps and workings of the iPod Touch.  If you are an owner of a Touch or iPhone then you will be familiar with most of the workings of the iPad within seconds and if not, then it really won’t take long – that is one thing Apple excels at – easy to use intuitive user interface.

I hope that answered your question Frances. Would I buy one? Not just yet. I have my iPod Touch 1st Generation and got burnt by the lack of speaker and paying for software upgrades. I love my Droid cellphone on Verizon and it does most of what I need, and the Touch does the rest.  I would like an iPad, but I will wait until they upgrade the hardware with USB support and possibly SD support and then I will buy an iPad2.0.  But until then I am happy with what I have.  But if you don’t have an iPod or iPhone or want something for the kids then I would consider it.  But I hope I have given you enough information to make up your own mind.

Holly

Holly is one of ABC123 IT’s top technology experts. She often visits customers sites to help out with their network. You can ask her anything and she will try to answer all your questions. One question will feature in our newsletter each month.

Edit By Holly:  Of course as I published this today AT&T announced they are dropping the unlimited 3G plan for $29.95 and going for a 2Gb plan for $25 with a $10 for each additional Gb used.  The good news is for those already on the unlimited plan you can stay on it, but this really proves my point of the WiFi plus the MiFi from Verizon Wireless is a better option.  2Gb is woefully inadequate for an iPad – when you look at streaming netflix etc. when travelling.