Skip to content
Thoughtful, detailed coverage of everything Apple for 28 years
and the TidBITS Content Network for Apple professionals
3 comments

iOS Bug Could Lead to Stolen iCloud Passwords

A bug in iOS 8.3 prevents the Mail app from stripping risky code from email messages. In a proof-of-concept attack, security researchers inserted code into email messages that displayed a fake iCloud login prompt. While this hasn’t yet appeared in the wild, there’s an easy way to tell if an Apple login dialog is real: press the Home button. A real login dialog is modal, which means that pressing the Home button will do nothing until the dialog has been addressed.

Read original article

Subscribe today so you don’t miss any TidBITS articles!

Every week you’ll get tech tips, in-depth reviews, and insightful news analysis for discerning Apple users. For 28 years, we’ve published professional, member-supported tech journalism that makes you smarter.

Registration confirmation will be emailed to you.

Comments About iOS Bug Could Lead to Stolen iCloud Passwords