PSA: check your iPhone UDID

[sekker]

Ok, other than the cynical view that this is all a scam...

Can you tell me the compelling reason why I should check? I have 4 iPhones and 3 iPads in the household. I don't want to go thru the trouble of plugging them all into their various computers, collect the UDID, etc.

It's not like this gets them credit card info, right?

If this would let them (or the FBI even) break into my iTunes account, this would be bad. But that's not a clear vulnerability.

So, the question I have - the known and real risk of plugging my info into a random website is being balanced against the risk of one UDID released as a part of this hack.

Thanks in advance for the explanation!

[Blankity Blank]

M A V I C wrote:
Why did an FBI agent have 12 million UDIDs and all that private info on his laptop?

According to the story I read, he's part of an FBI cybercrime task force and the file was a data file supplied by a third party organization that acts as an intermediary between various companies and law enforcement for cybercrime issues.

The file has some form of strong encryption, but the hackers have posted links to tools to crack the encryption along with the file.

[datbeme]

DeusxMac wrote:
Wait a minute. This is all about outsiders collecting IDs, and you have to give that site your UDID in order to see if someone else has your UDID??? :nuts:

Reminiscent of...

wrote:
"I hate those hoax e-mail warnings, but this one is important.

If a man comes to your front door and says he is conducting a survey and asks you to show him your boobs, DO NOT show him your boobs. This is a scam. He only wants to see your boobs.

I wish I'd gotten this yesterday. I feel so stupid."

[NewtonMP2100]

....never knew that iPhone had a birth control device installed....?!?!?!??!

[gabester]

Alternately, you can download and decrypt the 90MB file that has the UDIDs released. I have confirmed doing it this way that MY iPhone's UDID hasn't been compromised in this instance. If you'd like, I can confirm yours as well, but you'll have to figure out how to contact me in a way that does not involve transmitting your UDID over the internet in general.

Or just PM me and we'll figure something out.

http://pastebin.com/nfVT7b0Z

key excerpt:

Download links:

http://freakshare.com/files/6gw0653b/Rxdzz.txt.html
http://u32.extabit.com/go/28du69vxbo4ix/?upld=1
http://d01.megashares.com/dl/22GofmH/Rxdzz.txt
http://minus.com/l3Q9eDctVSXW3
https://minus.com/mFEx56uOa
http://uploadany.com/?d=50452CCA1
http://www.ziddu.com/download/20266246/Rxdzz.txt.html
http://www.sendmyway.com/2bmtivv6vhub/Rxdzz.txt.html

HOW TO GET THE CANDY ONCE YOU HAVE DOWNLOADED THE FILE

first check the file MD5:
e7d0984f7bb632ee19d8dda1337e9fba

then decrypt the file using openssl:
openssl aes-256-cbc -d -a -in file.txt -out decryptedfile.tar.gz

password is:
antis3cs5clockTea#579d8c28d34af73fea4354f5386a06a6

then uncompress:
tar -xvzf decryptedfile.tar.gz

[Speedy]

gabester, they cracked that password? If so, dang, makes my 23 character password a piece of cake to crack if anyone was so inclined although they would mostly be disappointed with what they would find.

[fauch]

What happens if someone has my UDID?

[decay]

NewtonMP2100 wrote:
....never knew that iPhone had a birth control device installed....?!?!?!??!

beat you to that one...

[Mike Johnson]

Blankity Blank wrote:
[quote=M A V I C]
Why did an FBI agent have 12 million UDIDs and all that private info on his laptop?

According to the story I read, he's part of an FBI cybercrime task force and the file was a data file supplied by a third party organization that acts as an intermediary between various companies and law enforcement for cybercrime issues.

The file has some form of strong encryption, but the hackers have posted links to tools to crack the encryption along with the file.
There's all sorts of data the federal government is prohibited from collecting, but they're free to buy it from a third party.