After idahc successfully discovered vulnerabilities on an Apple business website, a dump of more than two dozen usernames and hashed passwords appeared on Pastebin ? though he claims the data was not posted by him. Access appears to have been gained via a flaw in a survey posted on the Apple Consultants network site that was being served from abs.apple.com. That server remains offline for the time being, presumably while Apple attempts to batten down the network hatches.
While idahc admits that the situation is ?not yet serious,? the breach still means that Apple could find itself scrutinized by the same people who have recently gained entry into dozens of high-profile sites ? from PBS and Citibank to just about every Sony site and service imaginable.
While the individual who found the exploit was quick to point out that he had no ties to either Anonymous or LulzSec, there?s always the possibility that his method could wind up in their hands and facilitate a future attack on Apple. For its part, Anonymous tweeted that it was busy elsewhere ? an ominous sign for whoever or whatever it is that Anon is actively engaging.
http://www.geek.com/articles/apple/a...ymous-2011074/