Security flaws in Apple's and Amazon's online services enabled hackers to gain access into journalist Mat Honan's virtual world and destroy his "entire digital life". As reported earlier, on August 3, Wired reporter Mat Honan was left at the mercy of hackers who did not stop at hijacking his MacBook Air, iPad, and iPhone, but continued the onslaught by gaining access to his e-mail and compromising his and Gizmodo's Twitter accounts. Honan's nightmare may be over but the ordeal has pushed both Apple and Amazon into action, prompting the companies to implement security policy changes.
Honan eventually figured out that the hacker had used Apple's tech support to render him helpless. AppleCare support offers users the option to reset a password over the phone. All one needs to reset a password is the following details: name, address, e-mail address and the last four digits of the user's credit card number. The hacker, who goes by the handle Phobia, used this method to gain access to Honan's account.
"You honestly can get into any email associated with Apple," Phobia boasted to Honan in an email.
For now, following the incident, Apple has temporarily frozen this option while they figure out what to do next. On Tuesday (August 7), Apple ordered its support staff to immediately stop processing AppleID password changes over the phone.
A statement realised by the company states: "Apple takes customer privacy seriously and requires multiple forms of verification before resetting an Apple ID password. In this particular case, the customer's data was compromised by a person who had acquired personal information about the customer. In addition, we found that our own internal policies were not followed completely. We are reviewing all of our processes for resetting account passwords to ensure our customers' data is protected".
Apple may be "reviewing" the processes, but whether permanent security measures and policy changes will take effect remains a mystery.
Amazon, too, has tightened the security reins and no longer allows people to call the company and change their account settings. On August 7, the company issued a policy change that addresses the security loophole in the customer service system. Previously, the system permitted people to call Amazon and alter account settings like e-mail address and credit card details. This feature enabled individuals to access an Amazon customer's account as long as the hacker was familiar with the victim's personal details. In a follow-up report, Honan narrates how the hackers managed this feat.
The only good that seems to have arisen from Honan's digital ordeal is that companies are attempting to become more vigilant. However, as the adage goes - better late than never!
© Copyright 2025 Mobile & Apps, All rights reserved. Do not reproduce without permission.