App publisher not FBI leaked Apple UDIDs

By on
App publisher not FBI leaked Apple UDIDs

Researcher tips off victim.

Last week's disclosure of Apple Unique Device Identifiers (UDIDs) was caused by a breach of a US application publisher.

Florida-based publishing company Blue Toad said the million-record database of UDIDs was stolen from its servers two weeks ago, contradicting hacker claims that they were stolen from an FBI agent's laptop in March.

The FBI denied it was linked to the incident.

Blue Toad CEO Paul DeHart told NBC News staff downloaded the data released by Anonymous and compared it to the company's own database. They found a 98 per cent correlation between the two datasets.

 "pretty apologetic to the people who relied on us to keep this information secure" 

But DeHart said the compromised data may have been shared and ended up on a FBI computer. 

The company was tipped off by external researcher David Schuetz who compared apps against multiple devices to narrow down the source.

“I had decided to look more closely at the most frequently repeated device IDs, on the theory that perhaps that would belong to a developer. They'd naturally test multiple apps for their company, each of which should have a different device token,” he said.

“By the time I went to bed, I had identified 19 different devices, each tied to Blue Toad in some way.

"I found iPhones and iPads belonging to their CEO, CIO, CCO, a customer service rep, the director of digital services, the lead system admin, and a senior developer."

Apple publicly denied giving the information to the FBI and said that it began rejecting apps that access UDIDs earlier this year after phasing them out with the introduction of iOS 5.

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, UK edition
Tags:

Most Read Articles

You must be a registered member of iTnews to post a comment.
| Register

Poll

New Windows 10 users, are you upgrading from...
Windows 8
Windows 7
Windows XP
Another operating system
Windows Vista
How should the costs of Australia's piracy scheme be split?
Rights holders should foot the whole bill
50/50
ISPs should foot the whole bill
Government should chip in a bit
Other
View poll archive

Whitepapers from our sponsors

What will the stadium of the future look like?
What will the stadium of the future look like?
New technology adoption is pushing enterprise networks to breaking point
New technology adoption is pushing enterprise networks to breaking point
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
The next era of business continuity: Are you ready for an always-on world?
The next era of business continuity: Are you ready for an always-on world?

Log In

Username:
Password:
|  Forgot your password?