Dave Mark
Wave of people getting locked out of their Apple ID.
Seems like a combination of being forced to change your password, and a delay imposed on people with "Stolen Device Protection" enabled.
Hoping this is something Apple can fix quickly.
Collection of reports here:
https://mjtsai.com/blog/2024/04/26/janky-apple-id-security/
#Apple #Security #AppleID
Warner Crocker
@davemark Already posted this on Threads but in case folks need to see it here, this glitch or whatever it is also revoked and erased wiped all App Specific Passwords I was using.
Warner Crocker
@jarunmb @davemark One of my theories about this and my long running iCloud issues is that longer term users who have mac.com addresses at the root are more subject to these types of iCloud issues. My wife and other family members I support who also never had mac.com addresses did not experience this recent issue.
I’ve discussed that with various levels of Apple Support and TBH they just don’t want to entertain that as a possibility on the record in those discussions./1
mb
@WarnerCrocker @davemark While I was reading your post about this, I got an email from Sanebox that the App Specific Password stopped working. Going to fix this next.
It’s interesting that my wife, son and daughter didn’t get locked when I did. The only difference I can tell is that they all use icloud.com addresses for their ID and I use my original mac.com address. Not sure if that has anything to do with it. Would be nice if Apple actually said something about what happened…
Warner Crocker
@jarunmb @davemark Off the record one engineer told me it was a large, well known problem.
Chancerubbage
@WarnerCrocker @davemark for every app with a stored password? Only using Apples password management? Or had you used One Password?
I think I avoided it by only having one device, my phone, active, and being mostly offline.
I used to get calls for TFA authentication if using public WiFi (where it seems exactly like a man in the middle attack) or, when using a VPN at a family members house. Apparently triggered by unexpected ‘unblessed’ IP address?
Warner Crocker
@Chancerubbage @davemark Any 3rd party app (not Apple apps) that required an App Specific Password. i.e. Fantastical requires ASPword for syncing with iCloud. ASPwords are for security purposes.
Chancerubbage
@WarnerCrocker @jarunmb @davemark
Good lord, I have by no means kept any of the dot Mac dot iCloud followiup stuff active since the late 90s. I couldn’t tell you what the email addresses or passwords were for those if you paid me.
I’ve maintained using late 80s addresses for almost 45 years?
Brent
@WarnerCrocker @jarunmb @davemark
Happened to me last night and I don’t use a mac.com address. Same with wife about 3 months ago, she doesn’t either.
Warner Crocker
@brentharrell @jarunmb @davemark Curious. When you say “use” does that mean you never had a mac.com address? That’s certainly possible depending on when you jumped on the Apple cart. I don’t “use” mine eitehr but my icloud address resolves back to that mac.com address.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.