AntiSec Obtains Over 12M Apple UDIDs from FBI Laptop, Leaks 1M to Public
September 4, 2012 6:11 AM
comment(s) - last by
AntiSec hacked an FBI laptop back in March, and is just now revealing its loot
is up to its usual antics again, and this time the hacker group managed to score a wealth of information on users of Apple iOS-based devices. The group claims to have hacked an FBI laptop and obtained over 12 million Apple UDIDs were.
A UDID (unique device identifier) is a 40-character code that is tied to a single device, be it an iPhone, iPad, or iPod touch. The UDID is normally used by app developers for tracking purposes, and Apple uses the UDID when authenticating Siri queries on the iPhone 4S.
In its rather long, rant-filled
, AntiSec describes how it obtained the information:
During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the AtomicReferenceArray vulnerability on Java, during the shell session some files were downloaded from his Desktop folder one of them with the name of "NCFTA_iOS_devices_intel.csv" turned to be a list of 12,367,232 Apple iOS
devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service tokens, zipcodes, cellphone numbers, addresses, etc. the personal details fields referring to people appears many times empty leaving the whole list incompleted on many parts. no other file on the same folder makes mention about this list or its purpose.
While over 12 million UDIDs were obtained during the attack on the FBI laptop, AntiSec has “only” released 1,000,001 UDIDs to the public. The group has thankfully removed personal information (names, address, cell phone numbers, etc) from list, but searching for your own UDID is rather simple using the following
. The site allows you to search the list for your UDID using a partial string instead of divulging all 40 characters.
You can view your UDID from within iTunes or
via an app
directly from your iPhone or iPad.
It's worth noting that the NCFTA reference in the filename is likely pointing to
National Cyber-Forensics & Training Alliance
. The group describes itself a "Non-profit corporation, evolved from one of the nation’s first High Tech Task Forces and, since 1997, has established an expansive alliance between subject matter experts (SMEs) in the public and private sectors (more than 500 worldwide) with the goal of addressing complex and often internationally-spawned cyber crimes."
Regardless of the motives behind AntiSec's latest antics, there are many questions that arise from this breach. Why does the FBI have 12 million Apple UDIDs on a laptop? Did a developer willingly hand over the UDIDs to the FBI? Did Apple itself play any part in divulging the information to the FBI upon request?
Only time will tell as we learn more from this “big reveal”.
The Next Web
This article is over a month old, voting and posting comments is disabled
RE: Why does the FBI have 12 million Apple UDIDs on a laptop?
9/4/2012 5:22:35 PM
Always wondered about this.. recall a report years back where the IRS admitted that it simply 'lost track of' a few hundred laptops, a few dozen desktops, and even 8 or so full server racks -- all likely holding sensitive info.
Besides coaxing employees to do work at home off the clock, what benefit is there to an employer to insist on giving laptops to it's entire workforce..? You certainly can't get more work done on one. All I see is the obvious -- intentionally allowing an employee to take potentially sensitive materials outside company grounds with no guarantee of security.
"Intel is investing heavily (think gazillions of dollars and bazillions of engineering man hours) in resources to create an Intel host controllers spec in order to speed time to market of the USB 3.0 technology." -- Intel blogger Nick Knupffer
AntiSec Exposes U.S. Soldiers' S/Ns, Passwords, Vows Attack on Monsanto
July 12, 2011, 8:45 AM
Report: Motorola Droid Turbo to Leapfrog 2nd Gen Moto X With QHD, Snapdragon 805
September 23, 2014, 12:32 PM
AT&T Tempts Customers with $39 U-Verse TV, HBO, Internet, and Amazon Prime Bundle
September 23, 2014, 10:15 AM
46 Percent of Apple’s Mobile Devices Already Running iOS 8
September 23, 2014, 9:48 AM
Die Shots Confirm A8 Packs Six PowerVR "Rogue" GPU Clusters
September 22, 2014, 4:05 PM
WSJ: Yes, HTC Nexus 9 ("Babel") is Incoming
September 22, 2014, 4:00 PM
Quick Note: Flagship BlackBerry Passport Smartphone to be Priced at $599 Unsubsidized
September 22, 2014, 3:31 PM
Most Popular Articles
HTC Preps Nexus 9 With Nvidia K1 64-Bit "Denver" SoC, Android L Onboard
September 10, 2014, 10:21 PM
Apple iPhone 6, iPhone 6 Plus Reviews Roll In
September 16, 2014, 9:13 PM
Big Media: If You Want Privacy, You're Probably a Pirate
September 18, 2014, 2:57 PM
Apple Cripples NFC in iPhone 6, 6+ With Developer Ban
September 17, 2014, 1:00 PM
Home Depot Credit Card Theft is the Biggest in History, 55 Million Cards Stolen
September 18, 2014, 7:53 PM
Latest Blog Posts
ISIS Imposes Ban on Teaching Evolution in Iraq
Sep 17, 2014, 5:22 PM
Space Terrorism is a Looming Threat For the United States
Apr 23, 2014, 7:47 PM
Facebook Aims to Provide Internet to "Every Person in the World" with Drones, Satellites
Apr 1, 2014, 10:20 AM
Retail Mobile Sites Experience Outages in Light of Simplexity's Bankruptcy
Mar 14, 2014, 8:48 AM
Tesla vs. BMW: Who Has the Safer EV?
Feb 1, 2014, 2:56 PM
More Blog Posts
Copyright 2014 DailyTech LLC. -
Terms, Conditions & Privacy Information