iCloud breach highlights some hard truths about the consumer cloud
Grazed from GigaOM. Author: Derrick Harris.
The story of the breach of former Gizmodo staffer Mat Honan’s iCloud account took an interesting turn Sunday with news that the attacker was able to call Apple and convince a customer service employee that he was Honan. While hardly the breach of the century, the situation does highlight a couple hard truths about cloud security when it comes to consumer applications.
1. You’re giving up control. This is a good mantra to keep in mind when considering the use of cloud services. The problem isn’t so much security technology as it is about process, policy and, perhaps, business model. Cloud-storage Dropbox, for example, has experienced a couple of high-profile breaches and security issues owing to the company’s seemingly lax policies about how user information is stored and who has access to it. Then, there’s LinkedIn and its questionable password practices.
With iCloud, the problem seems to be the business model: tying hardware devices to cloud software might be a recipe for disaster. If someone steals Google or Twitter account information, the damage is largely limited to those services and whatever is accessible from them. When someone gets access to iCloud info, it’s lights out on your phone, tablet and laptop, too. At least temporarily, you’re giving control over your physical property — not just your digital life — to a hacker…

