Silicon.com reported yesterday on this week's hack of Apple's Korean online store. According to the article here the hacker managed to get admin rights on a Mac OSX server running Apache.
Although Apple have infuriated the public by refusing to comment, there is no suggestion that customer data may have been compromised or fraudulent transactions processed.
In other reports, speculation about security vulnerabilities in OSX server, Apache, and Apple's trading model, which is apparently consistent across the world, have sparked renewed interest in Apple's 'holier than thou' policy. Particularly interesting is the company's almost proprietary response to incidents like this, pretending that nothing has happened and everything is as clean and white as the glossy plastic machines they sell. As one commentator states, "Mud sticks, but it's particularly obvious on a white surface".
Although the hacker has not given details of the vulnerability which gave him access to deface the server, there is a good possibility that the same issue faces all Apple's web stores. Doubtless armies of Apple staff are fixing it even as you read this.
Recommended Comments