Saw this in the legal filing:

"he took advantage of an authentication bug to gain access to Apple’s confidential third-party cloud repository to download at least thirty-seven highly sensitive and proprietary technical documents related to, among other things, Apple’s hardware technologies and research and development."

Anybody know what they mean by "third party" ? Who provides Apple internal employees with a cloud repository?

▲

thewebguyd 20 hours ago | parent | next [-]

Could be any of the usual big names I'd suspect? Box, something from Atlassian, or maybe some home rolled thing on top of S3 or GCP?

▲

lifter3101 15 hours ago | parent | prev | next [-]

Maybe GitHub? It’s not a “cloud repository”, but possibly referring to that. And I can see how “an authentication bug” could be due to their corp Apple account being disabled, but still somehow being able to log into GitHub.

▲

rafram 19 hours ago | parent | prev | next [-]

This presumably just means a server hosted outside of Apple premises, probably by Amazon, since Apple heavily uses AWS.

▲

hmokiguess 18 hours ago | parent | prev [-]

what's the authentication bug?

▲

fragmede 8 hours ago | parent | next [-]

If you've logged into GitHub anywhere else, SSO won't sign them out.

▲

ta93754829 13 hours ago | parent | prev [-]

it's a bug, in authentication

	▲	hmokiguess 2 hours ago \| parent \| next [-]
		oh thank you, I had thought it was an insect that can bypass systems after biting them
	▲	alexander2002 9 hours ago \| parent \| prev [-]
		as in authentication in bug