In the last few hours, a new tool that is supposedly capable of breaking Apple's iCloud security and accessing user accounts has traveled all the blogs and social networks. Many things have been said about iDict, the application in question, and many of them are false, or at least not entirely true. It is not able to guess anyone's password, it is just an application that use a dictionary with 500 passwords and that he tries them one by one until he gets inside. What passwords are included? We give you all the information below.
As we say, it is not an application that allows access to anyone's iCloud account, far from it. Only those who use any of these 500 passwords that you can see in GitHub. It is also necessary for the attacker to know your email address that you use to access iCloud. The application tries each password one by one until it manages to enter, and if your password is not included, then it will not be able to enter in any of the ways. But contrary to what some blogs claim, there is a failure of Apple, since the application manages to bypass the account lock What happens when someone enters the password several times incorrectly, and we do not know why, in this case it does not happen, allowing the application to try again and again until it gets (or not) the correct password.
At the time of writing this article it seems that Apple has already fixed this bug and accounts are locked, so the application no longer poses any risk. In any case, as we always indicate, it is best to use a secure password and better yet, activate the Apple two-step verification.
Beautiful <3