From The Annals of Forehead-Slappers, I present you this wacky story from Marko Karppinen, who tried to log into his Apple Developer Connection (ADC) account only to find that his password wasn’t working.
How could that be, you ask?
Apparently, someone else changed his password.
How could that be, you ask?
This Someone Else, claiming to be Marko, asked Apple for the account’s password in this effectively-written email:
am forget my password of mac,did you give me password on new email marko.[redacted]@yahoo.com
Apple thoughtfully obliged and handed Someone Else the password, no questions asked, giving said person access to a slew of Marko’s stuff:
- My personal details
- My personal email
- All the files stored on my iDisk
- Everything I’ve synchronized to .Mac, including my Address Book, Bookmarks, Keychain items, etc.
- My credit card details as stored in my Apple Store profile
- My iTunes Music Store Account
- My ADC Premier membership, including the software seed key and other assets
- The iPhone Developer Program’s Program Portal, including details of our development team
Woops?
Marko was able to use his password reminder question to log into his account. He then contacted Apple with a “WTF, dude?” email and they responded, apologized profusely, and promised to scour their logs to see if they could figure out what Someone Else may have accessed with his password.
But still. WTF, dude?
[via The Consumerist]
Same thing happened to me too this past weekend. Not only did they change the password, they changed the security question to something strange and slightly obscene. Apple then sent the changed password to the .Mac account instead of my alternate e-mail, giving Someone Else another day to do whatever they wanted. Finally got it fixed Monday.
This is indeed pretty sick! I hope this doesn't happen to me. I wonder why they are so lenient with security…
Is it a bot sending these out?
Does Apple use prison labor for its .Mac customer service?