Skip to main content
  1. Tech
  2. Gadgets & Tech
  3. Tech Gear

Scary: iOS app asks for users' iCloud credentials

See also

Apple is currently featuring the calendar app "Sunrise" in its App Store, Marco.org reported on Wednesday. That, in and of itself, would not be news, but the fact that that app asks -- in app -- for your iCloud username and password, is news.

Sunrise, in response to media inquiries, said that they do not store your actual credentials on their server, but instead a token created from them.

When you type in your iCloud credentials, they are sent to our server only once in a secured way over SSL. We use them to generate a secure token from Apple. This secure token is the only thing we store on our servers, we never store your actual iCloud credentials.

In addition, they gave the following reason for requesting them in the first place (paraphrased by Marco.org):

It lets us do cool stuff.

At least they are not storing data on your device in the clear, like some applications we know, right?

Still, all this back and forth means that Sunrise has to be secure when it gets the information from your device, when it sends it to Apple, and when it stores it on its servers. That's still not all that comforting, especially when the company has already had a security scare, and only two months ago, too.

How much damage could someone do with this information? One need only read the cautionary tale of how such a break-in led to the destruction of Wired writer Matt Honan's digital life to see how much havoc this could wreak.

Notably, it does not appear there are explicit App Store review board rules against this sort of thing. Of course, Apple could change this.

Advertisement

Don't Miss

  • Unity
    'Assassin's Creed Unity' preview: Ubisoft comes home to its urban origins
    Games Preview
  • Smart vending machine
    This smart vending machine will recommend drinks for you based on your gender and age
    Video
    Tech Buzz
  • Destiny
    The 'Destiny' beta: 7 things we absolutely love about Bungie's new franchise
    Games Feature
  • Wi-Fi
    Find out how to stretch your Wi-Fi signal where it has never gone before
    Tech Tips
  • Unity Exclusive
    'Assassin's Creed Unity' exclusive: Tell the world, 'I'm coming home'
    Games Interview
  • Gamer ghost
    Gamer finds and plays with ghost of deceased father on a classic game
    Video
    Headlines