Mela1987

Q: Does AOL Security Breach Affect Apple ID's Used in Messages?

AOL today disclosed a massive security breach and urged all users to change their passwords:

 

http://blog.aol.com/2014/04/28/aol-security-update/

 

 

Does anyone know if this affects Apple IDs used to sign into AIM via Apple Messages? Are Apple IDs compromised, or are passwords not disclosed in AIM authentication?

 

I know it would be safest just to change the Apple ID password, but it then is such a pain to change that across multiple Macs and iOS devices and services. I don't want to do it right now if I don't have to...

 

Thanks,

Drew

MacBook Air (13-inch Mid 2012), OS X Mavericks (10.9.1)

Posted on Apr 28, 2014 1:01 PM

Close

Q: Does AOL Security Breach Affect Apple ID's Used in Messages?

  • All replies
  • Helpful answers

  • by Ralph Johns (UK),Solvedanswer

    Ralph Johns (UK) Ralph Johns (UK) Apr 28, 2014 1:49 PM in response to Mela1987
    Level 9 (73,336 points)
    Applications
    Apr 28, 2014 1:49 PM in response to Mela1987

    Hi,

     

    If you are using @mac.com names as valid AIM Screen Names I would change the passwords as these are not subject to the double check against Apple and AIM that @me.com and @icloud.com names issued under iCloud are.

     

    The @me.com and @icloud.com ones are subject to iChat 6 or Messages 7 or 8 logging in to both Apple and AIM before AIM can "read" the password.

    The @mac.com ones are on a different server and AIM can read this without the checks that iChat 6 and Messages make on the iCloud issued names.

     

    I see AOL estimate that only 2% of users are effected.

     

    It would be interesting to know what the figure is for temporary suspended accounts due to "unusual Activity " that they normally have.

    @mac.com users had an issue with this about a year ago if they had travelled out of their normal country.

     

     

     

    3Sigcopy2.png

    9:49 pm      Monday; April 28, 2014

     

      iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad
  • by Mela1987,

    Mela1987 Mela1987 Apr 28, 2014 2:53 PM in response to Ralph Johns (UK)
    Level 1 (26 points)
    Apr 28, 2014 2:53 PM in response to Ralph Johns (UK)

    Thanks very much for the clear explanation. Unfortunately we've been using @mac.com names to retain the buddy lists associated with them. I guess we should bite the bullet and switch to @icloud.com names. Actually maybe we should just stop using AIM entirely.

     

    Thanks,

    Drew

  • by Ralph Johns (UK),

    Ralph Johns (UK) Ralph Johns (UK) Apr 29, 2014 11:42 AM in response to Mela1987
    Level 9 (73,336 points)
    Applications
    Apr 29, 2014 11:42 AM in response to Mela1987

    Hi,

     

    4thanx.gif    for the    2correct.png   Points.

     

     

    Whilst @mac.com name do works as valid AIM Screen Names that too is about to change.

    http://support.apple.com/kb/TS5224

    AIMSysMessage.png

     

    The Article currently implies the ID can be used in iChat 6 (later version) and Messages (all  versions) if you Upgrade from an earlier OS.

    However the Solution clearly points to changing to an AIM name no matter what OS/Messages or iChat version you are using.

     

    In Messages you need to display the Buddy lists (Window Menu) separately (see the General section of the Preferences).

    After you have created a new list just highlight all the Buddies (display Off Line Buddies) in the old Buddy list and drag to the new one.

     

     

     

     

    3Sigcopy2.png

    7:42 pm      Tuesday; April 29, 2014

     

      iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad