Apple may do its utmost to keep its secrets, especially when it comes to its future products, well-guarded, but that doesn't mean its partners do the same. Especially when Apple secrets can be revealed with a simple Google search after a vulnerability in an information system.
For months, one of the internal databases of Apple partner Quanta Computers was accessible simply by using a username and a common security code that was shared within a PowerPoint presentation on the Internet. Quanta is based in Taiwan and is the largest notebook manufacturer in the world. In addition to Apple, Quanta assembles laptops and ultrabooks for a number of companies including Dell, Hewlett-Packard, Sharp and Sony. The company is also reportedly responsible for assembling the Apple Watch, but also the rumored iPad Pro. The path to Quanta's database became accessible last September and just before the big Apple Watch event. An anonymous Reddit user had even made public blueprints from the then secret Apple device after information had been leaked due to the vulnerability. The images and blueprints were finally verified as authentic after the official presentation of the Apple Watch. Quanta had until today many of its Powerpoint presentations with many sensitive information available on the internet. One of them gave instructions on how to log in to the company's servers. So if you did a search with the terms "Quanta confidential" and ".ppt" a presentation titled "Quanta PDM system for Restricted Substances Investigation", along with others, are accessible to anyone.
The presentation includes instructions on how to log in to one of the databases, as well as a link to it. It also has the security codes for two of Quanta's clients, Apple and Foxconn.
Officially, neither Quanta nor Apple have made any announcement, but they will surely have moved to close this security hole before more sensitive data leaks online.
Source: Newsbeast.gr
📧
Subscribe to the SecNews Newsletter
