In this Al Jazeera interview, identity‑theft expert Robert Siciliano discusses the recent leak of private celebrity photos, including those of Jennifer Lawrence, which were allegedly accessed via iCloud accounts. He explains that the core problem is not the cloud itself but users’ poor security practices, especially password reuse across multiple services. Siciliano outlines how attackers exploit a single compromised password to access many accounts, and he recommends a set of defensive measures: using unique passwords managed by password‑manager tools, enabling two‑factor or multi‑factor authentication, keeping devices and software up to date, employing antivirus/anti‑spyware solutions, securing Wi‑Fi connections, and using a VPN such as Hotspot Shield when on public networks. The conversation frames the incident as a wake‑up call for consumers to adopt stronger security hygiene when storing data in the cloud.
Chapters
Leaked celebrity photos are sparking major concern about the safety of material stored in the cloud. The actress Jennifer Lawrence is among those to have had private images stolen and then posted online. The source of the leak is unknown, and it's not clear how widespread the hacking could be. The FBI says it's addressing the allegations, and Apple says it's investigating whether any of its iCloud accounts have been tampered with. Well, Robert Siciliano is an expert on identity theft with the online company Hotspot Shield. He joins us live now from Boston. Sir, thank you so much for joining us here on Al Jazeera. So what is the problem here? Is it something inherently, I guess, more dangerous about the cloud, or is it that people don't use it properly, as in it's our passwords that are getting hacked?
Yeah, it's, uh, generally the people not using it properly and their passwords getting hacked. You know, when you have A company like Apple that's spending millions on hardware and software and the information security professionals to make sure that their information, essentially our data, is protected on their networks. The path of least resistance generally becomes the consumer, or in this case, the celebrity.
But I guess, um, it's still, I guess, perhaps more dangerous once they have your password if you're then on the cloud. Presumably they can access a lot more stuff than if you weren't on the cloud.
You know, what it boils down to is most consumers are using the same username and the same password for multiple accounts. So if you have the same password for your Facebook account and your Twitter gets hacked, then the bad guy can also get into your Facebook and vice versa. So when people are using all the same passwords for all different accounts and one account is compromised in some type of a data breach, The bad guys then go into each account and plug in that username and plug in that password, hoping to succeed, and generally they do.
I guess it's very complicated to have all sorts of different passwords and different account names, and people just forget. But what do you think, considering how useful really the cloud can be, what do you think is the step ahead here now? Do you think that people perhaps need to find a new way of accessing, you know, aside from passwords, or do you think people just need to learn how to use it properly?
What you're going to see over on the horizon is more consumers using password managers that will allow them to utilize multiple passwords on multiple accounts, again, not using the same password. In addition to a password manager, they'll also start using two-factor or multi-factor authentication even more. That means that you get your username and your password, and then you get a text message to your mobile phone with a one-time password. So even if the bad guy has your username and password, they don't have your mobile and they can't get your one-time password. This, this makes your accounts that much more secure.
Is there anything else people can do to protect themselves if they choose to keep material on the cloud?
Yeah, well, it's important to make sure that your devices are secure, which means updating your antivirus, anti-spyware, anti-phishing, and a firewall. I work with McAfee, of course, that's a great product. And then make— making sure your wireless connection to the internet is also secured. Hotspot Shield is a VPN that does that for you. Whenever you're on free public Wi-Fi, you have to lock down your wireless network. And of course, make sure your operating system is up to date and your browser is up to date.
I think this is going to be a wake-up call for a lot of people who use the cloud without possibly knowing all that detail. Robert Siciliano, um, thank you so much for joining us.
