Glyph on Nostr: I've gotten a few "<Kid>'s Apple ID was used to sign in to iCloud on a new device" ...
I've gotten a few "<Kid>'s Apple ID was used to sign in to iCloud on a new device" emails today that have me mildly concerned. I've logged in to the kid's iCloud account and verified that I don't see any unknown devices there. But while I'm used to sometimes seeing these spuriously when picking up a device that hasn't been used in a while, "out of the blue when everyone in the house is definitely asleep" is a new one for me. Anyone know how to debug this? #macos #icloud #infosec
Published at
2024-01-08 17:53:15Event JSON
{
"id": "7b04c929d5195538ec278a2123a784f0d7db2c332ecd3f4ff1d9fafd6158c0ba",
"pubkey": "bd385aa0b579765c6883c5b0eb17e8ae350c988c659510be1e8453557ee38784",
"created_at": 1704736395,
"kind": 1,
"tags": [
[
"t",
"macos"
],
[
"t",
"icloud"
],
[
"t",
"infosec"
],
[
"proxy",
"https://mastodon.social/users/glyph/statuses/111721604414123268",
"activitypub"
]
],
"content": "I've gotten a few \"\u003cKid\u003e's Apple ID was used to sign in to iCloud on a new device\" emails today that have me mildly concerned. I've logged in to the kid's iCloud account and verified that I don't see any unknown devices there. But while I'm used to sometimes seeing these spuriously when picking up a device that hasn't been used in a while, \"out of the blue when everyone in the house is definitely asleep\" is a new one for me. Anyone know how to debug this? #macos #icloud #infosec",
"sig": "ea5aae8bc49d30f048a9b747cb9114d662a55e31dd30a46160efa07f8bdaaea019ad72f6d844d44cbda7982495ef53824722587d8c67f6d43d141cf928b1b2b9"
}