Along with the myriad other problems with Apple’s MobileMe service — syncing conflicts, corrupted documents, dropped connections — users can now add another concern: spam.

Apple has provided spammers with a “dead simple way to easily spider their iDisk property to retrieve the entire MobileMe user name list,” Michael Arrington charged Thursday on his TechCrunch blog.

Every MobileMe user gets a public iDisk file-sharing site where they can post files for their public or private use, Arrington explained. Even

whether users set their pages to private, “it still shows the username whether you go to the page,” Arrington said. “There is no way as a user to hide or delete your public folder. whether you are a MobileMe customer, you have one.”

A simple dictionary attack to gather e-mail addresses by appending @mac.com or @me.com should be trivial.

Well-Known Tactic

Apple confirmed that users cannot remove their explanation names from […]

Orginal post by dhiram