In short, the very four digits that Amazon considers unimportant enough to display in the clear on the web are precisely the same ones that Apple considers secure enough to perform identity verification
Password-based security mechanisms — which can be cracked, reset, and socially engineered — no longer suffice in the era of cloud computing.
we found that our own internal policies were not followed completely
Was I targeted specifically?
He said the hack was simply a grab for my three-character Twitter handle
They just wanted to take it
It wasn’t personal
i just liked your username
But using that Apple-run me.com e-mail account as a backup meant told the hacker I had an AppleID account, which meant I was vulnerable to being hacked.