成人小说亚洲一区二区三区,亚洲国产精品一区二区三区,国产精品成人精品久久久,久久综合一区二区三区,精品无码av一区二区,国产一级a毛一级a看免费视频,欧洲uv免费在线区一二区,亚洲国产欧美中日韩成人综合视频,国产熟女一区二区三区五月婷小说,亚洲一区波多野结衣在线

立即打開
蘋果推出新登錄功能,用戶可能面臨更大風(fēng)險(xiǎn)

蘋果推出新登錄功能,用戶可能面臨更大風(fēng)險(xiǎn)

Alyssa Newcomb 2019年07月04日
專家認(rèn)為,OpenID加大了人們對(duì)潛在安全風(fēng)險(xiǎn)的顧慮。

行業(yè)團(tuán)體OpenID基金會(huì)稱,允許人們用一個(gè)蘋果賬號(hào)登錄各個(gè)網(wǎng)站和app的新登錄功能,存在重大隱私和安全漏洞,必須予以修復(fù)。

該基金會(huì)為非營利組織,成員包括谷歌、PayPal和微軟等。它管理的OpenID Connect是一項(xiàng)行業(yè)標(biāo)準(zhǔn),作用是對(duì)同一ID在多個(gè)網(wǎng)站上授權(quán),而且無需設(shè)置不同的密碼。

OpenID基金會(huì)指出,“Sign in with Apple”功能和Open ID Connect有一些類似之處,但它并不完全符合該行業(yè)標(biāo)準(zhǔn)。該組織寫給蘋果公司工程高級(jí)副總裁克雷格·費(fèi)德里吉的信指出,該問題有可能讓人們面臨“更大的安全和隱私風(fēng)險(xiǎn)”。

OpenID基金會(huì)的主席奈特·崎村在信中寫道:“OpenID Connect和Sign in with Apple目前的不同之處讓人們可以使用Sign in with Apple的地方變少了,而且讓他們面臨更大的安全和隱私風(fēng)險(xiǎn)?!?/p>

崎村說蘋果尚未推出的這項(xiàng)單一ID登錄功能還給開發(fā)者帶來了“不必要的負(fù)擔(dān)”,因?yàn)樗麄儽仨毷褂肙penID Connect標(biāo)準(zhǔn)并對(duì)蘋果此項(xiàng)功能的不同之處進(jìn)行處理。

OpenID基金會(huì)要求蘋果加入該組織并遵循OpenID Connect標(biāo)準(zhǔn)。一份追蹤該標(biāo)準(zhǔn)和蘋果產(chǎn)品差別的文件已經(jīng)詳細(xì)列出了“彌合差異”所需要調(diào)整的代碼。

網(wǎng)絡(luò)安全公司Mimecast的威脅情報(bào)部門主管弗朗西斯·加夫尼表示,OpenID使得人們加大了對(duì)潛在安全風(fēng)險(xiǎn)的顧慮。

加夫尼認(rèn)為:“考慮到威脅行動(dòng)體越發(fā)仔細(xì)地搜尋潛在漏洞,他們發(fā)現(xiàn)并利用某個(gè)‘差異’可能只是時(shí)間問題?!?/p>

蘋果沒有立即對(duì)詢問做出回應(yīng)。該公司一直宣稱,Sign in with Apple可以幫助重視隱私的人登錄他們喜歡的網(wǎng)站。蘋果表示它不會(huì)和app開發(fā)者共享不必要的數(shù)據(jù)。

Sign in with Apple尚未發(fā)布,但iPhone用戶應(yīng)該會(huì)在自己喜歡的app中看到這個(gè)選項(xiàng),原因是蘋果已經(jīng)要求提供其他單一ID登錄方案(比如通過Facebook或谷歌賬號(hào)登錄)的開發(fā)者同樣向用戶推薦Sign in with Apple。(財(cái)富中文網(wǎng))

譯者:Charlie

審校:夏林

Apple’s new sign in feature, which allows people to use an Apple ID to sign into websites and apps, has critical privacy and security gaps that must be fixed, according to an industry group.

The OpenID Foundation, a nonprofit with members including Google, PayPal, and Microsoft, runs OpenID Connect, an industry standard for authenticating a person’s identity across multiple websites, without requiring them to use different passwords.

Sign in with Apple has some similarities with Open ID Connect, according to the group, but it’s not entirely in line with the industry standard. That’s a problem that could expose people to “greater security and privacy risks,” according to a letter the OpenID Foundation sent to Craig Federighi, Apple’s senior vice president of engineering.

“The current set of differences between OpenID Connect and Sign in with Apple reduces the places where users can use Sign in with Apple, and exposes them to greater security and privacy risks,” Nat Sakimura, chairman of the OpenID Foundation, wrote in the letter.

Sakimura says the single sign-in feature, which has yet to be rolled out, also puts an “unnecessary burden” on developers, who must work with the OpenID Connect standard and navigate the differences in Apple’s sign in feature.

The OpenID Foundation asks that Apple join the group, and to become compliant with the industry protocol. A document tracking differences between those protocols and Apple’s product details a list of necessary coding changes to “address the gaps.”

Francis Gaffney, director of threat intelligence at cybersecurity company Mimecast, says OpenID raises valid concerns about potential security risks.

“Given the increased scrutiny by threat actors on potential vulnerabilities, it would only be a matter of time before one of these ‘differences’ is discovered and exploited,” Gaffney says.

Apple did not immediately respond to a request for comment. The company is touting Sign in with Apple as a way for privacy-minded people to log into their favorite websites. Apple says it won’t share unnecessary data with app developers.

Sign in with Apple hasn’t been publicly released, however anyone with an iPhone should expect to see it as an option in their favorite apps, since Apple requires developers who offer other single sign on options, such as through a Facebook or Google account, to also promote Apple’s sign-in as an option.

掃碼打開財(cái)富Plus App
欧美精品九九久久久久久久久| 99久高清在线观看视频| 亚洲精品国模久久久久久| 亚洲曰朝精品无码专区 | 国产香蕉97碰碰久久人人| 国产亚洲欧美成人久久片| 无码人妻精品一区二区蜜桃网站| 2021av天堂网中文手机| 国产无码免费视频在线| 亚洲AV无码一区二区三区天堂古代| 精品国产一区二区三区AV性色| 国产级a爱做片免费观看| 亚洲高清在不卡一区二区三区| 国产在线一二三区电影| 久久机热免费视频| 超碰在线97免费中文字幕| 国内精品一区二区三区| 国产av熟女一区二区三区| 国产亚洲高清在线| 中文精品久久久久国产网址| 精品人妻系列无码人妻免费视频| 国产成人精品久久一区二区三区av| 久久精品国产99国产精2020| 国产精品毛片a∨一区二区三区| 亚洲精品ty久久久久久久久久| 亚洲黄片无码国产精品伊人av| 国产在线精品观看一区欧美国产精品不卡| 97成人无码免费一区二区中文| 国产h肉在线视频免费观看| 午夜成人爽爽爽视频在线观看| 惠民福利中文字幕人妻无码乱精品| 少妇A级毛片免费无码久久| 国产欧美日韩综合精品二区| 惠民福利亚洲国产日韩在线精品频道| 一本色道久久88—综合亚洲精品| 一区二区亚洲欧洲无码AV| 国产高潮呻吟久久| 亚洲AV无码成人精品区在线播放| 番里H肉3D动漫在线观看| 极品少妇被猛的白浆直喷白浆| 国产AⅤ无码专区久久精品国产|