appmarsh

Saturday, 30 May 2020

Microsoft Is Switching Out MSN's Contract Journalists for AI

Dozens of contract journalists at Microsoft’s MSN and Microsoft News organizations are being phased out in favor of artificial intelligence, according to multiple reports this week.

from Gizmodo https://ift.tt/2XNlQum

Now Patched 'Sign in With Apple' Bug Left Users Open to Attack

Researcher Bhavuk Jain in April discovered a critical Sign in With Apple vulnerability that could have resulted in a takeover of some user accounts. The bug was specific to third party apps that used Sign in With Apple and didn't implement additional security measures.

Jain notes that Sign in With Apple works by authenticating a user through a JWT (JSON Web Token) or a code that's generated by Apple's server. Apple then gives users the option to share either the email tied to their Apple ID or a private relay email address,which creates a JWT that's used to login a user.

Jain then discovered that once JWTs for both Apple ID emails and private relay email addresses were requested and the token's signature was verified using Apple's public key, it "showed as valid." Should the bug have not been discovered, a JWT could be created and used to gain access to one's account.

In an interview with The Hacker News, Jain spoke about the severity of the bug:

The impact of the this vulnerability was quite critical as it could have allowed a full account takeover. Many developers have integrated Sign in with Apple since it is mandatory for applications that support other social logins. To name a few that use Sign in with Apple - Dropbox, Spotify, Airbnb, Giphy (now acquired by Facebook).

According to Jain, Apple conducted an investigation and concluded that no accounts were compromised using this method before the vulnerability was patched. Jain was paid $100,000 by Apple under its Apple Security Bounty Program for reporting the bug.

Tags: Apple security, Sign in with Apple

This article, "Now Patched 'Sign in With Apple' Bug Left Users Open to Attack" first appeared on MacRumors.com

Discuss this article in our forums

from MacRumors: Mac News and Rumors - All Stories https://ift.tt/3ezJrpe

Kit Harrington, At Least, Is Happy With Jon Snow's Ending in Game of Thrones

It’s been a little over a year since the last episode of Game of Thrones aired, giving us a lot of time to reflect on whether or not we were satisfied with how things ended up. This is true for the actors who brought those characters to life, too. And for Kit Harrington, at least, it turned out okay.

from Gizmodo https://ift.tt/2Asqjus

TGIF Playlist: Revolution

3 Months Free | Amazon Music Unlimited

from Gizmodo https://ift.tt/2TOOVoa

Ronald D. Moore Dishes on the Original, Four-Hour Concept For the Battlestar Galactica Finale

This is a really long finale, said the joker to the thief. At roughly 141 minutes, the three-parter that ended Battlestar Galactica way back in 2009 wasn’t a short ending by any stretch of the imagination. But the original cut, which clocked in at around four hours, was even more extensive. The only problem was, it…

from Gizmodo https://ift.tt/36Hu4bM