"Sign in with Apple" Vulnerability
Schneier on Security 2020-06-02
Summary:
Researcher Bhavuk Jain discovered a vulnerability in the "Sign in with Apple" feature, and received a $100,000 bug bounty from Apple. Basically, forged tokens could gain access to pretty much any account. It is fixed....
Link:
https://www.schneier.com/blog/archives/2020/06/sign_in_with_ap.htmlFrom feeds:
Gudgeon and gist » Schneier on SecurityBerkman Center Community - Test » Schneier on Security