Apple ID機能に重大な脆弱性
下記の記事が出ている。
Apple suspends password resets after critical account-hijack bug is found
ars technica: March 23, 2013
http://arstechnica.com/security/2013/03/apple-suspends-password-resets-after-critical-account-hijack-bug-is-found/
Major security hole allows Apple passwords to be reset with only email address, date of birth (update)
Verge: March 22, 2013
http://www.theverge.com/2013/3/22/4136242/major-security-hole-allows-apple-id-passwords-reset-with-email-date-of-birth
[追記:2013年3月24日]
関連記事を追加する。
Apple restores its iForgot password reset page after resolving security flaw
TNW: March 23, 2013
http://thenextweb.com/apple/2013/03/23/apple-restores-its-iforgot-password-reset-page-after-resolving-security-flaw/
[追記:2013年3月26日]
関連記事を追加する。
Apple Password Reset Apparently Hacked Again
CRN: March 25, 2013
http://www.crn.com/news/security/240151620/apple-password-reset-apparently-hacked-again.htm
| 固定リンク
コメント