Apple were likely to be riding high last week after the release of their new security system improved for iCloud Apple ID accounts, which makes use of a verification process in two steps designed to build brand new account security in response to a recent large-scale hacking incident. Any success proved to be short-lived, however, after it emerged that there was a major fault security in their password reset system.
The vulnerability, which was discovered less than 24 hours after the tech giants announced the new system would allow a malicious user to reset a person the Apple password using only their e -mail and date of birth. In theory, this would give them full access Owner Email iCloud, iTunes account, and other sensitive information - not exactly the kind of security update that Apple aimed. To make matters worse, the exploit was quickly published online in a practical step by step guide, which would be hackers tools to access thousands of Apple accounts with relative ease.
The default assigned to each account that has not been upgraded to the new verification system, which may not have been too bad if the new system was well advertised - or even really available - in every country. Unfortunately for everyone, this was not the case. For Apple users living outside the United States, United Kingdom, Australia, New Zealand and Ireland, the only means of protection against default was to change the date of birth on their account.
Apple quickly removed their "iForgot" password reset page as soon as they were alerted of the problem, before assuring users that they take "customer privacy very seriously" and were "working on a fix." a free version fault-reset system was released shortly after, but anyone who can be invited to upgrade to the new method of verification as soon as possible.
you might not be able to count on Apple to keep your information safe online, but if you are looking for a way to add extra protection to your Internet connection, VPN service could be just what you're after. a VPN can add an extra layer of security to your online activities, making it even more difficult for future hackers from accessing your personal data.
0 Komentar