A flaw in the ‘Login with Apple’ system in third-party applications and services that did not have an additional security system in place could allow ‘hackers’ to gain control of a user account.

The security flaw was discovered in April by researcher Bhavuk Jain, who informed the technology company of a ‘zero-day’ vulnerability that has already been corrected. For this discovery, Apple, through its rewards program, has paid him $ 100,000.

Specifically, it is a localized fault in the ‘Login with Apple’ system, which allows users to access third-party applications and websites with their Apple ID. This system allows the user to hide their email, if they do not want to put theirs, which generates a random and exclusive ’email’ that redirects to personal email.

Jain discovered that on those third-party sites that had not implemented additional security measures, a ‘hacker’ could create a ‘token’ linked to any email ID, which would be valid with Apple’s public key. In this way, he could gain control of an account, making this failure critical.

The investigator has indicated in his publication that Apple investigated the situation and determined that he had not identified misuse of this ruling or accounts that had been compromised.

source:- bhavukjain

The special protection against legal actions that large social networks like Facebook, Twitter, or Google enjoy could come to an end. At least that is the intention of the American president, Donald Trump, with the signing of the executive order this Thursday.

Exactly a year ago, the president accused major social networks of having a “progressive bias” and warned of a legal change. Over the past few weeks, he has again shown his intentions to embark on a legislative change that seems to have precipitated after Twitter posted warning messages in several of your tweets.

The executive order targets section 230 of the Communications Decency Act. A law that gives immunity to the web pages that select and moderate content created by third parties, as happens in the main social networks.

Legislation that has allowed the Internet to be configured as we know it today and that has shielded large companies such as Facebook, Twitter, or Google against possible legal actions and gives them the freedom to configure and moderate their platforms as they wish.

President Trump places the legal concept of “good faith” at the center of the controversy and argues that social networks would not have acted “in good faith” and that the legislation would have been paralyzed.

“In a country that celebrates freedom of expression, we cannot allow a limited number of online platforms to handpick the speeches that Americans can broadcast and that they can access on the Internet,” he says.

Thus, with the executive order, the Department of Commerce will ask the Federal Communications Commission (FFC) for a new regulation to clarify when a company could be violating the principle of good faith contained in section 230.

The new regulations establish that the violation of the principle of good faith would result in federal agencies not being able to advertise on these social networks, in addition to possible legal proceedings against them.

In addition, the order urges the Department of Justice to contact various state prosecutors to investigate the allegations of anti-conservative bias.

Finally, the executive order calls on the FCC to issue reports on complaints against the political bias of social networks that the White House has collected and considered the possibility of taking legal action against social networks that may have violated the principle of good faith of the mentioned section 230 that is altered with this new presidential mandate.

The US government has announced measures to reduce the production capacity of semiconductors with North American technology from the Chinese company Huawei, which it considers “a threat to national security”.

The US Department of Commerce announced on Tuesday that it had strategically blocked purchases of Huawei semiconductors that make use of US “know-how”.

US authorities have been lobbying companies in the United States and allied countries for many months not to accept Huawei technology, notably for the development of 5G telecommunication networks, warning of the risk of spying on an organization they say they are at the service of the Chinese Government.

This announcement blocks Huwaei’s efforts to circumvent export controls, ”said the Commerce Department in a statement.

The new measure could further damage already strained relations between the United States and China, compounded by mutual accusations about how each is dealing with the COVID-19 pandemic.

U.S. Officials say the move is in response to mechanisms they say are being used by the Chinese technology company to circumvent trade restrictions imposed since 2019.

Huawei and 114 of its subsidiaries have been blacklisted and forced to obtain special licenses whenever they want to export technology to US products. “However, Huawei continued to use computer programs and American technology to develop semiconductors, undermining national security and the diplomatic purpose of the measures,” explains the Department of Commerce.

This is not how a global company that wants to be responsible should behave ”, added the US Secretary of Commerce, Wilbur Ross.

“We must change our rules that are being abused by Huawei and HiSilicon (a subsidiary of the Chinese technology giant) to prevent American technologies from serving malicious activities contrary to the interests of the national security of the United States and its foreign policy,” he said. Ross.

The US Government, however, allows a period of 120 days, starting this Friday, before the new restrictions are applied.