It is said that his family members downloaded a recipe app on the Apple Store and authorized their login with Apple ID. Then the app popped up a password input box.

According to the test of the blogger @BugOS Technology Group, the application in the trusted device pulls up the hidden WebView to access appleid.apple.com without double verification. This major vulnerability allows users to log in by scanning their faces. The app also used a fake dialogue box to cheat the password and then added the scammer’s mobile phone number to the trust number of the two-factor authentication, and directly wiped the device remotely, so that the user could not receive the deduction information and fraudulently swiped.

From the perspective of the whole principle, this method is indeed hidden and difficult to prevent. It is not clear when Apple will fix this vulnerability. The blogger @BugOS Technology Group stated that when the window for entering the Apple ID password appears on the iPhone, press the Home button or swipe up to try to exit, and those who can exit are fraudulent.

The post Apple ID Stolen after turning on two-factor authentication appeared first on TechGoing.

Apple allows users to use Face ID or Touch ID instead of a password on their login page after visiting sites like icloud.com, appleid.apple.com, appstoreconnect.apple.com, etc.

Apple officially says Passkey is a security solution for alternative passwords, and the official Apple description here as follows:

• Passkey is an invisible cryptographic entity used as an alternative to passwords. Passkeys contain key pairs and greatly improve security compared to passwords.
• One is a public key, registered by the website or App you are using. The other is a private key, which is exclusive to your device.
• By using strong, industry-standard encryption, this key pair helps ensure that the relationship between your device and the website or app is tight and confidential.

Apple says that starting today, users who have upgraded to iOS 17, iPadOS 17 and macOS Sonoma beta can test this feature on supported Apple sign-in pages, but it is not currently available to all users.

The post Apple iOS & iPadOS 17 and macOS Sonoma begin to enable Passkey support appeared first on TechGoing.

Some users have reported that the bug causes Apple devices to constantly ask for the Apple ID password. In some cases, users’ Apple IDs were even logged out and they could not sign in again. One user said his Apple TV + subscription also suddenly “disappeared,” preventing him from using the platform, and Downdetector shows that many users are now having problems trying to watch content from the Apple TV app.

It is unclear how many users have been affected by this issue. Searching for “Apple ID” on Twitter, most of the users reporting problems are from Brazil and Japan, so it’s possible that only a few regions were affected by today’s glitch.

Apple’s system status page and found no mention of any issues affecting Apple ID.

Earlier this month, Apple’s weather app experienced a multi-day outage, and on April 5, several Apple online services were inaccessible for hours.

The post Users complain about Apple device bug: constantly asks for Apple ID password appeared first on TechGoing.

Apple says the optional security feature is designed for individuals who want “additional protection against targeted attacks like phishing or social scams. When enabled, signing in to an Apple ID requires entering the user’s account password and then using a FIDO-authenticated security key to complete two-factor authentication, rather than a traditional six-digit authentication code from another Apple device.

Those users who enable this feature must be very careful not to lose their security key, as this could result in permanent loss of access to their Apple ID account. Therefore, users must set up at least two security keys, supporting a maximum of six in total.

Apple recommends keeping security keys in multiple locations. For example, security keys can be tucked away somewhere in the home as a backup solution.

“Keep your security keys in a safe place and consider keeping security keys in multiple locations,” the document says. “For example, one key at home and one key at the office. If you’re traveling, you may want to leave one security key at home.”

To enable security keys for your Apple ID on your iPhone or iPad, open the Settings app, click on the user’s name, click on “Passwords and Security,” select ” Add a Security Key” and follow the on-screen instructions. On a Mac, open the System Settings application, click on the name, click on Passwords and Security, click on Add next to Security Keys, and follow the steps. Add, and follow the steps.

By repeating the above steps and clicking or tapping “Delete All Security Keys,” users can delete their security key at any time, at which point their Apple ID will revert to two-factor authentication using a six-digit authentication code.

Many security keys look similar to USB flash drives, with some options available wirelessly via NFC and others equipped with Lightning, USB-C, or USB-A ports for direct connection to iPhone, iPad and Mac. YubiKey 5Ci.

Apple’s documentation provides some other important details, so it’s worth checking before enabling the feature. For example, users cannot sign in to iCloud for Windows with this feature enabled, and certain types of Apple ID accounts are not supported.

The post Apple Officially Explains iOS 16.3 New Physical Security Key Feature appeared first on TechGoing.