Ultimately, Apple extended Epic's Sign In With Apple support and says it never intended to revoke it, but the incident highlighted the downsides of introducing a third party into account access.įor the average web user it may feel like there are a daunting number of factors in the choice of committing to a password manager versus using SSO. Epic scrambled to offer resources for users to transfer their Sign In With Apple accounts to other login mechanisms so they wouldn't permanently lose access. Apple booted Epic's Fortnite game from the App Store in August and then cut the company's Apple developer program membership over in-game purchasing disputes. There may not be a way to restore access to your photos.Ī real-world example of this came up earlier this month when the gaming company Epic warned that Apple was going to revoke Epic's ability to offer Sign In With Apple. If you use Twitter to log into, say, a photo storage platform and years later lose track of your Twitter account, it's difficult to know whether Twitter or the photo site is responsible for helping you troubleshoot. Many consumer SSO schemes also present practical issues with account recovery. And not only do you have to trust the companies that offer SSO to protect your privacy and security, you also have to trust all the third-party websites offering these options to implement them correctly. If your password or access token gets stolen from an account you use for SSO, all the other sites you used it to log in with could be exposed. It creates a single point of failure if something goes wrong. Take Sign In With Apple, which lets you use TouchID or FaceID to log into any number of sites.īut for all its convenience, consumer SSO has some real drawbacks, too. For example, they're developed and maintained by companies with the resources to bake in strong security features. The SSO schemes offered by big tech companies have some obvious advantages. But while these "single sign-on" tools are convenient, and do offer some security benefits, they're not the panacea you might think. The services provide a quick way to continue whatever you're doing without having to set up a whole account and choose a new password to guard it. If you're drowning in website logins and constantly using Forgot My Password prompts to get into random accounts, a "Log In With Google" or "Log In With Facebook" button can look a lot like a lifeline.
0 kommentar(er)
