Authorization Archive - Rock the Prototype - Softwareentwicklung & Prototyping

Apple ID mutates into Apple Account – A step with hidden intentions?

Sascha Block2024-03-24T13:31:00+01:00Categories: Software development|Tags: Apple, Authentication, Authentication protocols, Authorization, Cybersecurity, Data sovereignty, digital authentication, digital communication, digital identities, digital infrastructures, Digital security, digital services, Digital Standards, Digitization, Freedom of information, IAM, IAM systems, Identity Access Management, Innovation, Integrity, Interoperability, iOS, IT architecture, IT security principles, IT-Security, MacOS, Multi-factor authentication, networked society, Online communication, Online Ident, Online transactions, Security, Software, Software Architecture, Software development, Tech Education, Trust, Trust models|

Apple ID mutates into Apple Account - Apple changes its strategy: Apparently, the US company is about to make a huge move by significantly changing its Apple ID. Not a marketing gag but, as always, a significant strategic move by Apple Starting this fall, Apple plans to convert the Apple ID into the Apple Account. This is definitely not a marketing gimmick. Nor is this a frivolous decision, but rather one that the company has prepared very carefully, as always. Apple stands for innovation and continuous improvement of the user experience. With the planned changeover from the "Apple ID" to the "Apple Account", the company is signaling its continued commitment to user-friendliness and data protection.

Jetzt weiterlesen

Ghostbusters cyber attack – Facebook’s secret war & eavesdropping attacks

Sascha Block2024-03-28T11:39:04+01:00Categories: IT Security|Tags: Authentication, Authentication protocols, Authorization, Cybersecurity, Data security, digital authentication, digital communication, digital identities, digital infrastructures, digital services, Digital transformation, digitalSecurity, DigitalStandards, Digitization, facebook, Freedom of information, IAM, IAM systems, IdentityAccessManagement, Innovation, Interoperability, IT architecture, ITSecurity, networkedSociety, Online communication, Online transactions, OnlineIdent, Privacy, Security, snap chat, Software, Software Architecture, Software development, TechEducation, Trust, Trust models|

Snapchat users eavesdropped on by a man-in-the-middle attack by Facebook - Facebook has probably deliberately bypassed Snapchat encryption. As part of a class action lawsuit against Facebook, documents have now been made public that once again provide explosive material in the Facebook scandal surrounding data protection and data sovereignty. Facebook's action against Snapchat was probably more aggressive than ever thought.

Jetzt weiterlesen

Identity management and trust models in digital infrastructures

Sascha Block2024-02-01T09:43:03+01:00Categories: IT infrastructure, IT Security|Tags: APIs, Apps, Authentication, Authorization, Base wallet, BMI, BSI, Certifications, Compliance, Confidential Computing, Cyberattacks, digital identities, digital infrastructures, digital twin, Digitization, dynamic partnerships, e-prescription, eAT, eID, eIDAS Regulation, Electronic patient file, electronic prescription, Electronic residence permit, Encryption, ePA, EUdi Wallet, Federal ID card app, Federal Ministry of the Interior, Federal Office for Information Security, Federation, GDPR, General Data Protection Regulation, Identity card, Identity Management, Identity matching, Identity theft, Identity verification, Interoperability, ISO 27010, Multi-factor authentication, NFC, OAuth Framework, OpenID Connect, OpenID Federation, Penetration tests, Privacy, Quality control, Safety modules, Scalability, Security, Security checks, Single Sign-On, Smart eID Act, SmartPhone, Standards, Telematics ID, Telematics infrastructure, Tokenflow, Trust models, Trusted Execution Environment, User control, Vendor Lock-In, Wallet, Web applications|

Identity and access management and trust models in digital infrastructures are the invisible architectures that hold our digitally networked world together. In an era in which our lives increasingly take place online, complex networks interacting with digital identities, protocols and standards form the basic technical infrastructures that we use every day. And in the middle of it all: trust-based identities.

Jetzt weiterlesen

OpenID Connect – OIDC

Sascha Block2023-09-26T11:50:05+02:00Tags: Access Token, Authentication, Authorization, Identity Provider, Identity Provider, IT security concepts, OAuth, Token, Token Exchange, Token Flow, Tokenflow|

OpenID Connect (OIDC) is an extension of the OAuth 2.0 protocol and is used for secure and efficient authentication of users and technical services. OIDC stands for OpenID Connect and is an extension of the OpenID protocol.

Jetzt weiterlesen

SPRIND prototyping competition for digital wallets

Sascha Block2024-05-30T18:29:28+02:00Categories: Prototyping|Tags: Anonymity, Authentication, Authorization, BfDI, BMI, BSI, Certificates, Compliance, Cybersecurity, DARPAofEurope, DataEthics, DataProtection, Digital transformation, DigitalAgency, DigitalEU, DigitalIdentity, DigitalSovereignty, DigitalWallet, eIDAS, EUDI, EUDigital, EUGovernance, Fintech, FutureOfIdentity, GovTech, IAM, Identification, Identities, Identity, Identity Management, IdentityTheftProtection, IdentityVerification, Innovation, IT Security, ITSecurity, LegalTech, Privacy, PrivacyByDesign, PublicKeyInfrastructure, SecureIdentity, Security, SmartID, SPRIND, SPRIND - Federal Agency for Leap Innovations, TechCompetition, TechnologyTrends, Trust, Trust models, UserExperience, UXDesign, ZeroKnowledgeEvidence|

In the first nomination round of the prototyping competition in SPRIND's EUDI Wallet Prototypes innovation competition, 6 teams were nominated. A remarkable milestone for digital identities and an efficient approach to developing digital technologies. This competition clearly differs from traditional public tenders due to its prototypical approach and emphasizes the importance of agile and user-centric software applications.

Jetzt weiterlesen

Zero Trust – Beyond VPN: Why the Virtual Private Network is in the Shadow of Zero Trust

Sascha Block2023-12-08T08:57:26+01:00Categories: Cryptography, IT infrastructure, IT Security, Podcast, Software Architecture, Software development|Tags: Access Management, Authentication, Authorization, Confidentiality, Data Loss Prevention, HashiCorp, HashiCorp Vault, Identity Management, Integrity, IT Security, Micro-segmentation, Network Security, Network segmentation, Remote work, Software Defined Perimeter, Vault, Virtual Private Network, VPN, Zero Trust, Zero Trust Concept, Zero Trust Framework, Zero Trust-Approach, Zero Trust-Model|

Zero Trust - Beyond VPN: Why the Virtual Private Network is in the Shadow of Zero Trust - Easy to Understand: A Compact Guide to a Zero Trust Strategy Based on the Zero Trust Framework In this fifth Rock the Prototype Podcast episode, it's all about the revolutionary topic of IT security: zero trust. We wonder why the tried-and-true Virtual Private Network (VPN) is increasingly taking a back seat in the age of Zero Trust. Learn why implementing a Zero Trust approach requires new alternatives and how modern technologies can complement or even replace VPN. Dive into full of insights around IT and innovation.

Jetzt weiterlesen

Authorization

Apple ID mutates into Apple Account – A step with hidden intentions?

Ghostbusters cyber attack – Facebook’s secret war & eavesdropping attacks

Identity management and trust models in digital infrastructures

OpenID Connect – OIDC

SPRIND prototyping competition for digital wallets

Zero Trust – Beyond VPN: Why the Virtual Private Network is in the Shadow of Zero Trust

Cookies von Drittanbietern