Security Archive - Rock the Prototype - Softwareentwicklung & Prototyping

Apple ID mutates into Apple Account – A step with hidden intentions?

Sascha Block2024-03-24T13:31:00+01:00Categories: Software development|Tags: Apple, Authentication, Authentication protocols, Authorization, Cybersecurity, Data sovereignty, digital authentication, digital communication, digital identities, digital infrastructures, Digital security, digital services, Digital Standards, Digitization, Freedom of information, IAM, IAM systems, Identity Access Management, Innovation, Integrity, Interoperability, iOS, IT architecture, IT security principles, IT-Security, MacOS, Multi-factor authentication, networked society, Online communication, Online Ident, Online transactions, Security, Software, Software Architecture, Software development, Tech Education, Trust, Trust models|

Apple ID mutates into Apple Account - Apple changes its strategy: Apparently, the US company is about to make a huge move by significantly changing its Apple ID. Not a marketing gag but, as always, a significant strategic move by Apple Starting this fall, Apple plans to convert the Apple ID into the Apple Account. This is definitely not a marketing gimmick. Nor is this a frivolous decision, but rather one that the company has prepared very carefully, as always. Apple stands for innovation and continuous improvement of the user experience. With the planned changeover from the "Apple ID" to the "Apple Account", the company is signaling its continued commitment to user-friendliness and data protection.

Jetzt weiterlesen

Architecture Trade-off Analysis Method (ATAM) – Software Architecture Reviews

Sascha Block2024-09-17T17:46:45+02:00Tags: Architectural decisions, Architectural goals, Architectural pattern, Architecture analysis, Architecture Trade-off Analysis Method, ATAM, Complexity, Critical infrastructures, Design Reviews, Design styles, Evaluation processes, Maintainability, Performance, Project success, Quality attributes, Quality requirements, Quality scenarios, Risk analysis, Risk reduction, Scalability, Security, Software Architecture, Software Architecture Analysis Method, Software projects, Stakeholders, Strengthening communication, Trade-offs|

What is the Architecture Trade-off Analysis Method (ATAM)? If you have ever worked with complex systems as a software architect, you know how crucial these trade-offs are for the long-term success of a project. ATAM helps you to better understand these trade-offs and identify potential risks early on before they have a negative impact in later development phases.

Jetzt weiterlesen

Authentication

Sascha Block2024-11-22T08:27:45+01:00Tags: 2-factor authentication, Authentication, biometric features, Biometrics, Cloud, Design Pattern, digital identities, digital identity, Frameworks, IT Security, MFA, Multi-factor authentication, Programming, Security, Security-Standard, Security-Standards, Software Design, Software development, TOTP-based-MFA, Usability, Web App, Web Apps, WebApp, Webbrowser, Website, Websites|

Authentication is a multi-step process in identity management. Authentication in an IT system implements IT security functions that are realized by various security services and components.

Jetzt weiterlesen

From Stargate to Europe: Why innovation has no future without values

Sascha Block2025-01-27T19:52:05+01:00Categories: Artificial intelligence (AI)|Tags: BSI, BusinessLeadership, Change management, Countries, Country, Covenant, Data sovereignty, Democracy, Development, Digital transformation, Digitization, DonaldTrump, Egovernment, Elon, ElonMusk, EntrepreneurialSpirit, Entrepreneurship, Federalism, GovTech, InnovativeThinking, IT Security, ITSec, ITSecurity, Leadership, Municipality, Musk, NeverAgainNow, NWIJ, OZG, Public administration, Rule of law, Security, Software Architecture, Software development, Supervisory authority, Supervisory bodies, Telematics infrastructure, Trump, Trust, VisionaryLeadership|

From STARGATE to us in Europe: Why innovation has no future without values - What connects Trump's "Stargate" promise, Europe's invisibility in Davos and Elon Musk's statements at an AfD event? A common theme: responsibility

Jetzt weiterlesen

Ghostbusters cyber attack – Facebook’s secret war & eavesdropping attacks

Sascha Block2024-03-28T11:39:04+01:00Categories: IT Security|Tags: Authentication, Authentication protocols, Authorization, Cybersecurity, Data security, digital authentication, digital communication, digital identities, digital infrastructures, digital services, Digital transformation, digitalSecurity, DigitalStandards, Digitization, facebook, Freedom of information, IAM, IAM systems, IdentityAccessManagement, Innovation, Interoperability, IT architecture, ITSecurity, networkedSociety, Online communication, Online transactions, OnlineIdent, Privacy, Security, snap chat, Software, Software Architecture, Software development, TechEducation, Trust, Trust models|

Snapchat users eavesdropped on by a man-in-the-middle attack by Facebook - Facebook has probably deliberately bypassed Snapchat encryption. As part of a class action lawsuit against Facebook, documents have now been made public that once again provide explosive material in the Facebook scandal surrounding data protection and data sovereignty. Facebook's action against Snapchat was probably more aggressive than ever thought.

Jetzt weiterlesen

Identity management and trust models in digital infrastructures

Sascha Block2024-02-01T09:43:03+01:00Categories: IT infrastructure, IT Security|Tags: APIs, Apps, Authentication, Authorization, Base wallet, BMI, BSI, Certifications, Compliance, Confidential Computing, Cyberattacks, digital identities, digital infrastructures, digital twin, Digitization, dynamic partnerships, e-prescription, eAT, eID, eIDAS Regulation, Electronic patient file, electronic prescription, Electronic residence permit, Encryption, ePA, EUdi Wallet, Federal ID card app, Federal Ministry of the Interior, Federal Office for Information Security, Federation, GDPR, General Data Protection Regulation, Identity card, Identity Management, Identity matching, Identity theft, Identity verification, Interoperability, ISO 27010, Multi-factor authentication, NFC, OAuth Framework, OpenID Connect, OpenID Federation, Penetration tests, Privacy, Quality control, Safety modules, Scalability, Security, Security checks, Single Sign-On, Smart eID Act, SmartPhone, Standards, Telematics ID, Telematics infrastructure, Tokenflow, Trust models, Trusted Execution Environment, User control, Vendor Lock-In, Wallet, Web applications|

Identity and access management and trust models in digital infrastructures are the invisible architectures that hold our digitally networked world together. In an era in which our lives increasingly take place online, complex networks interacting with digital identities, protocols and standards form the basic technical infrastructures that we use every day. And in the middle of it all: trust-based identities.

Jetzt weiterlesen

IT standards – Why interoperability and security are essential

Sascha Block2024-02-24T18:19:09+01:00Categories: Software development|Tags: Agile methods, AI, API, Big Data, Blockchain, BSI, Cloud computing, Coding Standards, Compliance, Continuous Deployment, Continuous Integration, Cybersecurity, Data format, Data transmission, Databases, DevOps, Digital transformation, Digitization, DIN, eIDAS, Encryption, ETSI, IaaS, IEEE, IETF, Interoperability, IoT, ISO Standards, IT Governance, IT infrastructure, IT Management, IT Operations, IT Service Management, IT Standard, IT standards, ITIL, machine learning, Mobile Development, Network Security, Open Source, PaaS, Privacy, Programming languages, Protocols, Quality assurance, RFC, SaaS, Security, Software Architecture, Software development, Software Testing, Standards, System integration, Technology, User Experience, Virtualization, W3C, Web development|

IT standards are the invisible network that ensures security, enables interoperability and holds our digital landscape together. Without IT standards, we would fall back into an era of digital turbulence in which nothing communicates with each other, security gaps are omnipresent and no progress is possible. Today we dive into the world of IT standards - we explore why they are essential, what makes a good standard and how they shape our digital future.

Jetzt weiterlesen

OpenID

Sascha Block2023-12-13T08:37:57+01:00Tags: Authentication, Certification programs, Cloud, digital identity, Frameworks, Identity Federation, Interoperability, IT Security, OIDF Standards, OpenID, OpenID Connect, OpenID Foundation, Partnerschips, Privacy, Security, Software Architecture, Software Architecture, Software Design, Standards, technical services, User information, Web 3.0 Standards|

All about OpenID - Discover everything you need to know about OpenID: from secure authentication and identity federation to the latest developments like OpenID Connect and the OpenID Foundation. Here you will find a comprehensive overview of digital identity.

Jetzt weiterlesen

Refresh Token

Sascha Block2024-07-11T15:51:41+02:00Tags: Access Token, Administrative complexity, API, APIs, Apps, Authentication, blockchain-based solutions, Cloud security, Cloud services, Compliance, Cryptography, Data protection standards, Decentralized identities, DIDs, digital authentication systems, Flexibility, IT Security, Key areas, Refresh Tokens, Regulatory challenges, Scalability, Secure network protocols, Security, Security risks, Server infrastructure, Software Architecture, Technology improvements, Token, Tokens, User Experience|

What is a refresh token? Refresh tokens are essential components of modern authentication systems and an indispensable element in protocols such as OAuth 2.0 to enable the secure management of access rights to web resources. Find out more about how Refresh Token works and its life cycle...

Jetzt weiterlesen

Security

Cookies von Drittanbietern