How is an app like this still allowed to offer Google sign-in without offering Sign In With Apple? Hasn’t that deadline passed?
30
9
1
222
Wasn’t there a second serious security flaw found in Sign In With Apple?
1
This:
Aaron Parecki @aaronpk
22 Jun 2020
Do I know anyone at @Apple? Found basically a showstopper bug in Sign In with Apple and hoping to discuss with someone. #WWDC #WWDC20
1
No security flaw in this latest bug I filed, but you might be thinking of this: aaronparecki.com/2020/05/31/…

The Real Cause of the Sign In with Apple Zero-Day

The zero-day bug in Sign In with Apple actually had nothing to do with the OAuth or OpenID Connect part of the Sign In with Apple exchange, and very little to do even with JWTs. Let's take a closer...

aaronparecki.com
1
1
I was aware of the zero-day. Thought that the “showstopper bug” you alluded to was a second, new security issue. Thanks for the clarification.
1
Replying to @nminnov @gruber
Still bad, but not on the security side this time. Just a blocker for us to deploy a new feature.

Jun 29, 2020 · 3:52 AM UTC
1