https://community.isc2.org/t5/Industry-News/All-your-Websites-and-surfing-are-belong-to-AT-amp-T-Verizon/m-p/14679#M1592 <P>If it's not a physical token it is subject to MITM attacks. And then have all 4 carriers using the same AUTH system? Really? Some ISSO's aren't doing their job.&nbsp; 4 different sources should all be saying the same thing: "If one domino falls, they all go."</P> Fri, 14 Sep 2018 11:23:07 GMT Flyslinger2 2018-09-14T11:23:07Z https://community.isc2.org/t5/Industry-News/All-your-Websites-and-surfing-are-belong-to-AT-amp-T-Verizon/m-p/14675#M1589 <P>Remember how Facebook was going to act as a single sign-on for everything you did on the Web?&nbsp; <A href="https://community.isc2.org/t5/Industry-News/Facebook-on-trusting-trust/m-p/13920#M1485" target="_blank">Remember how trusting you felt about that</A>?</P><P>&nbsp;</P><P>Well, now there's <A href="https://arstechnica.com/information-technology/2018/09/att-and-verizon-want-to-manage-your-identity-across-websites-and-apps/" target="_blank">Project Verify</A>.&nbsp; The four major US mobile carriers have banded together to become a single sign-on for everything you do on the Internet.&nbsp; No <A href="https://community.isc2.org/t5/Industry-News/Browser-privacy-and-adblocking/m-p/13845#M1461" target="_blank">privacy issues</A> there, right?&nbsp; After all, the carriers have <A href="https://www.npr.org/sections/alltechconsidered/2015/06/04/411870819/phone-carriers-are-tight-lipped-over-law-that-overhauls-nsa-surveillance" target="_blank">never needed regulation about the data they collect on you</A>, and they're completely transparent about what they do with it, right?</P> Mon, 09 Oct 2023 08:56:44 GMT https://community.isc2.org/t5/Industry-News/All-your-Websites-and-surfing-are-belong-to-AT-amp-T-Verizon/m-p/14675#M1589 rslade 2023-10-09T08:56:44Z https://community.isc2.org/t5/Industry-News/All-your-Websites-and-surfing-are-belong-to-AT-amp-T-Verizon/m-p/14679#M1592 <P>If it's not a physical token it is subject to MITM attacks. And then have all 4 carriers using the same AUTH system? Really? Some ISSO's aren't doing their job.&nbsp; 4 different sources should all be saying the same thing: "If one domino falls, they all go."</P> Fri, 14 Sep 2018 11:23:07 GMT https://community.isc2.org/t5/Industry-News/All-your-Websites-and-surfing-are-belong-to-AT-amp-T-Verizon/m-p/14679#M1592 Flyslinger2 2018-09-14T11:23:07Z