<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>账号安全 on 知识铺的博客</title>
    <link>https://index.zshipu.com/ai001/tags/%E8%B4%A6%E5%8F%B7%E5%AE%89%E5%85%A8/</link>
    <description>Recent content in 账号安全 on 知识铺的博客</description>
    <generator>Hugo -- gohugo.io</generator>
    <language>zh-CN</language>
    <lastBuildDate>Wed, 02 Sep 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://index.zshipu.com/ai001/tags/%E8%B4%A6%E5%8F%B7%E5%AE%89%E5%85%A8/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>联想ID无需验证码注册漏洞致大量Dropbox账号被入侵</title>
      <link>https://index.zshipu.com/ai001/post/20260902/%E8%81%94%E6%83%B3ID%E6%97%A0%E9%9C%80%E9%AA%8C%E8%AF%81%E7%A0%81%E6%B3%A8%E5%86%8C%E6%BC%8F%E6%B4%9E%E8%87%B4%E5%A4%A7%E9%87%8FDropbox%E8%B4%A6%E5%8F%B7%E8%A2%AB%E5%85%A5%E4%BE%B5/</link>
      <pubDate>Wed, 02 Sep 2026 00:00:00 +0000</pubDate>
      <guid>https://index.zshipu.com/ai001/post/20260902/%E8%81%94%E6%83%B3ID%E6%97%A0%E9%9C%80%E9%AA%8C%E8%AF%81%E7%A0%81%E6%B3%A8%E5%86%8C%E6%BC%8F%E6%B4%9E%E8%87%B4%E5%A4%A7%E9%87%8FDropbox%E8%B4%A6%E5%8F%B7%E8%A2%AB%E5%85%A5%E4%BE%B5/</guid>
      <description>多名Dropbox用户收到安全通知，账户在2026年8月4日至21日期间被未经授权访问。问题不在Dropbox基础设施被攻破，而是联想ID注册无需验证码验证，黑客借此创建账号并通过SSO登录链路直接访问用户数据。 这一事件暴露了跨平台身份认证体系的薄弱环节。联想ID作为联想设备的常</description>
    </item>
  </channel>
</rss>
