免密支付暗藏隐患，有人薅10元羊毛被盗刷1万

Core Insights - The topic of "revoking Alipay account authorization" has sparked widespread discussion on social media, highlighting concerns over excessive authorization of personal information and the associated security risks [1] - Users are facing issues with "automatic payments" and "hidden charges," leading to financial losses without their knowledge [1][3] - Alipay has responded by promoting its "personal information authorization management" feature, which allows users to manage their authorizations and modify privacy settings [1] Group 1: User Concerns - Many users have reported discovering numerous unauthorized applications accessing their personal information, raising alarms about data privacy and security [1][7] - Instances of unauthorized automatic payments have been reported, with users unaware of ongoing charges for services they believed were canceled [1][5] - Legal experts emphasize that platforms must obtain explicit consent from users before processing personal information or enabling payment features, as mandated by laws such as the Personal Information Protection Law [4][7] Group 2: Security Risks - The convenience of "no-password payments" has led to significant security vulnerabilities, with cases of unauthorized transactions amounting to thousands of dollars due to lost devices or compromised accounts [5][6] - Users have experienced rapid unauthorized charges after enabling no-password payments, often linked to third-party services that do not clearly disclose their payment terms [5][6] - Experts suggest that while the no-password payment feature enhances convenience, it also necessitates improved risk management and user awareness from platforms [4][6] Group 3: Recommendations for Improvement - Experts recommend that platforms adopt principles of minimal necessary access, informed consent, and revocability in their authorization processes to enhance user security [8] - Platforms should implement real-time alerts for unusual transactions and provide users with easy access to manage their authorizations [8][9] - Consumers are encouraged to regularly review their authorization lists and prioritize using no-password features only with trusted applications [9]