Apple Password Recovery System Patented

Apple Password Recovery System PatentedPasswords are sensitive stuff, and with so many user accounts for a person to hold these days, it can get rather tricky trying to remember all of them, as some sites require 8 characters minimum, while others want a healthy mix of numbers, letters and at least one uppercase character, leaving some of us to use the same password across multiple accounts where possible. While that makes life easier for you, so too, does it make life easier for anyone with nefarious purposes who want to hack into your accounts. Nikon recently filed a patent where a password is required to activate your camera’s lens, and here we are with Apple being granted a patent that allows owners of Apple devices to retrieve their respective passwords simply be hooking up to a specific peripheral, which could very well end the reign of current traditional password recovery methods.

The U.S. Patent and Trademark Office awarded Apple today U.S. Patent No. 8,429,760, which covers “a system and method for storing a password recovery secret.” This patent was originally filed for in July 2010, where it described a system which would tie part of the password recovery process to “a commonly associated peripheral device,” where something as a common as a power cord would do.

By Ubergizmo. Related articles: Apple’s WWDC Starts On June 10 With Focus On iOS 7, OS X, Tactilize: Create and Share Visual Cards from the iPad,

    

Microsoft leak details plans for two-step authentication process

Microsoft leak details plans for twostep authentication process

Smoke goes up. Lights fade. The crowd roars. It’s 2003, and the Dave Matthews Band is about to perform what would go on to become the theme song for security processes the world over a decade later. Weird visualizations aside, it sure seems as if two-step authentication has become all the rage these days. With Google implementing the process in 2011, both Apple and Dropbox have followed, and Evernote has made clear that it’s going to join the fray as soon as feasible. Now, leaked imagery is demonstrating that Microsoft might not be far behind, with a two-step verification process evidently planned for its online services.

As you’d expect, the process should work pretty simply once it’s instituted — you’ll need to enable two-step on your account, and then use an app on your mobile device to retrieve randomized keys when logging into a computer that’s not on your trusted device list. Notably, the process isn’t expected to work with linked accounts, and while a Windows Phone app appears to already be floating about, there’s no word on whether Android, BlackBerry or iOS users will receive the same courtesy. Till then, keep your passwords guarded. And, of course, watch the video embedded after the break.

Filed under: ,

Comments

Source: LiveSide, Windows Phone Store

Chrome 26 for Android gets stable release with autofill and password syncing

Chrome 26 syncing

Perpetually forgetful Android users no longer have to adopt a Chrome beta to coordinate their lives. Just a month after the test version of Chrome 26 arrived with autofill and password syncing, its stable version has appeared with the same option to remember form and login details between supporting desktop and mobile Chrome builds. There’s no talk of the SPDY-based proxy, however: aside from tune-ups, the syncing is the main highlight. That’s still enough for us to justify swinging by Google Play for the update.

Filed under: , , ,

Comments

Via: Chrome Releases

Source: Google Play

AT&T Wants Sanitized Passwords

AT&T Wants Sanitized PasswordsIf you think that having so many passwords to remember is a bane to your mind these days, how about choosing one that has some obscene words thrown into the mix? That ought to make life easier for those brain cells of yours, no? Apparently, the folks over at AT&T do not think so, as the company has already stepped forward to ban what they deem as “obscene language” from proliferating their database of user passwords. Of course, it remains to be seen just what falls under the category of “obscene language” for the folks over at AT&T, but I think we can pretty much warrant a few surefire guesses without being too far off the mark, no?

There is the question of why should such a policy exist in the first place? Considering how no one should know of your AT&T password, why should not a few naughty words get slipped in along the way? After, it sure beats regular password fillers such as your family name, your birthday, your anniversary, or heck, the good old standby, “password’. What do you think of this new policy from AT&T?

By Ubergizmo. Related articles: DDoS Attackers Using iMessage With No Relief In Sight, Sony Xperia Walkman And Xperia Cybershot Rumored For Q3 Launch,

Dummy cursors keep your passwords safe from prying eyes

This is a system for preventing password theft, by mixing several dummy cursors in with the real cursor.
The software keyboards used in online banking are effective against key loggers, but by taking screen captures or looking over your shoulder, people would be able to work out your password.
With this system, only the user knows which cursor is the real one, so there’s no concern about people stealing passwords just by being able to see the screen.
“At first sight, it looks as if …

MyIDKey Puts All of Passwords at the Tip Of Your Finger, Literally.

It’s better to be safe than be sorry when it comes to choosing a password. The problem isn’t whether you can come up with a challenging enough password, though. Rather, it’s whether or not you’ll be able to remember it, given you probably already have a number of other accounts and passwords to remember, and the more complex the password becomes, the more difficult it becomes to recall. But now you don’t have to do it alone, because myIDkey can help you.

MyIDKey

myIDkey is a handy device that stores all your passwords and other sensitive account information, so you can access it whenever you need to. The cool thing is that it’s fitted with a biometric scanner, so the info can only be accessed after you press your thumb (or any other finger of your choice, actually) onto the scanner, preventing others from accessing your sensitive information – unless they manage to get their hands on your hands, that is. All of your data is encrypted with military grade AES256 encryption, and offers fail-safe automatic deletion after multiple failed attempts to access the data. Accessing your passwords is as easy as placing your finger on the sensor and speaking the password you need access to. It’s really quite brilliant.

The pocket-sized gadget doubles as a flash drive so you can use it to store and secure your files as well. myIDkey is currently up for funding on Kickstarter, where a minimum pledge of $99(USD) will get you a myIDkey of your very own. As it stands, the device will ship with 8GB of storage, but if the Kickstarter project exceeds its next stretch goal of $400,000, all of them will ship with 16GB.

myIDkey biometric password flash drive hits Kickstarter

myIDkey biometric password flash drive hits Kickstarter

Is it possible to remember all of one’s passwords without the aid of a biometric Bluetooth flash drive? Possible, sure, but it’s certainly getting harder and harder as the number of services we depend on continues to increase exponentially. Arkami has been floating its solution around for a bit, showing off its progress at CES and the like, and now the company is ready to get the public involved (or, the public’s money, rather) by way of a newly opened Kickstarter campaign for myIDkey. The thumb drive stores passwords across various services, letting you take ’em on the run. There’s a fingerprint scanner on-board, which unlocks the device, and a microphone, which lets you search for specific ones by voice. Plug the drive into your PC and it will autofill your passwords as needed, and if you’re unlucky enough to lose it, you can instantly deactivate its contents.

Peep the source link below to check out — and, perhaps, support — the company’s $150,000 campaign.

Filed under: ,

Comments

Source: Kickstarter

Twitter warns of a concerted hacking attempt, says 250,000 might be affected

Twitter warns of concerted hacking attempt, says 250,000 might be affected

Now would be a good time to refresh your Twitter password. The social network has revealed that there was at least one attack on its servers this week that may have collected email addresses, passwords (thankfully encrypted) and session tokens for about 250,000 users. The real risk to users is unknown, but Twitter raises our eyebrows when it suggests that this was more than just a casual scripting hack: it claims the intrusion attempt was “extremely sophisticated,” and that other firms might have been subject to a similar breach. You’ll know that you were immediately affected only if you see Twitter send a notice of a forced password reset, like what you see pictured above. We’d be cautious, all the same — when such attempts seemingly increase in frequency by the day, it’s not a bad idea to stay on guard.

Filed under:

Comments

Source: Twitter

LastPass password manager updated with Windows Phone 8 support, all-new UI

LastPass password manager updated with Windows Phone 8 support, allnew UI

LastPass, the password-managing service, announced that it’s added many features in a new version released today for its Windows Phone application. Most notably, LastPass now offers support for Windows Phone 8, while those running an older variant of Microsoft’s mobile OS can keep using the app as they have been since its early days on the platform. Other improvements and enhancements include a completely overhauled user interface, which should make it easier for users to navigate within the application, as well as easily find their most preferred sites by sorting alphabetically or adding them to the “Favorites” panel. The new version of LastPass is up for download now, so go and tap that source link if you’re looking to keep those (many) passwords of yours all tidied up in one place.

Filed under: , , ,

Comments

Via: WMPoweruser

Source: Windows Phone

California, Illinois Employers Cannot Request For Employee Facebook Passwords

fb password law California, Illinois Employers Cannot Request For Employee Facebook PasswordsI am not quite sure just how the law allows employers to know an employee’s Facebook password in the first place, but I am glad that the courts have ruled that employers in California and Illinois no longer have the authority or rule of power to request for Facebook passwords from their employees. This particular law took effect as the clock struck 12:01 am in both the states of California and Illinois. Basically, employers can no longer request for social networking passwords as well as non-public account information from current or potential employees, and that would mean your social network shenanigans are safe, at least for the time being.

Just for context, Michigan passed a similar law last month. Employees should bear in mind that employers are still able to view any public posts, tweets or photos on the social networks, so make sure you have all of your privacy settings set right unless you want to run into trouble with a wayward comment or an awkward photo.

By Ubergizmo. Related articles: Samsung Chromebox Gets A New Look, ASUS And Acer Bow Out Of Netbook Market,