Google joins the FIDO Alliance, supports its two-factor authentication standard

Google joins the FIDO Alliance, supports its two-factor authentication standard

Google’s already investing in two-factor authentication, but it’s making a bigger commitment to the security method by joining the FIDO (Fast IDentity Online) Alliance’s board of directors. Founded in-part by heavyweights Lenovo and PayPal, the group envisions a future where an open standard developed by it will lead to interoperable two-step security that can log users into sites and cloud apps across the web — not to mention replace passwords as we know them. While support for USB keys is certainly in the works, the group expects to throw its weight behind the likes of NFC, voice and facial recognition, fingerprint scanners and more. There’s no telling how soon FIDO’s efforts will bear fruit, but the search titan’s support ought to help move things along.

[Image credit: Marc Falardeau, Flickr]

Filed under:

Comments

Via: MIT Technology Review

Source: FIDO (PDF)

Report: Twitter Will Release Its Two-Step Verification Soon

Wired is reporting that Twitter has a two-step verification system currently undergoing internal testing that Twitter hopes to roll out to its users “shortly”. A two-step verification system would help prevent Twitter hacks from happening, like what happened today with the @AP. More »

Microsoft Will Finally Offer Two-Step Verification For Your Entire Account

Over the next few days Microsoft will begin rolling out an overhaul to accounts, which will include a crucial security upgrade: Two-step verification. This will go a long way to preventing hackers from getting into your account and causing all sorts of damage. So if you have a Microsoft Account, you should definitely set the feature up at https://account.live.com/proofs/Manage. More »

Brainwave Sensor Will Validate Log In Credentials Using Only Your Mind

Brainwave Sensor Will Validate Log In Credentials Using Only Your Mind

When you consider how easy it is for anyone to look over your shoulder while you’re typing in your password, as secure as you believe it to be, there will always be a way for people to figure it out of they really want to. But it looks like a future of typing in passwords may be a thing of the past thanks to a new project that is using “passthoughts.”

School of Information researchers used a consumer-based headset that had built-in electroencephalogram (EEG) and developed a way for users to authenticate their log in credentials by only using their brain waves. The EEG-equipped device they uses was a Neurosky Mindset, which at only costs $199. The low-cost of the headset are the key here as in the past, using an EEG-equipped headset would not only be more expensive, but they were also invasive. (more…)

By Ubergizmo. Related articles: Nomad Portable Espresso Machine Functions Without Electricity, The BikeSpike Is A Tracking Device That Will Help Owners Locate Stolen Bikes,

Why AT&T Won’t Let You Swear in Your Passwords

It’s your inalienable right, as a citizen of the internet, to curse and swear as creatively as possible at all times. That’s 80-percent of why anyone fires up a browser to begin with. Which is why AT&T’s move to ban naughty language in passwords created no small amount of ire. More »

How Apple’s Password-Reset Security Breach Worked

Yesterday, The Verge uncovered a security breach that allowed malicious users to reset Apple ID passwords with nothing but an email and the user’s birthday. Luckily, the process didn’t leak out in full before the whole thing was patched up, but now iMore was able to reproduce the hack step by step and now it’s sharing details on how the whole thing worked. More »

Report: Apple Passwords Can Be Reset With Just Email and Birthday

Have you turned on your Apple ID two-step verification yet? You’ll want to get on that. A report from The Verge indicates that if you haven’t, hackers can change your password with nothing more than your email address and your birthday. More »

A Swarm Of Dummy Cursors Hides Your Laptop Password When In Public

If you’re particularly paranoid about someone peeping your computer’s password while working in a public place, Japanese researchers have come up with a clever solution to the problem. Instead of using your laptop’s keyboard, you use an on-screen pin pad to type your password. But the cursor movement is completely obfuscated by a swarm of other randomly moving cursors. More »

Editorial: Countering ID theft requires better awareness campaigns

DNP Editorial Increasing identity theft requires better awareness campaigns

Evernote’s massive password reset last week was the most recent demonstration of leaky security around consumer locks and keys. Dropbox, LinkedIn, Twitter and others preceded the Evernote action. These anxiety-producing consumer annoyances occur over a backdrop of increased cyber-attack news. Chinese hackers are spotlighted in many recent disruptions, substantiated by Akamai’s report of originating-attack countries for Q3 2012, which shows China’s percentage of worldwide cyber exploits doubling from the previous quarter.

Precautionary password resets, as in the Evernote case, are minor aggravations. But the larger danger of password insecurity and increased cyber-malice is the swift domino effect that can lead to identity theft of the Mat Honan variety. Absolute personal cyber-security is probably a mirage. But there is not enough public education from industry that might reduce millions of easy targets.

Filed under: ,

Comments

Evernote: ‘All of Your Passwords Got Stolen So We’ll Hurry Up With That Better Security’

Evernote was forced to reset passwords for all its users over the weekend after noticing something fishy. Now, the company says it will adopt two-factor authentication to prevent further mishaps. Finally! More »