authenticity

Google password tips not strong enough

Google admonished its users to be more careful with passwords in a blog post on Thursday, but two security experts say that tech giant should spend more time pressuring developers and companies to do more to help their customers.

Google's tips encompass password basics: use a different password for each important service; make your password hard to guess; keep your password somewhere safe; and set a recovery option.

"For the general consumer, I think it's a fantastic start," said Alex Salazar, CEO of Stormpath, an authentication service for developers. But, he said, "everything they said … Read more

Two-factor authentication: What you need to know (FAQ)

Twitter announced Wednesday that it has started supporting two-factor authentication, joining a growing list of major Web services that offer the more secure log-in method.

Two-factor authentication, or 2FA as it's commonly abbreviated, adds an extra step to your basic log-in procedure. Without 2FA, you enter in your username and password, and then you're done. The password is your single factor of authentication. The second factor makes your account more secure, in theory.

"Twitter made the decision to use SMS [to deliver its second factor] because it makes sense from their position," said Jon Oberheide, chief … Read more

How to use Google Voice with two-step authentication

Setting up a two-step verification (or authentication, depending on the site) service is more or less an imperative when it comes to keeping your online information secure. Services such as Google, Facebook, Twitter, Apple, Dropbox and more have rolled out two-step verification in one form or another.

During the setup process for these services, you are required to provide a phone number where you'll have the option to receive a six-digit code that is required to grant you access to your account. But, as a recent Forbes article pointed out, phones get lost, which can in turn lock you … Read more

Twitter attempts to beef up security

CNET Update is in the 'hood:

In this episode of Update:

- Learn how to make your Twitter account more secure from hackers. (But if won't be this simple for brand accounts that are used by more than one employee.)

- Get ready for J-Lo to shake up the mobile scene with her mobile company Viva Movil, which has partnered with Verizon.

- Lose the paper clutter and save your receipts digitally with the updated Google Drive app on Android.

- Find a neighbor to lend you sugar with the new Nextdoor app for iPhone.

CNET Update delivers the … Read more

Kim Dotcom threatens to sue Twitter, others over patent

Kim Dotcom says he doesn't really want to sue Google, Facebook, Twitter, and other companies, but he really needs some help funding his defense.

The eclectic and controversial MegaUpload founder today said he invented two-factor authentication, which is being used by more and more companies to secure access to their sites. The verification steps aim to reduce the likelihood of online identity theft, phishing, and other scams because the victim's password would no longer be enough to give a thief access to their information.

Along with Twitter's recent introduction, Microsoft, Apple, Google, Facebook, PayPal, and countless other … Read more

How to enable Twitter's two-factor authentication

Going a week without a major brand having its Twitter account compromised was starting to become a rare occurrence. Critics and users alike repeatedly called upon Twitter to release two-factor (or step) authentication. The added layer of security requires you to enter your password, and then a subsequent six-digit access anytime you try to log into Twitter. The short code is sent via text message to your cell phone, which means that any would-be hackers would need to not only crack your password, but to also have physical possession of your cell phone.

Twitter, on Wednesday, finally rolled out its … Read more

Google security: You (still) are the weakest link

SAN FRANCISCO--Two of Google's top Chrome and Google Apps security experts confessed that the problem of passwords will continue to plague the people who use them and computer security for the foreseeable future.

On the second day of the company's I/O conference here on Thursday, Eran Feigenbaum, the director of security for Google Apps, suggested that people follow three recommendations to stay safer online.

"You should turn on two-step verification, make sure [the browser] is up to date, and make sure your password recovery options are set," the six-year veteran of Google said.

His colleague, … Read more

Twitter to roll out new password security control?

After the Associated Press' Twitter account was hacked into on Tuesday and the accounts of CBS News programs "60 Minutes" and "48 Hours" were hacked over the weekend, it's been made clear that Twitter needs to boost security. But, it may be doing just that.

According to Wired's Mat Honan, the social-networking site has reportedly been working on creating a two-factor authentication for user password verification. Honan writes that the company is currently carrying out internal testing before rolling out the new security control.

This isn't a huge surprise considering Twitter posted a job advertisementRead more

Google joins FIDO's crusade to replace passwords

A group of tech companies looking to replace passwords for online identity authentication gained a powerful ally Tuesday in the form of Google.

The consortium, called the Fast IDentity Online Alliance (FIDO), is working to develop standards-based alternatives for verifying a user's identity when trying to login to Web sites and online accounts. Formed in 2012, the group proposes specifications that will support a variety of authentication technologies, including biometrics such as fingerprint scanners and voice and facial recognition, as well as security tokens, near field communication, and one-time passwords.

The Web giant joins founding members Lenovo, PayPal, Nok … Read more

How to use two-step verification with your Microsoft account

Microsoft started rolling out its two-step verification process on April 17. Also known as two-factor authentication or two-step authentication, the process strengthens your account security by requiring you to enter your password (step 1), then a security code (step 2). The security code can be sent to you by e-mail, SMS, or phone call, or you can use an authenticator app on your mobile device.

Enabling two-step verification on your Microsoft account will enable it across all Microsoft services that currently support two-step verification, like Windows, Outlook.com, Office, and SkyDrive. If you're interested in trying it out, here'… Read more