Authentication is frequently confused with Access and Identity Management. These concepts are often used interchangeably because most existing authentication schemes were designed with the hierarchical, paternalistic mindset of traditional senior [...]
USA Today featured an excellent piece on underscoring the absurdity of our current acceptance of dense legal Terms of Service and Privacy Policies. @Jguynn succinctly summarize the status quo, “I have [...]
Companies wanting to improve user security have frequently turned to 2nd Factor Authentication. Authentication is commonly viewed as confirming one of 5 factors; 2nd factor authentication simply means relying on [...]
ZDNet broke a story today about the largest list of username/passwords for servers, home routers and IOT devices, ever published. Technically this dump is not people who signed up to [...]
Google says IOS users can say goodbye to their Yubico security keys and use their iPhone as a physical 2FA key when logging into Google services in Chrome. Google already [...]
Krebs On Security recently posted some details of the recover efforts of yet another company recovering from a devastating ransomeware attack. @briankrebs points out that one of the under-appreciated [...]
Princeton University Department of Computer Science and Center for Information Technology Policy just released a draft report entitled An Empirical Study of Wireless Carrier Authentication for SIM Swaps which examines the [...]
Here is some really great advice that almost no one will follow. The FBI warns users to keep IoT Devices on a separate WiFi Network. Isolating IoT devices on [...]
