Phones Replace Security Keys for Google 2FA

Google says IOS users can say goodbye to their Yubico security keys and use their iPhone as a physical 2FA key when logging into Google services in Chrome.  Google already let Android phones work as physical keys, so now everyone can take advantage of this functionality. Google Prompt already allowed users to complete out of bounds 2FA [...]

By |2020-01-15T21:17:05-08:00January 15th, 2020|Good Acting|Comments Off on Phones Replace Security Keys for Google 2FA

The Danger of Storing Authentication Credentials

Krebs On Security recently posted some details of the recover efforts of yet another company recovering from a devastating ransomeware attack.   @briankrebs points out that one of the under-appreciated vectors of these attacks is to deploy trojan software to steal passwords from all of the infected network endpoints. The result of this oversight may offer attackers [...]

By |2020-01-13T12:03:55-08:00January 13th, 2020|Bad Acting, Good Acting, Security Theater|Comments Off on The Danger of Storing Authentication Credentials