Gmail's Shift from SMS to QR Codes: A Game Changer for Two-Factor Authentication

As cyber threats evolve, Google is taking a bold step by replacing SMS-based two-factor authentication with QR codes for Gmail users. This innovative approach not only enhances security but also addre...

https://news.lavx.hu/article/gmail-s-shift-from-sms-to-qr-codes-a-game-changer-for-two-factor-authentication

Google has announced that Gmail will phase out SMS-based two-factor authentication (2FA) in favor of more secure methods. This change aims to enhance user security by reducing vulnerabilities associated with SMS codes, which can be intercepted. Users are encouraged to adopt alternatives like Google Authenticator or security keys for better protection.

Enhancing Linux Security: A Step-by-Step Guide to Setting Up 2FA

As cyber threats evolve, securing your Linux desktop becomes paramount. Implementing two-factor authentication (2FA) is a straightforward yet effective method to bolster your system's defenses against...

https://news.lavx.hu/article/enhancing-linux-security-a-step-by-step-guide-to-setting-up-2fa

I’ve Avoided Owning a Cell Phone Until Today. This is What it Was Like

I've been experimenting my entire life to see what it's like to not own a cell phone and see how difficult it is to do.

https://www.freezenet.ca/ive-avoided-owning-a-cell-phone-until-today-this-is-what-it-was-like/

Friends please always use strong #passwords generated & managed by a reliable #passwordmanager. Use them on your accounts AND #network devices. Even your #WiFi #AccessPoints. Your spouse & kids can remember? They should be using the same password manager if yours supports sharing. Most #smartphones and #comupters now can share through a #qrcode. There just is no excuse anymore. Use #twofactorauthentication whenever you can. The #threat has never been greater.

#security

https://www.bleepingcomputer.com/news/security/massive-brute-force-attack-uses-28-million-ips-to-target-vpn-devices/

Microsoft's New Sign-In Policy: A Double-Edged Sword for Security

In a significant shift, Microsoft is altering its sign-in process, which could expose users to greater security risks. Starting February 2025, the company will automatically keep users signed in unles...

https://news.lavx.hu/article/microsoft-s-new-sign-in-policy-a-double-edged-sword-for-security

I believe it's time to modify Laravel's Authentication flow for a two-step scenario.

It's very difficult to make 2FA unless you deal with a middleware that checks 2FA on EVERY REQUEST, instead of just at the login flow.

Singapore's banks to ditch texted one-time passwords

https://www.theregister.com/2024/07/12/singapore_banks_fight_phishing/

When will the #Philippines do the same, huh? SMS-based OTP is the WEAKEST #TwoFactorAuthentication #2FA.

Yuhoo #BPI #BDO

Bangko Sentral ng Pilipinas, you should make this your priority!

I'll never understand why #banks in the #Philippines, as well as #FinTech (*cough*tech*cough*) companies, love to use the weakest(!!) and most expensive(!) #TwoFactorAuthentication: #SMS / Text.

It's mid-2024 already. /facepalm

Why is a very important #security feature, #TwoFactorAuthentication, a premium, #DeviantArt?

Your users have to pay to get a basic #cybersecurity feature like #2FA?

Services which still blocks your account for supposedly “suspicious activity”, even though you have #TwoFactorAuthentication, is like saying “we don't trust our own #2FA system” and/or “we don't trust you, we think you shared your 2FA secret with someone”.

I don't know. If it is the latter, that's user-error and their problem. If we continue solving user-error issues, the end-user will never learn anything.

Is 2FA perfect? Of course not. But it is far less likely for an account to be compromised if 2FA is enabled (without user-error).

So, accounts with 2FA should not be included in the “we temporarily blocked your account because of suspicious activity”. If there was indeed a legitimate unauthorised account access, due to user-error, let the user deal with it and learn from it. Otherwise, what's the use of 2FA?

In the gaming industry, some companies actually do that. If your account has 2FA enabled, they automatically remove your account from IP address checks. This allows the account owner to freely use VPNs without getting banned because of IP jumps. They don't mention it officially, but you can test it. If you disable 2FA and use VPNs, you'll get banned sooner or later (and have to go through a lengthy verification process). If you have 2FA enabled, you're free to use VPNs all you want.

(We're not talking about [gaming] services where they have regional licensing deals. They will indeed ban your account if you use a VPN because it is a restriction due to the regional licensing deals in place.)

I dunno, just #RandomThoughts. It's a hassle to suddenly see you're temporarily blocked even though you have 2FA enabled anyway. (Some services will even disable your 2FA because they assumed you shared your 2FA secret.)

Sure, there are people who keep a copy of their 2FA secret in unsecure ways. That still falls under user-error. 2FA secrets should not be kept, at least that's how it was designed. If a user wants to keep it, then encrypt it and store it somewhere. For example, use #Cryptomator.

^_^

My #GuildWars2 #TwoFactorAuthentication was mysteriously removed. I have to set it up again today. No one has access to it, and I'm the only one with access to the PC I'm using for #GW2.

Be sure to check your account. Something is not right.

@guildwars2@a.gup.pe @guildwars@a.gup.pe @gaming@a.gup.pe @gaming@beehaw.org

It's clear all browser cache, cookies, and data day!

=))

Relogging to services is a pain because:
1. I use different passwords (so I don't remember them). (If you don't remember them, the better.)

2. I use different email addresses.

3. I have #TwoFactorAuthentication enabled.

It's fine, I'd rather experience these hassles than lessen my #security precautions.

How about you? How are you handling the security of your online accounts?

Headed by #Instagram, who terminates your creator account because of their faulty system. Imagine, you have #TwoFactorAuthentication, but they will ask you for a selfie verification 3 times. With no consideration (selfie) for #autistics #Neurodivergents.

https://futurism.com/the-byte/facebook-working-twitter-clone