Disabling this Facebook phone number setting is not an option

TwitterFacebook

Facebook is in hot water once again for how it is using the phone number users may have only provided to Facebook for security reasons. 

On Twitter on Friday, Jeremy Burge, the editor of Emojipedia, called out Facebook for its phone number lookup settings. Burge found that there is no way to entirely opt out of this setting, which governs the ability of other users to find your Facebook profile by entering your phone number in search. The best you can do is limit who can do this to “Friends.” 

What’s potentially most concerning is that some people may have only given Facebook their phone numbers to enable Two-Factor Authentication (2FA). That is, they gave their phone number to Facebook for security, and Facebook continues to prove that it’s using that number for much more. Read more…

More about Facebook, Two Factor Authentication, 2fa, Tech, and Social Media Companies

View More Disabling this Facebook phone number setting is not an option

Cisco’s $2.35 billion Duo acquisition front and center at earnings call

When Cisco bought Ann Arbor, Michigan security company, Duo for a whopping $2.35 billion earlier this month, it showed the growing value of security and security startups in the view of traditional tech companies like Cisco. In yesterday’s earnings report, even before the ink had dried on the Duo acquisition contract, Cisco was reporting that its […]

View More Cisco’s $2.35 billion Duo acquisition front and center at earnings call

Reddit breach exposes non-critical user data

Reddit announced today that it suffered a security breach in June that exposed some of its internal systems to the attackers, although what was accessed was not particularly sensitive. Notably the hack was accomplished by circumventing the two-factor authentication Reddit had in place via SMS interception — which should be a wake-up call to any who haven’t moved on from that method.

View More Reddit breach exposes non-critical user data

Google takes on Yubico and builds its own hardware security keys

Google today announced it is launching its own hardware security keys for two-factor authentication. These so-called Titan Security Keys will go up against similar keys from companies like Yubico, which Google has long championed as the de facto standard for hardware-based two-factor authentication for Gmail and other services. The FIDO-compatible Titan keys will come in […]

View More Google takes on Yubico and builds its own hardware security keys

Instagram is building non-SMS 2-factor auth to thwart SIM hackers

Hackers can steal your phone number by reassigning it to a different SIM card, use it to reset your passwords, steal your Instagram and other accounts, and sell them for Bitcoin. As detailed in a harrowing Motherboard article today, Instagram accounts are especially vulnerable because the app only offers two-factor authentication through SMS that delivers […]

View More Instagram is building non-SMS 2-factor auth to thwart SIM hackers

Review: 2-factor authentication on iPhone gets dirt-simple with this keyfob

TwitterFacebook
YubiKey NEO
$50
The Good

Provides instantaneous 2-factor auth without silly codes • Ultra portable design doesn’t weigh you down • Built to last

The Bad

Pricey for what it does • Doesn’t work with Twitter and other big sites

The Bottom Line

The YubiKey NEO simplifies two-factor authentication, even on the iPhone. But not all services support it, and the NFC capability is limited.

Mashable Score3.0
Cool Factor2.0
Learning Curve4.0
Performance3.0
Bang for the Buck3.0

Privacy and protecting data has certainly moved up in importance on a global scale over the past few months. Read more…

More about Privacy, Security, Two Factor Authentication, Nfc, and Tech

View More Review: 2-factor authentication on iPhone gets dirt-simple with this keyfob

Facebook finally stops screwing around with two-factor authentication

TwitterFacebook

Take a deep breath. Facebook just did something good.

The company announced in a May 23 blog post that it would no longer require a phone number to set up two-factor authentication, and would instead allow for the use of an authenticator app. Such apps, like Google Authenticator, are widely acknowledged to be an improvement over SMS-based 2FA.

For those unfamiliar, two-factor authentication provides a second layer of security to online accounts. In addition to the standard password, you need a second factor — usually a number texted to your cellphone or generated by an authenticator app —to login. For those who worry about phishing attempts or any kind of hacking (which should be everyone on the internet), setting up 2FA is a must.  Read more…

More about Facebook, Two Factor Authentication, 2fa, Tech, and Social Media Companies

View More Facebook finally stops screwing around with two-factor authentication

Yubico launches an SDK that lets iOS devs add support for its NFC keys

Yubico, the company behind the increasingly popular YubiKey security keys, today announced the launch of a new SDK for iOS developers that allows them to add support for two-factor authentication over NFC with the company’s YubiKey NEO keys. With this, the company now offers solutions for all the major platforms. The first company to support […]

View More Yubico launches an SDK that lets iOS devs add support for its NFC keys