convenience
Google Had a Big Ol’ Hole In Its Two-Step Verification System
Source: http://gizmodo.com/5986830/google-had-a-big-ol-hole-in-its-two+step-verification-system
The coast is clear now, but for a while there, Google’s two-step verification system wasn’t keeping you as safe as you thought. In fact, it was providing an avenue for folks to get in. App-specific passwords were propping your door open.
The exploit was found—and reported—by Duo Security, which is publishing its data now that Google has fixed things up. If you’ve enabled two-step (which you should), you know that using applications like Twitter or Facebook or Instagram often involves an app-specific password. Apps that don’t just pass you to a Google login page and have you enter a phone-code will tell you to go get an app-specific password manually from your account page, and put that in.
The logic behind having app-specific passwords is that you can disable access from certain apps—like all the apps on a stolen phone—without disturbing the rest. And that’s great. The problem was, those manual app-specific passwords you put in weren’t actually app-specific. Anyone could re-use any of those passwords to link a Google device (Android phone, Chromebook) to a Google account. From there, hackers could login to services with the device, strolling right on in to account settings without ever knowing the real password.
As explained by Duo Security’s cleverly edited Google ad:
That’s not a good situation, but fortunately it’s been fixed. Ever since Feb 21st, anyone trying to get to account settings needs the real password. Convenience be damned. And even though this was a bit of a breach, it’s worth noting that two-step wasn’t making anything worse; in the absence of two-step, a thief with your app-specific password would just have had your real password instead. And they wouldn’t have to know about the connect-a-device exploit to use it. Way worse.
You’re safe for now, but it serves as a good reminder to keep up with those security best-practices. Clean out your app-specific passwords now and then, change your password occasionally, and beware auto-login features that make your life easier because chances are they’re making it more insecure. Nothing’s full-proof, but just try to stay safe out there. [Duo Security]
MBTA and Masabi team up for first smartphone rail ticketing system in the US, launching in Boston this fall
Source: http://www.engadget.com/2012/04/23/mbta-masabi-smartphone-ticketing/
In Boston this fall, you won’t need to keep up with your train ticket anymore — as long as you don’t leave your smartphone at home. The Massachusetts Bay Transportation Authority (MBTA) and Masabi have joined forces to bring a rail ticketing to handheld devices via iPhone, Android and BlackBerry apps. Headquartered in London, Masabi has launched similar tech for transit companies in the UK, eliminating ticket lines for many smartphone-wielding passengers. Software will allow riders to purchase tickets and passes that are validated with a barcode scan by conductors equipped with mobile devices of their own. MBTA is looking to cut costs and provide added convenience with the new system instead of adding more ticketing kiosks to its stations. The aforementioned apps will be developed alongside focus groups and a small pilot group this summer with a full rollout to all MBTA customers expected to happen this fall. Looking for a bit more info? Hit the coverage and source links below to read on.
[Image credit: Masabi on Flickr]
MBTA and Masabi team up for first smartphone rail ticketing system in the US, launching in Boston this ! fall originally appeared on Engadget on Mon, 23 Apr 2012 13:09:00 EDT. Please see our terms for use of feeds.
MBTA and Masabi team up for first smartphone rail ticketing system in the US, launching in Boston this fall
Source: http://www.engadget.com/2012/04/23/mbta-masabi-smartphone-ticketing/
In Boston this fall, you won’t need to keep up with your train ticket anymore — as long as you don’t leave your smartphone at home. The Massachusetts Bay Transportation Authority (MBTA) and Masabi have joined forces to bring a rail ticketing to handheld devices via iPhone, Android and BlackBerry apps. Headquartered in London, Masabi has launched similar tech for transit companies in the UK, eliminating ticket lines for many smartphone-wielding passengers. Software will allow riders to purchase tickets and passes that are validated with a barcode scan by conductors equipped with mobile devices of their own. MBTA is looking to cut costs and provide added convenience with the new system instead of adding more ticketing kiosks to its stations. The aforementioned apps will be developed alongside focus groups and a small pilot group this summer with a full rollout to all MBTA customers expected to happen this fall. Looking for a bit more info? Hit the coverage and source links below to read on.
[Image credit: Masabi on Flickr]
MBTA and Masabi team up for first smartphone rail ticketing system in the US, launching in Boston this ! fall originally appeared on Engadget on Mon, 23 Apr 2012 13:09:00 EDT. Please see our terms for use of feeds.
Western Union debuts WUPay digital platform, misses the point of convenience entirely
Source: http://www.engadget.com/2012/03/23/western-union-debuts-wupay-digital-platform-misses-the-point-of/
Modernization’s not for everyone — just take a look at Western Union. That 19th century institution’s finally getting its virtual act together, introducing a new digital payments platform today, dubbed WU Pay, that sadly does not involve laundering dough through the late, great ODB’s hip hop clan. No, this forward-facing system, built upon its eBillme acquisition, takes a backwards approach, eschewing direct payment options for something more circuitous. Customers that opt-in for the service at checkout from any number of partnered merchants, like Kmart or Sears, won’t have to link to their credit card accounts or even offer up any financial info. Instead, once the item is purchased, they’ll receive a bill via email that can then be paid online or at one of the company’s brick-and-mortar sites. Sound unnecessary to you? We sure agree. Now if only this innovation involved Marty McFly and Jason Alexander personally delivering those funds — that’s a service overhaul we can get behind. Check out the PR after the break.
Western Union debuts WUPay digital platform, misses the point of convenience entirely originally appeared on Engadget on Fri, 23 Mar 2012 05:53:00 EDT. Please see our terms for use ! of feeds .
If You Use Any Of These 25 Passwords On Your Computer You Better Change Them Now
Remember how all those lazy Subway managers caused millions of dollars to be stolen from customers?
A band of hackers was able to guess the passwords to their point-of-sale systems and went to town nabbing credit and debit card numbers from everyone who walked into the restaurants.
Don’t let that happen to you, people.
The Internet Crime Complaint Center just released 25 of the most commonly hacked passwords of 2011.
It boggles the mind to think people are still using these everyday words [e.g.: Monkey, football, 123456) to protect devices that hold all their financial data – especially in the workplace.
Raise your virtual hand if your employer assigns workers a single password to access company databases, content management systems or email accounts. (See 11 ways to protect yourself when shopping online.)
“Sharing passwords among users in a workplace is becoming a common theme to continue the flow of operations,” the ICCC says, but “users have prioritized convenience over security when establishing passwords.”
Here’s the full list of passwords to avoid:
- password
- 123456
- 12345678
- qwerty
- abc123
- monkey
- 1234567
- letmein
- trustno1
- dragon
- baseball
- 111111
- iloveyou
- master
- sunshine
- ashley
- bailey
- passw0rd
- shadow
- 123123
- 654321
- superman
- qazwsx
- michael
- football
Now see the dirty dozen internet scams to watch out for this holiday season >
Please follow Your Money on Twitter and Facebook.
Join the conversation about this story »
See Also:
- Eastern European Scammers Made Off With $4 Million In One Of The Shadiest Used Car Schemes Ever
- Can’t Afford A Dietitian? Here Are 2 Cheaper Alternatives
- TRUE CONFESSION: This Is My $600 New Year’s Eve Nightmare
—
drag2share – drag and drop RSS news items on your email contacts to share (click SEE DEMO)
If You Use Any Of These 25 Passwords On Your Computer You Better Change Them Now
Remember how all those lazy Subway managers caused millions of dollars to be stolen from customers?
A band of hackers was able to guess the passwords to their point-of-sale systems and went to town nabbing credit and debit card numbers from everyone who walked into the restaurants.
Don’t let that happen to you, people.
The Internet Crime Complaint Center just released 25 of the most commonly hacked passwords of 2011.
It boggles the mind to think people are still using these everyday words [e.g.: Monkey, football, 123456) to protect devices that hold all their financial data – especially in the workplace.
Raise your virtual hand if your employer assigns workers a single password to access company databases, content management systems or email accounts. (See 11 ways to protect yourself when shopping online.)
“Sharing passwords among users in a workplace is becoming a common theme to continue the flow of operations,” the ICCC says, but “users have prioritized convenience over security when establishing passwords.”
Here’s the full list of passwords to avoid:
- password
- 123456
- 12345678
- qwerty
- abc123
- monkey
- 1234567
- letmein
- trustno1
- dragon
- baseball
- 111111
- iloveyou
- master
- sunshine
- ashley
- bailey
- passw0rd
- shadow
- 123123
- 654321
- superman
- qazwsx
- michael
- football
Now see the dirty dozen internet scams to watch out for this holiday season >
Please follow Your Money on Twitter and Facebook.
Join the conversation about this story »
See Also:
- Eastern European Scammers Made Off With $4 Million In One Of The Shadiest Used Car Schemes Ever
- Can’t Afford A Dietitian? Here Are 2 Cheaper Alternatives
- TRUE CONFESSION: This Is My $600 New Year’s Eve Nightmare
—
drag2share – drag and drop RSS news items on your email contacts to share (click SEE DEMO)
Google Places’ camera exposed in the convenience store wilds
Source: http://www.engadget.com/2010/06/24/google-places-camera-exposed-in-the-convenience-store-wilds/
Google Places’ camera exposed in the convenience store wilds originally appeared on Engadget on Thu, 24 Jun 2010 07:41:00 EDT. Please see our terms for use of feeds.
Permalink |
JankHank | Email this | Comments
Digital Consigliere
Tags
Popular Posts
- Netflix vs Blockbuster - Perfect example of an industry replaced by a more efficient version of itself
- Coke vs Pepsi vs Dr Pepper
- Marketing Costs Normalized to CPM Basis for Comparison
- 3G calling, no registration, and totally free
- The Top Endorsement Earners In Each Sport
- AOL's Plan To Steal TV Ad Dollars Is Totally Working
- Groupon launches Breadcrumb iPad app, vows to not be a typical POS
- Flash Sale Sites Have A Social Media Problem
- HP Mini 311 Nvidia ION Netbook Hackintosh'ed
Published Articles by Dr. Augustine Fou
- #SESNY: Toward a Performance Mindset for All Advertising
- Tips for Marketers Selecting a Digital Agency
- Context Is Not King or Queen; It's Just Necessary
- 2013 New Year's Digital Marketing Resolutions
- The Good, Bad, and Ugly of Online Campaign Ratings and eGRPs
- Why You Should Banish the Net Promoter Score Immediately
- Digital Strategy To-MAY-to vs. To-MAH-to
- The Agency-Client Relationship is Forever Changed
- Targeting vs. Privacy - Who Will Win?
- Digital + Traditional = Unified Marketing
Pages
Archives
- May 2013 (56)
- April 2013 (70)
- March 2013 (114)
- February 2013 (89)
- January 2013 (136)
- December 2012 (96)
- November 2012 (130)
- October 2012 (147)
- September 2012 (94)
- August 2012 (92)
- July 2012 (112)
- June 2012 (71)
- May 2012 (82)
- April 2012 (80)
- March 2012 (122)
- February 2012 (114)
- January 2012 (129)
- December 2011 (60)
- November 2011 (54)
- October 2011 (29)
- September 2011 (17)
- August 2011 (30)
- July 2011 (18)
- June 2011 (19)
- May 2011 (23)
- April 2011 (23)
- March 2011 (52)
- February 2011 (69)
- January 2011 (108)
- December 2010 (82)
- November 2010 (67)
- October 2010 (68)
- September 2010 (44)
- August 2010 (101)
- July 2010 (61)
- June 2010 (28)
- May 2010 (28)
- April 2010 (26)
- March 2010 (33)
- February 2010 (21)
- January 2010 (12)
- December 2009 (4)
- November 2009 (2)
- October 2009 (14)
- September 2009 (6)
- August 2009 (19)
- July 2009 (34)
- June 2009 (11)
- May 2009 (4)
- April 2009 (6)
- March 2009 (13)
- February 2009 (32)
- January 2009 (25)
- December 2008 (1)
- October 2008 (1)
- June 2008 (1)
- November 2007 (1)
Prototype Web Services
- drag2share – quickly share news items by drag and drop on email addresses
- LivePhotoFrame – upload and remotely manage a digital photo frame via unique URL
- MedleyTuner – create a continuous listening experience by uploading mp3s
- MusicSamplr – discover new artists and music, listen to samples
- SharedMost – what links on ANY webpage are shared most?
- Signatory – sign and date a document and verify it hasn't been altered since that exact time.
- WebTeleprompter – just what it says it is





The Safari 5 feature that’s caught the web’s attention is the Reader button, which strips down articles and blog posts into an ad-free, highly readable format. Two add-ons for Firefox and Chrome do a good job of recreating that convenience.
If you missed our 



