login
Latest
Google will default to phone notifications for two-factor sign-ins
Google will default to phone verification prompts for two-factor sign-ins instead of less secure SMS codes.
Nintendo says 140,000 more NNID accounts were vulnerable
Nintendo's NNID breach was bigger than originally reported.
'Sign in with Apple' flaw let attackers take over accounts
A recently fixed 'Sign in with Apple' bug would have let intruders take control of accounts.
App maker claims 'Sign in with Apple' copies anonymous email feature
Sign in with Apple's ability to shield your real email address may sound clever, but one app developer claims it's just riffing on their technology. Blue Mail creator Blix has sued Apple for allegedly violating a 2017 patent on the "Share Email" feature in its app. The company claims that Apple's generation of a unique email address for sign-ins copies Blue Mail's ability to share a public email address for messaging while hiding your actual address.
Apple tests iCloud.com sign-ins with your face or finger
The iCloud website is handy when you want to check info from an unfamiliar device or just prefer to use a browser, but the need to enter your password could be enough of a pain that you might just pull out your phone instead. Soon, though, it could be relatively effortless. The company is testing a beta iCloud site that uses Face ID or Touch ID to sign you in. You'll need a beta version of iOS 13, iPadOS or macOS Catalina, but after that it's just a matter of using your face or finger to sign in with compatible Apple gear.
Your Android phone can sign you into Google on iOS devices
Who said that Apple- and Google-powered devices can't work in harmony? Not Google. It's taking advantage of its recently added security key functionality to use your Android phone as verification for Google sign-ins on iOS devices. If you have Google's Smart Lock app installed on your iPad or iPhone and have 2-Step Verification enabled on your account, you can hold the volume down button on your Android hardware (when prompted) to greenlight the login on the other platform.
Experts weigh in on Apple's private sign-in feature
Apple's WWDC 2019 was full of announcements, but few of them garnered as big a cheer from the crowd as when Sign in with Apple was introduced. The feature, which lets people use their Apple IDs to sign up for sites and services on the web, is being touted as a privacy-oriented alternative to Login with Facebook and Sign in with Google. "We've all seen buttons like this, asking us to use a social account login to get a more personalized experience with an app, and these logins can be used to track you," Craig Federighi, Apple's senior vice president of software engineering, said on Monday during the keynote. "We wanted to solve this, and many developers do too, and so now we have the solution."
Windows 10 update pushes Microsoft closer to a password-free future
With its Windows 10 May 2019 update, Microsoft is getting one step closer to eliminating passwords. The company's Windows Hello has earned its FIDO2 certification -- an industry standard that deems Windows Hello a secure authenticator. Now, users running Windows 10 version 1903 will be able to login to devices, apps and online services using biometrics or PINs, rather than passwords.
The web just got an official password-free login standard
Web Authentication (aka WebAuthn) has been a de facto standard for no-password web sign-ins for a while given that many tech giants are already using it, but now it's official. The World Wide Web Consortium and the FIDO Alliance have finalized the Web Authentication format, making it the go-to option for logging into accounts with potentially greater security and convenience than typing in your credentials. If a site supports it, you can get in using biometrics (such as fingerprints or facial recognition), USB security keys, or nearby mobile devices like phones and smartwatches.
You can sign into your Microsoft account without a password
Now that the Windows 10 October update (aka 1809) is back, Microsoft is taking advantage of it to continue its fight against passwords. You now have the option of signing into your personal Microsoft account using the Edge browser and either Windows Hello or a FIDO2-based security device like Yubico's YubiKey 5. You won't have to remember your password every time you want to check mail in Outlook or buy a game for your Xbox.
Tinder security flaw granted account access with just a phone number
Security researchers at Appsecure found a way to access anyone's Tinder account via their phone number. The exploit took advantage of a software flaw in both the dating app's login process as well as the Facebook API that it's based on. The issues have been fixed since, but represent a pretty big security lapse.
Hulu locks out users with login problems two nights in a row
On Tuesday night many Hulu users were unable to stream video or live TV because they couldn't log in, which was bad enough. Unfortunately, Hulu suffered another outage tonight, going down again for a few hours during prime time ET viewing. Within the last hour, its support Twitter account reported that a "fix is in place" to address the login problem, but it may come a little late for users heading to bed. We've contacted the service to find out what's happening and will update this post if there's more information.
UK watchdog has to remind MPs not to share their passwords
With the number of computer-based attacks steadily rising in the UK, Britons have been warned over and over again to use strong passwords, to ensure they're not recycled and to never disclose them to a third party. So when three Conservative MPs came out over the weekend admitting to sharing their credentials with interns and other members of staff, it's easy to see why the UK's data watchdog is none too pleased.
Researchers can use the size of your heart to unlock a PC
Most biometric security has one inconvenience: you have to take an active step to sign in, whether it's putting your finger on a pad or staring at sensors. Wouldn't it be nice if simply being near your device was enough? It might happen. Researchers have created a computer authentication system that uses your heart's shape and size to sign in. It uses low-level Doppler radar to continuously scan your heart's dimensions, granting access so long as you're in the right place. In other words, Cindy-Lou Who couldn't hijack the Grinch's PC when he steps away for a coffee break.
Microsoft updates Beam streaming to better compete with Twitch
Microsoft is getting its newly-acquired Beam livestreaming service ready for Xbox and Windows with a big new update rolling out today in beta. Beam's low-latency tech lets you rapidly interact with your favorite streamers, and even play along, compared to the more passive Twitch experience. It's improved the already-quick latency by five times, increased the max bitrate to 10 Mbps and now supports 60 FPS render speeds at up to 2,560 x 1,440 resolution.
You don't need to sign in to use Skype anymore
Unless you have Skype configured to boot-up when you start your computer, starting the program, logging in and connecting to a call can be mildly tedious. It's not anymore -- Microsoft just announced a new 'Guest' mode for Skype that makes user accounts almost completely optional. Now if you want to join a Skype call, all you have to do is click a link and enter your name.
OS X update could use the iPhone's Touch ID to unlock Macs
As we approach Apple's annual WWDC conference that starts on June 13th, the rumors about upcoming iOS and OS X features are sure to ramp up. This week, MacRumors is reporting that the company is working on a way for you to unlock a Mac using your iPhone's Touch ID feature. The security measure is said to bypass a typed log-in using Bluetooth when the phone is "in close proximity" to a computer running OS X. As MacRumors notes, there's a similar feature on the Apple Watch that allows an unlocked iPhone to provide access to the wearable without the need to enter a second password.
Facebook's Account Kit signs you in with a phone number
Twitter isn't the only big social network that wants you to ditch the password. Facebook is using its F8 conference to unveil Account Kit, a framework that lets you sign into apps using a phone number or email address. You won't need a Facebook account just to get into that music store or messaging service; you just have to acknowledge a confirmation message (either by email or SMS) to get your foot in the door. The feature is useful worldwide, but it's particularly crucial in developing regions, where having a Facebook account is far from guaranteed.
Instagram confirms multiple account support is coming this week
The ability to post from multiple accounts inside the Instagram app is a feature users have begged the company to add for quite some time. After making an appearance in both the Android and iOS apps, the tool will go live this week. In addition to making things official today, Instagram says you'll soon be able to add up to five accounts to the app. Of course, this means that you can toggle back and forth without having to log out and log back in each time you want to switch. What's more, you'll be able to receive notifications from each, so long as you have them turned on. It's about freakin' time.
Instagram multiple account support available to some iOS users
If you've been clamoring for multiple account support in the Instagram app, you might soon be in luck. Some iPhone users, including our own Mat Smith, are seeing the feature pop up on iOS. If you'll recall, the ability to sign in to multiple accounts and toggle back and forth when posting made an appearance back in November on the Instagram Android app.
