kryptering | Bjarteblogg

Free VPN App Investigation

https://www.top10vpn.com/free-vpn-app-investigation/

Over half of the most popular free VPN apps are run by secretive companies with hidden Chinese ownership. Very few do enough to earn the trust of the privacy-conscious.

Facebook won’t let you opt out of its phone number ‘look up’ setting - TechCrunch

https://techcrunch.com/2019/03/03/facebook-phone-number-look-up/

Users are complaining that the phone number Facebook hassled them to use to secure their account with two-factor authentication has also been associated with their user profile — which anyone can use to “look up” their profile.
Worse, Facebook doesn’t give you an option to opt-out.

W3C approves WebAuthn as the web standard for password-free logins

https://venturebeat.com/2019/03/04/w3c-approves-webauthn-as-the-web-standard-for-password-free-logins/

The specification lets users log into online accounts using biometrics, mobile devices, and/or FIDO security keys.

Facebook Allows Users to Look Up Others With Their Two-Factor Authentication Phone Number, With No Opt-Out — Pixel Envy

https://pxlnv.com/linklog/facebook-lookups-by-two-factor-authentication-numbers/

Automated phishing attack tool bypasses 2FA protection

https://www.grahamcluley.com/automated-phishing-attack-tool-bypasses-2fa-protection/

but don’t let Modlishka make you give up on 2FA just yet…

Fortnite security issue would have granted hackers access to accounts - ZDNet

https://www.zdnet.com/article/fortnite-security-issue-would-have-granted-hackers-access-to-accounts/

Check Point recommends that Fortnite players enable two-factor authentication (2FA) for their accounts.

Australia passes sweeping anti-encryption bill giving police power to implant malware and insert backdoors, despite opposition from experts, tech companies - TechCrunch

https://techcrunch.com/2018/12/05/australia-rushes-its-dangerous-anti-encryption-bill-into-parliament/

Major SMS security lapse is a reminder to use authenticator apps instead - The Verge

https://www.theverge.com/2018/11/16/18098286/vovox-security-breach-two-factor-authentication-2fa-codes-exposed

anyone could have monitored a near-real-time data stream to find the relevant two-factor authentication code sent after trying to log into someone else’s account.

Introducing 1Password for Democracy

https://blog.1password.com/introducing-1password-for-democracy/

Whether you’re running for office, ensuring elections run fairly, or protecting people’s rights, we’d like to offer you a completely free 1Password account to thank you for the essential work you do for society.

Reddit Breach Highlights Limits of SMS-Based Authentication — Krebs on Security

https://krebsonsecurity.com/2018/08/reddit-breach-highlights-limits-of-sms-based-authentication/

Of particular note is that although the Reddit employee accounts tied to the breach were protected by SMS-based two-factor authentication, the intruder(s) managed to intercept that second factor.

Data Breaches Keep Happening. So Why Don’t You Do Something? - The New York Times

https://www.nytimes.com/2018/08/01/technology/data-breaches.html

Don’t reuse passwords, rely on two-factor verification, install software only from trusted sources, question any alert that pops up on your screen and get a password manager.