Collaborate Disseminate
Google and Mozilla are tidying up security features and patching vulnerabilities in Chrome and Firefox for Mac, Windows, and Linux. Continue reading Update now! Chrome and Firefox patch security flaws
Naked Security attempts to demystify passwordless web authentication. Continue reading The passwordless web explained
Troy Hunt sounds off on how both consumers and services have a joint role in creating and enforcing strong passwords. Continue reading Podcast: Troy Hunt Talks Bad Passwords – and Who’s to Blame for Them
“Password-killing” authentication efforts may be on a road to nowhere. Continue reading Passwords: Here to Stay, Despite Smart Alternatives?
So I will start with saying, I’m not good at all with certificates, I got this .pem file that I’m going to upload to a WLC for Webauth, since the old one is from GeoTrust.
At first the .pem didn’t have a password, so I got t… Continue reading Error Installing Certificate – Cisco WLC – Password protected PEM
Windows 10 and Office 365 users can now log in to Azure AD applications using only the Authenticator App. Continue reading Microsoft is killing passwords one announcement at a time
At the Google I/O ’18 a demo was shown in which a user authenticates at PayPal by just providing a fingerprint (see YouTube 24:40). This was done in a browser running on a Smartphone which has a fingerprint sensor and require… Continue reading Automatic authentication in desktop browser with WebAuthn [migrated]
Microsoft’s Edge browser has finally joined Mozilla Firefox and Google’s Chrome in supporting a working version of the emerging WebAuthn. Continue reading Microsoft Edge adds WebAuthn as passwords near the end
Phishing attackers have failed to compromise a single employee account at Google since the company mandated authentication using U2F hardware tokens in early 2017. That’s the remarkable claim made to security writer Brian Krebs. Continue reading Google hasn’t suffered an employee phishing compromise in over a year
Google has not had any of its 85,000+ employees successfully phished on their work-related accounts since early 2017, when it began requiring all employees to use physical Security Keys in place of passwords and one-time codes, the company told KrebsOnSecurity. Continue reading Google: Security Keys Neutralized Employee Phishing