Pawb.Social Reports @transparency

0 posts0 participants0 posts today

Open TechGoogle has announced that Gmail will phase out SMS-based two-factor authentication (2FA) in favor of more secure methods. This change aims to enhance user security by reducing vulnerabilities associated with SMS codes, which can be intercepted. Users are encouraged to adopt alternatives like Google Authenticator or security keys for better protection. <a href="https://mastodon.social/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a> <a href="https://mastodon.social/tags/Gmail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gmail</a> <a href="https://mastodon.social/tags/TwoFactorAuthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TwoFactorAuthentication</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/DataProtection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataProtection</a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechNews</a>

Serious MimaWhy does <a href="https://sk.gensokyo.shop/tags/Sharkey" rel="nofollow noopener noreferrer" target="_blank">#Sharkey</a> / <a href="https://sk.gensokyo.shop/tags/Misskey" rel="nofollow noopener noreferrer" target="_blank">#Misskey</a> need an "authenticator app" registered before you can use a hardware key? That doesn't make sense <a href="https://sk.gensokyo.shop/tags/security" rel="nofollow noopener noreferrer" target="_blank">#security</a> wise. Yeah I know it's to prevent people from just accidentally getting locked out of their accounts, but there should be an option for <a href="https://sk.gensokyo.shop/tags/FediAdmins" rel="nofollow noopener noreferrer" target="_blank">#FediAdmins</a> to allow this risk. 🤔 <a href="https://sk.gensokyo.shop/tags/2FA" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://sk.gensokyo.shop/tags/yubikey" rel="nofollow noopener noreferrer" target="_blank">#yubikey</a> <a href="https://sk.gensokyo.shop/tags/hardwarekey" rel="nofollow noopener noreferrer" target="_blank">#hardwarekey</a> <a href="https://sk.gensokyo.shop/tags/cybersecurity" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://sk.gensokyo.shop/tags/twofactor" rel="nofollow noopener noreferrer" target="_blank">#twofactor</a> <a href="https://sk.gensokyo.shop/tags/twofactorauth" rel="nofollow noopener noreferrer" target="_blank">#twofactorauth</a> <a href="https://sk.gensokyo.shop/tags/twofactorauthentication" rel="nofollow noopener noreferrer" target="_blank">#twofactorauthentication</a>

Mark A. ⏏️ {FalconMarkSix}I don't think I've ever seen this before. Good job sending these Mastodon! :ablobfoxbongo:BTW it was me, I entered the wrong code. :blobfoxlaughsweat:<a href="https://tech.lgbt/tags/TwoFactorAuthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TwoFactorAuthentication</a> <a href="https://tech.lgbt/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://tech.lgbt/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://tech.lgbt/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://tech.lgbt/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>

spinlock :nonbinary_flag:I love the SoloKey V2 limited edition with the purple glitter!<a href="https://chaos.social/tags/SoloKey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoloKey</a> <a href="https://chaos.social/tags/SoloKeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoloKeys</a> <a href="https://chaos.social/tags/SoloKeyV2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoloKeyV2</a> <a href="https://chaos.social/tags/glitter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#glitter</a> <a href="https://chaos.social/tags/resin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#resin</a> <a href="https://chaos.social/tags/fido" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido</a> <a href="https://chaos.social/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fido2</a> <a href="https://chaos.social/tags/WebAuthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebAuthn</a> <a href="https://chaos.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://chaos.social/tags/TwoFactorAuthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TwoFactorAuthentication</a> <a href="https://chaos.social/tags/GiveMeAllTheHashtags" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GiveMeAllTheHashtags</a> <a href="https://mas.to/@solokeys" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@solokeys</a>

Gaute Holmin ⚡Finally <a href="https://social.vivaldi.net/@Vivaldi" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Vivaldi</a> has enabled <a href="https://social.vivaldi.net/tags/TwoFactorAuthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TwoFactorAuthentication</a>, and as usual they have done so in the best possible way:- A good explanation - User friendly -Encouraging multiple verification methods.Way to go 👍

Yohan Yukiya Sese Cuneta 사요한🦣I hate <a href="https://c.im/tags/Instagram" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Instagram</a>, their developers, and their agents.(status: trying to prevent a meltdown)Context and details. 1. I seldom (rarely even) use my Instagram account. I log in when I have something to share. I don't even go on a 'liking' spree, and I only leave comments when there's something to say.2. I don't even follow accounts here and there. I only followed accounts that I'm a fan of, or I am interested with their content.3. I have <a href="https://c.im/tags/TwoFactorAuthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TwoFactorAuthentication</a>4. I have a postpaid mobile number attached5. My email, using my own domain name, is the one attached to it6. I provided my real name in the account section, just exactly for verification purposes if needed (if they ask for an ID or something).7. I did not upload any “re-upload”/“re-share” content.See my <a href="https://c.im/tags/Pixelfed" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pixelfed</a> account: <a href="https://pixelfed.social/i/web/profile/350686112577015419" rel="nofollow noopener noreferrer" target="_blank">https://pixelfed.social/i/web/profile/350686112577015419</a> That's practically the same content as I have in my Instagram account.YET, they started to ask me for <a href="https://c.im/tags/selfie" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfie</a> <a href="https://c.im/tags/verification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#verification</a> since February 2023.I complied.* The first selfie verification, they approved it. But did not inform me, no email whatsoever.* The second selfie verification, they approved it and sent an email apologising that it was a mistake. (See attached screenshots.)* The third time, the current one, was last week. They did not approve it. No email whatsoever. I can no longer login to my account.I complied with their selfie verifications even though I am very uncomfortable with it. I am <a href="https://c.im/tags/Autistic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Autistic</a>, and I hate these types of verifications (selfie, video), but I complied.And this is what I get in the end?What is the use of <a href="https://c.im/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> if they are not going to use it?I can not help but conclude that <a href="https://c.im/tags/Meta" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Meta</a> and <a href="https://c.im/tags/Instagram" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Instagram</a> is anti- <a href="https://c.im/tags/autism" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#autism</a>. I am <a href="https://c.im/tags/OpenlyAutistic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenlyAutistic</a> in my online accounts, and I do feel targeted in this situation.Currently, for the nth time, I am doing my best not to have a <a href="https://c.im/tags/meltdown" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#meltdown</a> just because of this.My last attempt is this thread over <a href="https://c.im/tags/Twitter" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Twitter</a>: <a href="https://twitter.com/YourOnlyONEofcl/status/1637050270235643905" rel="nofollow noopener noreferrer" target="_blank">https://twitter.com/YourOnlyONEofcl/status/1637050270235643905</a> If you want to help, and I do need the help, please reply and tag Meta and Instagram. Maybe even worth tagging <a href="https://c.im/tags/Facebook" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Facebook</a> as well.<a href="https://c.im/tags/ActuallyAutistic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActuallyAutistic</a> <a href="https://c.im/tags/ActuallyAutistics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ActuallyAutistics</a> <a href="https://c.im/tags/Autistics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Autistics</a> <a href="https://c.im/tags/AutismSpectrum" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AutismSpectrum</a> <a href="https://c.im/tags/Discrimination" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Discrimination</a> <a href="https://c.im/tags/UnrealiableSystem" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UnrealiableSystem</a> <a href="https://c.im/tags/BrokenProcess" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BrokenProcess</a> <a href="https://a.gup.pe/u/neurodivergence" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@neurodivergence</a> <a href="https://a.gup.pe/u/actuallyautistic" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@actuallyautistic</a>

tkteo1/n At the time of typing this, the most recent post on <a href="https://infosec.exchange/tags/lastpass" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lastpass</a> blog is still 22 December 2022 "Notice of Recent Security Incident", containing the criticized " it would take millions of years to guess your master password using generally-available password-cracking technology" claim.What is ironic is the post that is marked as "What's Trending", which is "How to choose a <a href="https://infosec.exchange/tags/Password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Password</a> Manager", posted 21 March 2021. Who knows, maybe Lastpass' customers have been flocking to the blog and trending this post upwards?<a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/passwordmananger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmananger</a> <a href="https://infosec.exchange/tags/passwordmanagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmanagement</a> <a href="https://infosec.exchange/tags/databreach" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#databreach</a> <a href="https://infosec.exchange/tags/databreaches" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#databreaches</a> <a href="https://infosec.exchange/tags/2fa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2fa</a> <a href="https://infosec.exchange/tags/mfa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mfa</a> <a href="https://infosec.exchange/tags/twofactorauthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#twofactorauthentication</a> <a href="https://infosec.exchange/tags/multifactorauthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#multifactorauthentication</a>

Vivian (she/her/ia) :heart_bi:This is a blog on <a href="https://mastodon.nz/tags/2fa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2fa</a> <a href="https://mastodon.nz/tags/twofactorauthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#twofactorauthentication</a> <a href="https://mastodon.nz/tags/TwoFactorWebAuthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TwoFactorWebAuthn</a> <a href="https://mastodon.nz/tags/twofactorauth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#twofactorauth</a>

Marcus "MajorLinux" SummersSee!This is why SMS-based 2FA is the worst kind of 2FA!Play app with 100K downloads booted for forwarding texts to developer server | Ars Technica <a href="https://arstechnica.com/information-technology/2022/11/google-boots-play-app-that-surreptitiously-sent-texts-to-developers-server/" rel="nofollow noopener noreferrer" target="_blank">https://arstechnica.com/information-technology/2022/11/google-boots-play-app-that-surreptitiously-sent-texts-to-developers-server/</a><a href="https://toot.majorshouse.com/tags/GooglePlay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GooglePlay</a> <a href="https://toot.majorshouse.com/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Android</a> <a href="https://toot.majorshouse.com/tags/SMS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMS</a> <a href="https://toot.majorshouse.com/tags/TwoFactorAuthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TwoFactorAuthentication</a> <a href="https://toot.majorshouse.com/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a>

MortenWith it being <a href="https://infosec.exchange/tags/BlackFriday" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BlackFriday</a> and all, I hope nobody is caught up in scams or phishing attacks while doing their (frantic!) online <a href="https://infosec.exchange/tags/shopping" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#shopping</a>.Here are a few <a href="https://infosec.exchange/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> and <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> tips that I hope will help somebody:1) If you have a coupon code, don't follow a provided link to the shopping page. Instead find the page yourself, e.g., via a <a href="https://infosec.exchange/tags/searchengine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#searchengine</a>, and then input the coupon code manually.2) Access online shops without being logged in, and without any <a href="https://infosec.exchange/tags/cookies" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cookies</a>, such that the shop cannot set prices according to <a href="https://infosec.exchange/tags/personaldata" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#personaldata</a> or previous purchases (yes, they do that). Except, of course, if the discount is only available when actually having an account. Attempt anonymously first.3) An improvement to 2) is accessing online shops via <a href="https://infosec.exchange/tags/TorBrowser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TorBrowser</a> or similar. 4) Use a <a href="https://infosec.exchange/tags/VPN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VPN</a> such that <a href="https://infosec.exchange/tags/ISPs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ISPs</a> and other adversaries cannot obtain or spoof information. It also protects your data, like credit card info, if you are using public a <a href="https://infosec.exchange/tags/WiFi" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WiFi</a> (never do that without VPN).5) As corollary to 4) you can even sometimes get discounts by using a different location than your own.6) Use a <a href="https://infosec.exchange/tags/passwordmanager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwordmanager</a> for your credentials such that they can be longer and harder to guess/crack. This also means you don't have to remember (or even know) them by heart.7) Setup <a href="https://infosec.exchange/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a> for your accounts such that, together with 6), it is harder for adversaries to break in and steal data and/or make automated purchases on your behalf if possible. It is highly advisable using an authenticator app instead of code-by-SMS. For further protection, you can even use <a href="https://infosec.exchange/tags/biometrics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#biometrics</a>, like <a href="https://infosec.exchange/tags/fingerprints" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fingerprints</a> or facial scans. And/or a hardware device supporting <a href="https://infosec.exchange/tags/FIDO2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FIDO2</a>/#U2F or similar.Note that these tips are applicable also when not shopping, and I would encourage them all.Stay safe and have an awesome Friday!<a href="https://infosec.exchange/tags/mastodontips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mastodontips</a> <a href="https://infosec.exchange/tags/feditips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#feditips</a> <a href="https://infosec.exchange/tags/profiling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#profiling</a> <a href="https://infosec.exchange/tags/personalidentifyinginformation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#personalidentifyinginformation</a> <a href="https://infosec.exchange/tags/pii" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pii</a> <a href="https://infosec.exchange/tags/internetserviceproviders" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#internetserviceproviders</a> <a href="https://infosec.exchange/tags/tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tor</a> <a href="https://infosec.exchange/tags/multifactorauthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#multifactorauthentication</a> <a href="https://infosec.exchange/tags/2fa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2fa</a> <a href="https://infosec.exchange/tags/twofactorauthentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#twofactorauthentication</a> <a href="https://infosec.exchange/tags/yubikey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#yubikey</a>

Recent searches

Search options

Administered by:

Server stats:

#twofactorauthentication