Google adds account sync for Authenticator, without E2EE

  • 📰 TheRegister
  • ⏱ Reading Time:
  • 46 sec. here
  • 2 min. at publisher
  • 📊 Quality Score:
  • News: 22%
  • Publisher: 61%

United Kingdom Headlines News

United Kingdom Latest News,United Kingdom Headlines

Also: Your Salesforce Community site might be leaking; a new CPU side-channel; and this week's critical vunls

You may have heard news this week that Google is finally updating its authenticator app to add Google account synchronization. Before you rush to ensure your two-factor secrets are safe in the event you lose your device, take heed: The sync process isn't end-to-end encrypted.by two-man developer and security research team Mysk, which said it found the problem by analyzing network traffic during the secret-syncing process.

Along with those claims, Brand also said that Google believes"our current product strikes the right balance for most users and provides significant benefits over offline use," that offline alternative being the way the app functioned prior to the update. Our advice – especially for those that use Google Authenticator for work-related 2FA – would be to take advantage of that offline option. At least until Google can ensure its attempt to make one-time codes"Salesforce Community users, check those user permissions

Community websites allow administrators to set separate permissions for authenticated users and guests, the latter of whom can access limited features without signing in. As reported by, a security researcher has found a"shocking number" of Community websites are leaking data because administrators are mistakenly granting guests access to internal resources.

 

Thank you for your comment. Your comment will be published after being reviewed.
Please try again later.
We have summarized this news so that you can read it quickly. If you are interested in the news, you can read the full text here. Read more:

 /  🏆 67. in UK

United Kingdom Latest News, United Kingdom Headlines

Similar News:You can also read news stories similar to this one that we have collected from other news sources.

Google Pixel 7a design and colors leak out in unboxing imagesThere's a new blue
Source: techradar - 🏆 51. / 63 Read more »

Judge Rules against Google, Allows Antitrust Case to ProceedA judge ruled the lawsuit alleging Google wields monopolistic power in the world of online advertising can proceed
Source: TIME - 🏆 93. / 53 Read more »

The Google Pixel Fold design gets revealed in full in leaked imagesLooks pretty Pixel-y
Source: techradar - 🏆 51. / 63 Read more »

Road-Testing The New AI Shopping Tool Fashion Editors Can’t Get Enough OfDespite its relative infancy, Google Lens already racks up more than ten billion searches a month. Joy Montgomery breaks down the technology’s potential impact for shoppers.
Source: BritishVogue - 🏆 14. / 80 Read more »

China’s Mars rover finds signs of ‘modern’ waterAWS adds Korean support; Singtel targets; Philippines SIM registration drive extended
Source: TheRegister - 🏆 67. / 61 Read more »

Airlines dispute adds headwinds to US-China relationship\n\t\t\tJournalists in 50+ countries explore developments in global commerce from every perspective.\n\t\t\tFor Premium subscribers, we offer our dedicated ‘FT Free Trade’ newsletter every Tuesday and Thursday.\n\t\t
Source: FT - 🏆 113. / 51 Read more »