Google Introduces Two Step Gmail Security

 Last year, Google made Gmail access via HTTPS protocol default for all account holders to add a security layer. Now, Google has introduced another security layer upgrade with an advanced opt-in feature dubbed 2-Step Verification. This 2-Step Verification feature requires using a specific code to sign in to the Gmail account. Google either calls you (only if you are in U.S., I suppose) to give that code or sends the code via SMS or generates it via a mobile app for Android, BlackBerry or iPhone device. Gmail finally gets a bank account like security feature for sign-in.

Gmail's 2-Step Verification advanced sign-in feature is optional and would be visible to all Google account holders at Manage Account page soon. This new security feature makes your Google account more secure and most importantly Gmail out of all Google services.

The 2-Step Verification stands for its name since it requires two major credentials: your Google account password and a six digit pass code obtained using phone. This requires the user to set up the opt-in 2-Step Verification feature from the Manage Account page. During the set-up process, you'll be required to enter your phone number and also create certain backup pass codes just in case you lose your phone or it gets stolen. After completing the 2-Step Verification setup, you ll land on to an additional page once you log into your Google account using your login ID and password.

To prevent third-party sign-in or someone sneaking into your account, make the best of 2-Step Verification. Yes, it does involve an additional extra step but it certainly secures your account. Google had been testing this feature with Google apps users and it would be available to all Google account holders over a period of time.

read more @ techtree

Technology : Facebook boosts security, adds HTTPS

Facebook : In order to stay safe and protect users from getting hacked, the popular social networking site Facebook is rolling out a new set of security features.

Facebook, with over 500-million members, has added the ability for users to login and surf the site using a more secure encrypted connection, known as HTTPS.

The encryption is the same used on shopping and banking websites to secure connections, and was previously used on Facebook when passwords are checked.

"Starting today we'll provide you with the ability to experience Facebook entirely over HTTPS. You should consider enabling this option if you frequently use Facebook from public Internet access points found at coffee shops, airports, libraries or schools," the company said in a blog post.

Facebook noted that the site may function more slowly using HTTPS, and some features, including many third-party applications, don't currently support HTTPS.

In addition to the added encryption , Facebook said it will now also offer "social authentification," a unique form of the traditional "captcha" coding that will ask a user to identify Facebook friends from their photos.

The two new security features promise to prevent Wi-Fi hackers from fraudulently accessing accounts. Facebook already uses HTTPS when users log into an external site through Facebook Connect.

Your password, which gets sent back to Facebook from the third party site, remains encrypted. This will now be extended to user activity within the site itself.

IT experts can already overcome internet security issues by adding third-party security measures and forcing an encrypted connection. However, Facebook's decision to make full-session encryption a default setting for all users will remove the burden from those that are less aware of Wi-Fi hackers.

Facebook uses captchas to authenticate users when they log in from a country that is not associated with their account. However, this is now being replaced in favour of a new photo-matching system. Users will be faced with three photos of one of their Facebook friends, and will have to correctly identify them from a list of six friends' names.

"Hackers halfway across the world might know your password, but they don't know who your friends are," says Facebook engineer Alex Rice. Rice admits inevitable drawbacks to the new security measures.

Page loading speed will take a hit under HTTPS and many third-party apps are not HTTPS enabled. Social network users that that collect friends by the thousand may also have difficulty identifying photos of friends at random, and friends who have cartoons or 'lookalikes' tagged under their name could be unidentifiable.

HTTP settings will not change automatically, so users can opt in or out of the new feature.

via indiatimes