How Apple, Google, and Microsoft will kill passwords and phishing in one stroke

How Apple, Google, and Microsoft will kill passwords and phishing in one stroke

Enlarge (credit: Getty Images)

For more than a decade, we’ve been promised that a world without passwords is just around the corner, and yet year after year, this security nirvana proves out of reach. Now, for the first time, a workable form of passwordless authentication is about to become available to the masses in the form of a standard adopted by Apple, Google, and Microsoft that allows for cross-platform and cross-service passkeys.

Password-killing schemes pushed in the past suffered from a host of problems. A key shortcoming was the lack of a viable recovery mechanism when someone lost control of phone numbers or physical tokens and phones tied to an account. Another limitation was that most solutions ultimately failed to be, in fact, truly passwordless. Instead, they gave users options to log in with a face scan or fingerprint, but these systems ultimately fell back on a password, and that meant that phishing, password reuse, and forgotten passcodes—all the reasons we hated passwords to begin with—didn’t go away.

A new approach

What’s different this time is that Apple, Google, and Microsoft all seem to be on board with the same well-defined solution. Not only that, but the solution is easier than ever for users, and it’s less costly for big services like Github and Facebook to roll out. It has also been painstakingly devised and peer-reviewed by experts in authentication and security.

Read 17 remaining paragraphs | Comments

Musk’s Twitter deal could face national security probe into foreign investors

A photoshopped image of Elon Musk emerging from an enormous pile of money.

Enlarge (credit: Aurich Lawson / Duncan Hull / Getty)

Elon Musk’s $44 billion purchase of Twitter could face a probe into potential national security risks posed by Musk’s foreign investors, according to a Reuters report on Friday. The foreign investment could invite “the kind of regulatory scrutiny over US national security that social media peer TikTok faced,” the report said.

Musk’s investors include Qatar’s sovereign wealth fund and Saudi Arabia’s Prince Al Waleed bin Talal al Saud. The Saudi Kingdom Holding Company already owns 5.2 percent of Twitter stock and plans to roll that $1.9 billion stake into Musk’s privatized Twitter. The Qatar investment is for $375 million.

Musk also has a $500 million investment from Binance, a major cryptocurrency exchange that has faced its own government scrutiny. Binance was founded in China in 2017 but quickly left the country when China’s government restricted cryptocurrency trading; it now operates without an official headquarters. Binance’s founder is Changpeng Zhao, who was born in China but reportedly moved to Canada with his family when he was 12 years old.

Read 15 remaining paragraphs | Comments

FDA puts the brakes on J&J vaccine after 9th clotting death reported

Boxes of Johnson & Johnson's Janssen COVID-19 vaccine at a vaccination site in Florida.

Enlarge / Boxes of Johnson & Johnson’s Janssen COVID-19 vaccine at a vaccination site in Florida. (credit: Getty | Paul Hennessy)

The US Food and Drug Administration limited the use of the Johnson & Johnson (Janssen) COVID-19 vaccine late Thursday, citing the risk of a very rare but severe clotting disorder called thrombosis with thrombocytopenia syndrome (TTS).

From now on, the J&J vaccine is only to be used in people ages 18 and up who are unable or unwilling to receive an alternative COVID-19 vaccine. That includes people who have had a life-threatening allergic reaction (anaphylaxis) to an mRNA COVID-19 vaccine, people who have personal concerns about mRNA COVID-19 vaccines and would otherwise not get vaccinated, and people who don’t have access to mRNA COVID-19 vaccines.

The limitation comes as the FDA and the Centers for Disease Control and Prevention have been closely monitoring people who received J&J COVID-19 vaccinations for TTS. To date, the agencies have identified and confirmed 60 cases of TTS linked to the vaccine, including nine deaths. That represents a rate of 3.23 TTS cases per million doses of J&J vaccine administered, and a rate of 0.48 TTS deaths per million doses of vaccine administered, the FDA said Thursday.

Read 6 remaining paragraphs | Comments

Nvidia hid how many GPUs it was selling to cryptocurrency miners, says SEC

Nvidia hid how many GPUs it was selling to cryptocurrency miners, says SEC

Enlarge (credit: Getty Images)

Nvidia has agreed to pay $5.5 million in fines to the United States Securities and Exchange Commission to settle charges that it failed to disclose how many of its GPUs were being sold for cryptocurrency mining, the agency announced today.

These charges are unrelated to the current (slowly ebbing) crypto-driven GPU shortage. Rather, they deal with a similar but smaller crypto-driven bump in GPU sales back in 2017.

The agency’s full order (PDF) goes into more detail. During its 2018 fiscal year, Nvidia reported increases in its GPU sales but did not disclose that those sales were being driven by cryptocurrency miners. The SEC alleges that Nvidia knew these sales were being driven by the relatively volatile cryptocurrency market and that Nvidia didn’t disclose that information to investors, misleading them about the company’s prospects for future growth.

Read 3 remaining paragraphs | Comments

Amazon Kindle book purchases are the next Google Play billing casualty

Amazon's new purchase explainer and the "learn more" link.

Enlarge / Amazon’s new purchase explainer and the “learn more” link.

Following up on its earlier move to pull Audible audiobook purchases from its Play Store app, Amazon is also turning off Kindle digital book purchases on Android. The Google Play purchasing crackdown is to blame, of course. Starting on June 1, Google will require all Play Store apps to use Google Play billing for digital purchases or face removal from the marketplace. Google Play billing technically has been in the rules for a while, but Google is ending a hands-off enforcement policy that effectively allowed companies to run their own billing systems.

When you visit the Amazon app, you can still buy physical books, but digital purchases now show a “Why can’t I buy on the app?” link instead of a purchase button. Amazon’s link shows a popup that says, “To remain in compliance with the Google Play Store policies, you will no longer be able to buy new content from the app. You can build a reading list on the app and buy on [the] Amazon website from your browser.”

Amazon Music purchases have also been shut down on the Google Play app. The move brings Amazon’s Google Play app in line with the iOS app, which also doesn’t allow digital purchases. On Android, Amazon is pushing users to the website, where they can still buy digital content or sign up for an unlimited subscription, which avoids the Play Store purchase lockdown.

Read 1 remaining paragraphs | Comments

How to Learn Python in 2022

With each passing year, the Python programming language becomes more and more popular. According to the Stack Overflow Developer Survey for 2021 [https://insights.stackoverflow.com/survey/2021#technology], Python was the 3rd most popular language, following JavaScript and HTML & CSS. And this growth doesn’t seem to be slowing down anytime soon, so Python programmers
Find the soul