A Simple Way Google Can Increase Security
AP: "The techniques used by the (Twitter) attackers highlight the dangers of a broader trend promoted by Google Inc. and others toward storing more data online, instead of on computers under your control."
via google.com
AP covers the Twitter security issues well, but honestly, why doesn't Google simply give us more control over passwords? I should be able to say I need to sign in to Gmail with two passwords, Google Reader with one, Docs with three including a picture, etc. Give us more control if we want it and it won't be as hard to snag passwords.
Comments 3 Comments
1. Using a key fob - http://en.wikipedia.org/wiki/Key_fob - to login. World of Warcraft implemented their Blizzard Authenticator either via fob or an iPhone app!
2. Is it common for companies like this to never have security / penetration tests done to expose their weaknesses before someone with malicious intent does?
@Steve & others ( :-P ): choosing STRONG password, with centralized login (openID & the likes) and 'rotation' of them on a regular basis - until the upcoming of mainstream biometrics techniques - is today, I think, still the only method of living with a certain degree of serenity ...