Mobile Security 2 Share your voice A physical security key on top of an Android phone. Josh Miller/CNET Security keys are an effective way to keep your accounts secure from hackers, but they suffer from a major challenge: They’re inconvenient.Not a lot of people want to buy and carry an extra key or Bluetooth fob just for logging in — which is why most two-factor authentication is done through text messages, even though it’s less secure. Up to 90% of Gmail users don’t even use 2FA, a Google software engineer revealed in 2018. Convenience is a big hurdle, and Google is hoping to solve that by making your phone the security key. It’ll have the same functionalities as a physical security key but won’t require you to carry an extra device to keep your accounts safe. That means that like a security key, your phone will warn you if an imposter website is trying to steal your password. Unlike using SMS or authenticator codes for logging in, security keys have to verify that the website you’re logging in on is legitimate. The updated security feature is coming only to Android devices versions 7 and up, which account for about 50% of all active users, according to Google’s distribution board. For now, it’s working only on Google’s Chrome browser and with Google accounts, but the company expects to expand availability. “This is a natural evolution of the standard. Just as some security keys only worked with Chrome initially and moved to other browsers, we’re seeing the same thing happening here,” said Christiaan Brand, a Google product manager for identity and security. You can set up the security key on your phone by going to your settings on Google and selecting 2-Step Verification. From there, you need to click on Add a Security Key and choose your phone as a device. School of phishPhishing attacks are common and often hard to spot, fooling even seasoned politicians. Security keys help prevent hackers from getting into your accounts because even if your password were stolen, an attacker would have to have the physical key to log in. “We’re solving the problem of someone thousands of miles away trying to steal your password,” said Sam Srinivas, Google Cloud’s product management director. “With this, someone has to be within 100 feet of you to try to attack you.” When Google first released its own Titan Key, it cost $50 for a set, and Brand said the company was hoping to eventually drive the cost down to less than $10. Last year, Google released its own Titan Security Key in both a USB and Bluetooth version. Sarah Tew/CNET By turning Android devices into security keys, Google is essentially giving them out for free. That much coverage could make it easier for more people to start using security keys, said Conor Gilsenan, a security researcher at All Things Auth.Over Christmas, the security expert said, he bought his family members security keys, but it took more than two hours to set up all these devices. “This is such a big deal,” Gilsenan said. “Being able to utilize the phone that you already have removes an entire barrier to better forms of two-factor authentication for the average internet user.”Brand said the phone security keys meet the FIDO authentication standard, which means any websites allowing for that standard will work with your phone as a security key. That includes websites like Facebook, Twitter and GitHub. Convenience is keyBrand is hoping the launch will convince other pages to accept phones as security keys.The technology works by connecting your phone and your computer’s Bluetooth when you’re logging in on a Google account. You’ll be prompted with a message on your phone to verify the log-in once they’re connected. While they’re using Bluetooth to communicate, the two devices don’t have to pair with each other, Brand said.”We devised a new standard on top of Bluetooth to make sure that these don’t need to pair,” he explained.There have been criticisms of using Bluetooth in security keys, because the wireless protocol could be open to security vulnerabilities. When Google announced its Bluetooth security fob last year, Yubico CEO Stina Ehrensvard released a statement saying Bluetooth didn’t have the same security standards as NFC and USB.Brand said Google had the capability to let your phone function as a security key through a USB cable but decided against it. “We’ve done user studies, and asking a user to have a cable ready that’ll fit both their devices almost takes away all the convenience of using their phone,” he said. Still, even with all the convenience of phones, Brand and Srinivas recommend having a second, backup USB key. That way, if you ever lose your phone or the battery’s dead, you can still log in. Now that half of all Android devices can function as security keys, the new challenge will be getting people to actually use them that way. Security keys have a lower adoption rate than 2FA as a whole, but the convenience will likely draw more people to better protect their accounts. “You don’t have to plug it in, and you don’t have to buy a new device, since you already have the phone,” Gilsenan said. “The bigger challenge is communicating to people that they actually need 2FA.” Tags Comments Google
A group of Rohingya refugee people walk in the water after crossing the Bangladesh-Myanmar border in Teknaf. Photo: ReutersAl Qaeda militants have called for support for Myanmar’s Rohingya Muslims, who are facing a security crackdown that has sent about 400,000 of them fleeing to Bangladesh, warning that Myanmar would face “punishment” for its “crimes”.The exodus of Muslim refugees from Buddhist-majority Myanmar was sparked by a fierce security force response to a series of Rohingya militant attacks on police and army posts in the country’s west on 25 August.The Islamist group behind the 11 September 2001, attacks on the Untied States issued a statement urging Muslims around the world to support their fellow Muslims in Myanmar with aid, weapons and “military support”.”The savage treatment meted out to our Muslim brothers … shall not pass without punishment,” al Qaeda said in a statement, according to the SITE monitoring group.”The government of Myanmar shall be made to taste what our Muslim brothers have tasted.”Myanmar says its security forces are engaged in a legitimate campaign against “terrorists”, whom it blames for attacks on the police and army, and on civilians.The government has warned of bomb attacks in cities, and al Qaeda’s call to arms is likely to compound those concerns.”We call upon all mujahid brothers in Bangladesh, India, Pakistan, and the Philippines to set out for Burma to help their Muslim brothers, and to make the necessary preparations – training and the like – to resist this oppression,” the group said.
People chant slogans and hold signs to condemn the rape and killing of 7-year-old girl Zainab Ansari in Kasur, during a protest in Peshawar, Pakistan. Photo: ReutersTwo civilians were killed when officers fired live rounds to disburse crowds that attacked a police station in Pakistan on Wednesday in a protest over the rape and murder of a 7-year-old girl.Police recovered the body of Zainab Ansari on Tuesday from a garbage dumpster in the town of Kasur in eastern Pakistan, four days after she was reported missing.It was the twelfth incident of a girl being adducted, raped, and killed in the past year in Kasur district, police say. Residents have been furious at the authorities for what they see as a failure to investigate such cases.The spokesman for Pakistan’s Punjab province, Malik Muhammad Ahmad Khan, told Reuters that protesters turned violent and attacked a local police office.”They started throwing stones at the office and some of armed protesters shot bullets at police. In order to stop them, police resorted to aerial firing,” Khan said, adding that two people were killed and one wounded as a result.Locals said police responded with undue force.”A peaceful protest was taking place, some students threw stones and police responded by firing at the crowd,” Saleem ur Rehman, a resident who was at the protest, told Reuters. “The law and order situation here is really bad and there have been many such incidents. That is what the protest was about.”Ansari’s parents, who were not in the country when their daughter was kidnapped, returned on Wednesday.”I want justice! I want justice!” Zainab’s mother cried, surrounded by reporters at the international airport in the capital Islamabad.Ansari’s case has attracted the attention of the country’s civilian and military leadership, with Punjab Chief Minister Shahbaz Sharif calling for immediate action.Police in Kasur deny they have been lax in investigating child abductions in the town. Regional police officer Zulfiqar Hameed told Reuters that four kidnappers had been arrested and another killed during an arrest attempt.”Investigations reveal that in each case a paedophile kidnaps little girls, rapes them and kills them,” he said.The case of Ansari would soon be solved, he said: “We have got CCTV footage that shows a young man taking her along. We will catch him very soon,” he said, adding that 95 DNA samples had been taken from suspects.A number of police officials have been transferred out of the region for failing to investigate complaints of missing children since 2015, when authorities uncovered what they called a paedophile ring linked to a prominent local family. At least two people have been convicted in the case, in which authorities say hundreds of children in the district were abused.
By The Associated PressMILAN (AP) — Italian brand Prada said it is forming a diversity council to “elevate voices of color within the company and fashion industry at large,” a move that follows accusations of racism in the luxury fashion world.Two Americans, artist Theaster Gates and film director Ava DuVernay, will chair the council, Prada said Wednesday. The group will work to develop “diverse talent” and create more opportunities for students of color, the luxury fashion house said.In this Nov. 18, 2018, file photo filmmaker Ava DuVernay addresses the audience during the 2018 Governors Awards at The Ray Dolby Ballroom in Los Angeles. (Photo by Chris Pizzello/Invision/AP, FIle)Gates said his work “amplifies the voices that have been absent from the broad cultural conversations,” and he was happy to work with Prada to help make the company more “reflective of the world today.”Prada apologized in December and immediately withdrew bag charms with exaggerated red lips. Critics said the charms recalled the Blackface caricatures that long propagated racist stereotypes in the United States.The fashion world controversy intensified after a similar misstep this month by Gucci. Another prominent African-American director, Spike Lee, said he would wear neither Prada nor Gucci until they included Black designers.“Prada is committed to cultivating, recruiting and retaining diverse talent to contribute to all departments of the company,” said Miuccia Prada, CEO and creative director. “In addition to amplifying voices of color within the industry, we will help ensure that the fashion world is reflective of the world in which we live.”She said the initiative would “help us grow not only as a company, but also as individuals.”Blackface caricatures popularized in 19th century minstrel shows also have attracted renewed attention in the United States after old photos emerged of White politicians wearing Blackface or condoning it.
Citation: Unmanned U.S. frigates to stalk submarines (w/ Video) (2010, February 4) retrieved 18 August 2019 from https://phys.org/news/2010-02-unmanned-frigates-stalk-submarines-video.html (PhysOrg.com) — In the U.S. the Defense Advanced Research Projects Agency (DARPA) is planning to introduce unmanned frigates for long missions shadowing diesel-electric submarines. The vessels, dubbed Anti-Submarine Warfare Continuous Trail Unmanned Vessels or ACTUVs, are designed to be unmanned, with only intermittent communication from operators on shore or on a ship, and to require no maintenance for months. They will also obey navigational rules and be able to avoid collisions at sea.The three main objectives of the program are to build an “X-ship” that operates without anyone stepping aboard at any point in its operating cycle, secondly to demonstrate the technical viability of the system under “sparse remote supervisory control”, and thirdly to demonstrate the anti-submarine capability of the vessel and its “novel suite of sensors”. The ACTUV is unlike other unmanned vessels in that it is designed for global, independent deployment for months at a time.Proponents claim crewless vessels would save the U.S. Navy money and free the expensive crewed ships from the routine work of continuously cruising the oceans shadowing submarines. The unmanned frigates would locate a submarine by “pinging’ with active sonar to detect the submarine’s echoes, which means those on the submarine would know they have been detected. While nuclear submarines may be fast enough to escape the stalking frigate, fast and quiet diesel-electric submarines would not. © 2010 PhysOrg.com Explore further More information: FBO announcement (pdf) Two Boeing X-45A Unmanned Jets Continue Coordinated Flights Other unmanned vessels are already in use, with Israel deploying Unmanned Surface Vehicles (USVs), mainly for surveillance purposes, and the U.S. Navy deploying unmanned drones from its submarines.DARPA is the research and development section of the U.S. Department of Defense, which is charged with the job of maintaining the U.S. military’s technological superiority and avoiding technological surprises that could threaten the nation’s security. It will host an unclassified “Industry Day” conference on the ACTUV program at the Liberty Conference Center in Arlington, Virginia on February 16 to discuss the program and address any questions. U.S. Navy combat ship Freedom (LCS 1). This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.