The move towards a new tool for modifying access keys to different platforms could declare the end of passwords as we know and use them until now.

The security provided by these keys made up of numbers, letters and special characters is invaluable, but they are increasingly seen as outdated. In this regard, technology companies have been working for years to offer simpler password managers.

The company FIDO Alliance, which works on the creation of open standards for key authentication, has spoken out on this matter. According to the company, the end of traditional passwords is near. “The organization is working on a tool to exchange unique access keys and other credentials between providers.”

They have pointed out that passwords “can be moved between different online services or password managers without compromising user security thanks to the Passkey Central tool. The idea has convinced industry giants such as Apple, Google or Samsung, who are interested in working with FIDO Alliance to develop this technology.”

Vulnerability of current keys

Cyberattacks do not stop, and digital criminals specialize in new ways to bypass barriers on different platforms. Currently, it is easier for hackers “to access victims’ sensitive information, and traditional passwords are no longer effective in retaining them. Access keys with providers protect users from phishing and facilitate login.”

The idea of ​​FIDO Alliance is to extend the use of access keys instead of passwords to more users so that they have control over their access formulas, in addition to facilitating the change of them. A clear example of how to securely transfer keys between administrators is by using “Passkey Central, where the Credential Exchange Protocol (CXP) and Credential Exchange Format (CXF) are used to securely transfer keys between administrators.” This way, users’ confidential information is never exposed.

M.Pino

Source: computerhoy

(Reference image source: FlyD in Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Password managers could put an end to traditional key words apareció primero en Bitfinance.

Around 100 million Samsung smartphones were affected by a vulnerability in the cryptographic security environment of the South Korean brand, which exposed hardware-protected user keys to cyberattacks, although the company has already fixed it.

The bug, discovered by researchers at Tel Aviv University in Israel, centers on Samsung’s implementations of the TrustZone operating system, which runs parallel to Android on its mobile devices.

As the authors report in the study, the cryptographic design and implementation of a hardware-supported system to protect Samsung mobile keys using trusted execution environments had “severe design flaws.”

These issues affected the latest flagship families released by Samsung, including the Galaxy S21, S20, S10, S9, and S8 series, which came to market between 2021 and 2017 and are direct predecessors of Samsung. the Galaxy S22 this year.

Through reverse engineering techniques and analysis of the code structure of Samsung’s TrustZone implementation, Tel Aviv University researchers tested the feasibility of three attack techniques that expose cryptographic information on smartphones.

After knowing the vulnerabilities investigated, Samsung released a security patch to solve the problem of its smartphones in August of last year, which was completed with a subsequent update in October to finish protecting its devices.

K. Tovar

Source: Computerhoy

La entrada Vulnerability in Samsung exposed cryptographic keys apareció primero en Bitfinance.

Google will automatically activate, as of November 9, for millions of users of their accounts the security function of two-step verification, which requires confirming the identity in the access through techniques such as SMS codes sent to the mobile.

In May, Google had already announced that it would extend two-factor authentication to all its users during this year 2021. This system, which could already be used by those who had configured it in their accounts, will be applied automatically.

Now, the company has begun to send notifications to the users of its accounts in which it informs them that the start date of the mandatory two-step verification is next November 9, as reported by Gizmochina.

This measure, which Google assured would be applied to all Google accounts configured correctly, adds an additional layer of security to access, and in addition to the username and password, it requires the use of one-time passwords sent by SMS to the phone or to another mail account.

Likewise, another technique contemplated for two-factor authentication is the use of security keys that can be physically connected to the device and that are already compatible with iOS and Android computers and mobiles.

Google had detailed in a previous statement that it planned to automatically roll out the two-step verification feature to an additional 150 million users of its accounts, as well as 2 million YouTube creators.

Source: dpa

La entrada Google will automatically activate two-step verification on November 9 apareció primero en Bitfinance.