Josh Benner

Tag: security

  • Facebook ads extra layer of security

    Facebook announced today that they are going to be unveiling a couple of new security features for the site. One of the features is becoming increasingly common with websites where users login and it will prompt additional infromation from users if Facebook believes a person may not be legitimately logging onto the site.

    Given that Mark Zuckerberg’s own fanpage was hacked yesterday, new security is always a good thing.

    Let’s say that you live in Florida and logged in to Facebook from Florida this morning and that all of a sudden, someone from London trys to login to your Facebook. The site will prompt for additional information for you to verify that you’re you.

    Sometimes sites will use those annoying text boxes where you have to type the letters you see.

    That is called a captcha and it is meant more to verify that it is a human loging in, not so much that it is the legitimate owner of the account, as the Facebook blog notes.

    Facebook has come up witha pretty clever way for you to verify yourself. They are going to show you a set of photos of a Facebook friend and make sure that you can recognize the person.

    The advantage of this over a captcha is that any person can type in a captcha. It’s a matter of simply decyphering the letters. While anyone can figure out the captcha, people aren’t necessarily going to know your Facebook friends.

    Certainly this is not full proof. What if a friend of yours is hacking into your Facebook and the does know the friends who Facebook is using to verify your identity? That is a legitimate question and I don’t think Facebook has a very good answer for it. Ultimately, I think that the resonse would essentially be, “Well it’s still better than what we’ve had up to this point.”

    And that’s true. Another potential problem could be

    Facebook then said that they have to protect your information so that they can have it all to themselves to shamelessly sell. (ok, they didn’t actually say that).

    jrb

  • Why your Android doesn’t have that trojan everyone is talking about

    No. You did not download the Trojan that is running on Android. Have you downloaded any third party apps from China lately? No, you haven’t, and so you don’t have the Trojan.

    I’m seeing a lot of posts on Twitter talking about the Trojan. I think the fact that people like to use social networking sties to spread the word when there are risks is wonderful.

    However, a negative is that it can sometimes make something a bigger story than it really needs to be and cause more confusion about whether or not an individual’s phone might have the malware.

    Mobile Lookout posted on their blog yesterday that an application which has been named “Geinimi” has been running on recreated versions of legitimate applications (mostly games) on third party Chinese Android app markets.

    But it has only been detected on Chinese apps, so you really don’t need to worry about it.

    For what it’s worth, in order to even download a third party app on an Android, you would need to go to “Settings -> Applications -> Unknown Sources” and check the unknown sources box to have the capability.

    Also, this application asked for downloaders to give it permissions which far exceed the normal permissions you grant any ordinary application you would ever download in Android Market. Checking the box also brings up a warning that you must ok.

    So for the vast majority of Android owners, it would not even be possible for you to get the Trojan.

    For people who have checked to receive applications from unknown services, they need to know the risk they’re taking and pay special attention to what they’re downloading.

    Also, if you haven’t downloaded Mobile Lookout or some other safety application that scans what you download, you really should. It’s free.

    jrb

    questions or comments? email benner.joshua@gmail.com or twitter @bennernotes

    Link to the Mobile Lookout blog post on Trojan http://bit.ly/f8hTtB