Google's Play Developer Security Solution Is a Good Start
Google's Play Developer Security Solution Is a Good Start
http://www.ttl.co-re.de/forum/showthread.php?tid=65381&pid=294469#pid294469
"The solution implemented by Google is promising, and it is a good start to deal with cyber hacks," said Harriet Chan, co-founder of, in an email interview, "It would be better if they embed this technique as quickly as possible."
https://www.pesbox.com/showthread.php?t=3476&p=63811&viewfull=1#post63811
Google is planning to make contact detail verification and two-step verification mandatory, even for established developer accounts, later this year. This will likely deter many from creating batches of fake developer accounts, but multiple burner accounts is only one of Google Play’s many problems.
https://nws-online.proboards.com/thread/5163/rule-waves-rtw2-exe-virus?page=1&scrollTo=84265
A mountain of one-off burner accounts and fake developer accounts have contributed to Google Play’s security issues, to be sure. Many of these types of accounts have been used to trick users into downloading malicious apps they thought were legitimate, upload scam apps, etc. Adding contact info and two-step verification doesn’t do much to address other problems like app cloning or developer account hijacking, however.
"This news raises quite a few questions about what Google's intentions are and what these changes mean for both developers and users," Brown went on to say. "Topics like fake apps with fake reviews (often bought by spammers) will still exist. Google has been promising to tighten things up for some time, but this latest change has only set a date for when the update will happen."
While Google’s new developer account security measures will definitely help, there’s more they can, and should, be doing to deal with the rest of Google Play’s known issues. Brown suggests an option for developers to tell Google they’re verified when reporting malware and spam apps, as well as having Google step in during "extreme" circumstances. This would make it easier for Google to learn of and deal with malicious apps, while also giving vetted developers a more reliable way to report questionable apps and accounts.
Chan wants to address account hacking and interruptions more directly, suggesting even stronger multi-factor authentication requirements like codes and facial recognition. Token-based authorization and certificate-based identification were also recommended as a means of providing developer accounts with even more solid user verification. These measures would make it far more difficult to take control of an established developer’s account, and potentially prevent malicious software being uploaded in their name.
In the end, both Brown and Chan agree that Google has a promising start, and hope the developer account security improvements won't end here.
also known as 2-step verification, is an important line of defense in stopping hackers and criminals from accessing your accounts. It's important you set it up on all your accounts. Here's how to set up 2 factor authentication for a Google account, and learn why it's so useful.
Google was one of the first companies to introduce 2 factor authentication to its services. It requires people logging in to have access to a physical device like a smartphone, as well as virtual passwords, and is typically one of the best ways to prevent unwanted access to precious accounts.
It makes things much harder for anyone to access your content and only takes seconds to set up and use.
Google two-factor authentication adds an extra layer of security by requiring you to have both your password and a special security key to access your accounts. This is generally done by Google sending you a verification code that's specific to your account. They're sent to your phone via text, through voice call, or via the app, with each code only usable once.
Adds an extra layer of security to your personal online accounts that you regularly sign in with using an email address/username and password. By enabling this extra security feature, you can essentially prevent hackers from accessing your accounts if they happen to obtain your sign-in details.
Over the past few years, several popular online platforms have added two-factor authentication to their security features to better protect their users. Enabling it typically involves adding a mobile phone number to your account. When you sign in to your account from a new device, a unique code will be texted or phoned to you, which you'll use to enter into the site or app for verification purposes.
Having a isn't enough to guarantee protection online these days, so enabling two-factor authentication on every online account that allows you to do so is always a good idea.
Here are 10 of the most popular online platforms that offer this extra protective security feature plus instructions for how to set them up.
When you enable two-factor authentication on your, you add a layer of protection to all your accounts that you use from Google, including Gmail, YouTube, Google Drive, and others, as well as your framework. Google allows you to set up two-factor authentication to receive verification codes by text or automated phone call on a mobile device.
You can set up two-factor authentication for your on the web or from within the mobile app. Facebook has several authentication options available, but for simplicity's sake, we'll stick with showing you how to enable it with SMS text messages.
Comments
Post a Comment