Google reveals failure of ‘secret question’ password recall

A research paper from Google has looked into the difficulties of standard ‘forgotten password’ personal information verification.The paper, entitled ‘Secrets, Lies, and Account Recovery: Lessons from the Use of Personal Knowledge Questions at Google‘ examined the usage of personal information to trigger a password reset, and discovered that it presents a number of difficulties, including forgetful users, guessable answers and fake responses.The study, which according to Silicon Beat covered ‘hundreds of millions of secret answers and millions of account recovery claims’, discovered that a massive 40 percent of American Google users couldn’t remember the answers to their own security questions.

Read on, source: Google reveals failure of ‘secret question’ password recall

5 hackers who came over from the dark side

There have been some notorious cybercriminals over the years, but only a select few hackers have swapped ‘black’ hats for ‘white’.In hacking terms, ‘black’ hats are usually used for the bad guys. They hack the innocent victims, pilfer personal and sensitive data for financial gain and remain largely in the shadows of enterprise IT networks. They’re forever chased by law enforcement.‘White’ hats, by contrast, are the good guys. They are security researchers, who spend their time hacking to find vulnerabilities, and then inform enterprises and web developers of the changes that need to be made.There has been a clear distinction between both and there are enough of them around.

Read on, source: 5 hackers who came over from the dark side

Bug causes iPhones to crash when sent malicious text message

An exploit has been discovered that causes iPhones and iPads to reboot when sent a string of malicious text.The bug was found on Reddit, reports 9to5Mac, but the exploit has since been confirmed by Apple. If the offending 75-byte sequence of unicode characters are sent via a text message, and appear on a user’s iPhone lockscreen, the device will crash and reboot.

Read on, source: Bug causes iPhones to crash when sent malicious text message

Scareware: Fake Minecraft apps Scare Hundreds of Thousands on Google Play

ESET has discovered over 30 scareware applications available for download from the Google Play store. The malicious applications, which pretended to be cheats for the popular Minecraft game, have been installed by more than 600.000 Android users.It’s not easy to slip a malicious application into Google’s official Play Store these days. Google’s automated application scanner, Bouncer, helps in reducing the number of malware on the official app store. Yet, some baddies do occasionally get by, as demonstrated by our recent discovery of over 30 scareware applications that have been uploaded to the Play store in the course of the last 9 months

Read on, source: Scareware: Fake Minecraft apps Scare Hundreds of Thousands on Google Play