Few Gmail Users Enable Two-Factor Authentication
Cybersecurity is an ongoing problem, with critical flaws and weaknesses ranging from ongoing research into how best to break fundamental aspects of CPU architectures to users perennial terrible choice of passwords. All in all, it’s not a cheerful situation, and new data from Google doesn’t exactly improve things.
In a presentation at Usenix’s Enigma 2018 security conference, Google engineer Grzegorz Milka revealed that less than 10 percent of Gmail users have two-factor authentication enabled and just 12 percent have a password manager installed on their browsers. Given the high-profile security failures of password managers, including LastPass, I can’t exactly blame people for not using them — it’s not as if they’ve got great reputations — but using password managers is one way to create strong passwords that have less chance of being cracked.
The Register notes that this actually squares up with what the majority of its readers thought, with 82 percent correctly picking the 10 percent or less figure. Milka’s response as to why Google didn’t require two-factor authentication is telling.
“The answer is usability,” Milka told The Reg. “It’s about how many people would we drive out if we force them to use additional security.”
This response echoes Marissa Mayer’s reasoning for why two-factor security authentication or additional security measures weren’t deployed at Yahoo, and we saw how well that turned out. It became the largest known hack in history, as far as how many accounts were compromised.
It’s genuinely tempting to write something along the lines of “It’s hard to blame Google.” Customers don’t generally care about security until they’re the ones being breached. Making two-factor authentication mandatory could result in some users moving to other platforms. But in the wake of Yahoo’s breach, I can’t make that argument.
First, it’d be hypocritical to slam Yahoo’s failure to protect its users, then champion Google’s refusal to do the same thing. But second, humans are terrible at evaluating risks and often take chances they shouldn’t. They also routinely undervalue data. Extra hard drives are dirt cheap and easily purchased. Backup software solutions are highly advanced and easy to use. And yet, most people don’t make regular backups of their own data. They certainly don’t take adequate steps to protect their own online information.
Google should enable two-factor authentication by default, with an option to disable it should people not want it. It’s the right thing to do for people who don’t otherwise understand why the feature is so important. But given that the company is unlikely to do so, we strongly recommend you take the step yourself.
Continue reading
Massachusetts Passes Robust Automotive Right-to-Repair Law
Right to repair advocates scored a major victory this week with the passage of Question 1 in Massachusetts. Hailed as the most advanced right to repair law in the land, Question 1 requires that automakers create an open data platform for sharing diagnostic and repair information with independent shops and vehicle owners.
Sony May Let Users Move Games Off PS5, Xbox Series X SSD Is User-Replaceable
Microsoft is using a user-replaceable SSD for the Xbox Series X, while Sony is researching PS5 game transfers.
Xbox Series X Launch Is Microsoft’s Biggest Ever, Causes ISP Traffic Spike
Microsoft claims the Xbox Series X is its most successful debut in history and specifically calls out the Xbox Series S for bringing new players into the fold.
How Does Windows Use Multiple CPU Cores?
We take multi-core awareness for granted these days, but how do the CPU and operating system communicate with each other in the first place?