Google Now Requires JavaScript for Account Logins

You certainly take measures to make sure no one breaks into your home, but someone breaking into your critical online accounts can be almost as bad. Google has added a new layer of security to account logins that seems at first like it could be a security problem of its own. Starting now, Google requires JavaScript in order to log into your account via a web browser. Google says it’s for your own good, though.
If you attempt to sign into Google without JavaScript, you’ll just get an error message explaining that “The browser you’re using doesn’t support JavaScript.” In reality, you’ve probably just turned it off. You’ll have to turn it on, switch to another browser, or only access your Google account via mobile apps. You can turn JavaScript back off after you’ve logged in, though.
JavaScript is an integral part of the modern web, but it can also introduce new security threats. However, Google says it doesn’t think there will be a major issue — only 0.1 percent of Google users shut JavaScript off. A lot of sites are entirely broken without JavaScript, so Google is far from alone here.
Google says its use of JavaScript can help keep your account safe even before you’ve logged in. The mysterious “assessment” utilizes JavaScript to detect suspicious behavior that could indicate your account details have been compromised. Google isn’t talking about what exactly it’s looking for in the assessment, and it likely won’t provide more details. It’s better the internet ne’er-do-wells don’t know how Google secures accounts. Presumably, it has something to do with how text is entered.

Alongside the new JavaScript-authenticated sign-ins, Google also added tools to alert you to potential security issues after you’ve logged in. There’s an automatic security checkup that suggests ways to harden your account. For example, it might recommend activating two-factor authentication or making sure your mobile devices have a secure lock screen enabled. Google also has a revamped account verification system in the event someone does gain access. You can see what account settings have changed and check activity on payment methods in your account.
The JavaScript and new security monitoring tools started rolling out to all accounts on Oct. 31, which wasn’t only Halloween. It was also the last day of Cybersecurity Awareness Month.
Continue reading

Microsoft ‘Clarifies’ Windows 11 Requirements, Pulls PC Health Check App
Microsoft has published a new blog post hoping to clear up confusion on which systems are and are not supported in Windows 11. It helps — a little.

Riot Will Use Windows 11’s TPM 2.0 Requirement to Ban Cheaters From Valorant
Riot will use Windows 11's TPM requirement to kick cheaters out of Valorant, but the technology could easily be abused.

Europe Moves Forward With Plans to Require USB-C Ports on All Phones
The European Commission has announced plans to move forward with legislation that would force all smartphone makers, including Apple, to ship devices with USB-C. Apple, predictably, does not like this idea one bit.

HDMI 2.1 Devices Are Not Required to Support Any New HDMI 2.1 Features
HDMI 2.1 devices are not actually required to offer any HDMI 2.0 features. The entire set of improvements HDMI 2.1 is supposed to offer are "optional," it turns out.