Certification Authority/Browser Forum adopts new security standards(security.googleblog.com)

42 points by terminalbraid 1 year ago | 8 comments

HTTPS by default(security.googleblog.com)

260 points by jhalderm 1 year ago | 226 comments

Entrust Certificate Distrust(security.googleblog.com)

251 points by iancarroll 2 years ago | 99 comments

OSS Rebuild: open-source, rebuilt to last(security.googleblog.com)

150 points by tasn 1 year ago | 48 comments

Android 14 introduces cellular connectivity security features(security.googleblog.com)

379 points by akyuu 3 years ago | 151 comments

Google Security Blog post announcing Android 14's new cellular connectivity security features, such as options to disable 2G and null-cipher connections.

Vanir: Open-Source Security Search and Patch Validation Tool(security.googleblog.com)

27 points by amram_art 1 year ago | 1 comments

Google Authenticator cloud sync: Google can see the secrets, even while stored(defcon.social)

334 points by Signez 3 years ago | 112 comments

A Mastodon post by Mysk reporting that Google Authenticator's new cloud sync of 2FA secrets is not end-to-end encrypted, so Google can see the secrets.

Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out(csoonline.com)

412 points by miles 2 years ago | 271 comments

CSO Online news article on a Microsoft Authenticator design flaw that overwrites existing MFA accounts when new ones are added, locking users out.

Gmail registration now requires scanning a QR code and sending a text message(discuss.privacyguides.net)

575 points by negura 5 months ago | 427 comments

Privacy Guides forum thread discussing Google account registration now requiring users to send an SMS from their phone (via QR code) rather than receive one.

Winding down Google Sync and Less Secure Apps support(workspaceupdates.googleblog.com)

392 points by sschueller 2 years ago | 239 comments

Google Workspace Updates post announcing that from September 30, 2024, third-party apps using only passwords to access Google Accounts and Google Sync will no longer be supported.

Gmail, Yahoo announce new 2024 authentication requirements for bulk senders(blog.google)

538 points by ilamont 3 years ago | 381 comments

Google Keyword blog post announcing that starting in 2024 Gmail will require bulk senders to authenticate email, support easy unsubscribe, and stay under a spam threshold.

Chromebooks will get 10 years of automatic updates(blog.google)

634 points by twapi 3 years ago | 371 comments

Google Keyword blog post announcing that Chromebooks will receive 10 years of automatic ChromeOS updates.