{"id":284,"date":"2014-10-30T12:47:08","date_gmt":"2014-10-30T11:47:08","guid":{"rendered":"https:\/\/yanado.com\/blog\/?p=284"},"modified":"2016-03-03T12:17:42","modified_gmt":"2016-03-03T11:17:42","slug":"is-gmail-more-secure-with-the-new-security-key","status":"publish","type":"post","link":"https:\/\/yanado.com\/blog\/is-gmail-more-secure-with-the-new-security-key\/","title":{"rendered":"Is Gmail More Secure With The New Security Key?"},"content":{"rendered":"<p>Since the famous Box &amp; Dropbox file leak, user safety has become one of the hottest topics on the entire web again.<\/p>\n<p>For those who are not familiar with what I\u2019m writing about, on May 5th, 2014, a major vulnerability has been discovered on these above mentioned platforms.<\/p>\n<p>Due to poor security updates, privately shared files were allowed to be read by third parties.<\/p>\n<p><a href=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/Snapchat-Dropbox-Hacked.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-289\" src=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/Snapchat-Dropbox-Hacked.jpg\" alt=\"Snapchat-Dropbox-Hacked\" width=\"600\" height=\"434\" srcset=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/Snapchat-Dropbox-Hacked.jpg 600w, https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/Snapchat-Dropbox-Hacked-300x217.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<p>While doing their standard AdWords and Analytics analysis, the guys at Intralinks discovered that by clicking on specific links, they gained access to some pretty sensitive files from their competitors, like tax refunds, bank records, business plans \u2013 all serious information that Box and Dropbox promised to keep protected.<\/p>\n<p>After this disturbing privacy problem got public, and various types of business owners started to question cloud-based solutions for distributing their company information, Dropbox responded quickly with a blog post, saying how they fixed all privacy issues and disable all the troubled links, which, I if may comment, isn\u2019t an ideal end for this case.<\/p>\n<p>This kind of major mistake unintentionally affected all other cloud services and gave them additional work in proving that their systems are far more solid than their competitors.<\/p>\n<p>This is just one case out of many that states that we quickly need to implement new and advanced security measures.<\/p>\n<p>One of the biggest problems in protecting data is that the wast majority of people tends to value convenience over security.<\/p>\n<p>Properly securing your information online is no easy task. This kind of thing requires constant effort and willingness to follow up on boring procedures that eventually tend to take a lot of your time.<\/p>\n<p>Sure, you don\u2019t HAVE TO use advanced protection services, but they\u2019re highly recommended because, think about it in this way &#8211; you live in a bad neighborhood, and you should get a guard dog if you want to feel safe. Having a fence just isn\u2019t enough.<\/p>\n<p>According to Kaspersky Labs, a bizarre number of <strong>1.131.000.866 malicious attacks<\/strong> to computer and mobile devices has been registered in the first quarter of 2014.<\/p>\n<p>I don\u2019t know about you, but in my mind, these are some seriously scary numbers.<\/p>\n<p>In an attempt to improve their security and ensure you as a user that you don\u2019t need to worry about your data being abused or stolen, Google has released a <strong>2-step verification system with an additional security key<\/strong>, to give you that extra layer of protection for your Google Accounts.<\/p>\n<h2>So, how does this 2-step verification system work?<\/h2>\n<p>Once enabled, you\u2019re asked for a verification code from your phone in addition to your password, to prove that it\u2019s really you signing in from an unfamiliar device.<\/p>\n<p>According to guys at Google, hackers usually work from afar, so this second factor makes it much harder for a hacker who has your password to access your account, since they don\u2019t have your phone.<\/p>\n<p>For those who are hyper sensitive when it comes to securing their data, Google has created a special \u201cSecurity Key\u201d, to give them that extra step in blocking potential malicious activity.<\/p>\n<p>Security Key is a physical USB, and it\u2019s basically a second factor that only works after verifying the login site is truly a Google website, not a fake one who\u2019s just pretending to be Google.<\/p>\n<p>Rather than typing a code, you just insert your Security Key into your computer\u2019s USB port and tap it.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-287\" src=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/51oQz77mo7L._SL1500_.0.0_standard_800.0.jpg\" alt=\"Gmail Security Key\" width=\"675\" height=\"450\" srcset=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/51oQz77mo7L._SL1500_.0.0_standard_800.0.jpg 800w, https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/51oQz77mo7L._SL1500_.0.0_standard_800.0-300x199.jpg 300w\" sizes=\"auto, (max-width: 675px) 100vw, 675px\" \/>When you sign into your Google Account using Chrome and Security Key, the guys at Google say that you can rest with ease, knowing that the cryptographic signature cannot be phished.<\/p>\n<p>Google\u2019s 2-step security system has incorporate into its service the U2F standard, a product of a FIDO Alliance, an industry consortium that\u2019s been working to come up with specifications that support a range of more robust authentication technologies, including biometric identifiers and USB security tokens.<\/p>\n<p>According to Google engineers, security key is far more efficient than their previous 2-step authorization plan, because it uses cryptography instead of verification codes and it automatically works only with the website it\u2019s supposed to work with.<\/p>\n<h2>What are the limitations?<\/h2>\n<p>The people from Google tried their best to produce a flawless security system, and I think they came pretty close.<br \/>\nGoogle\u2019s 2-step verification system really protects you against bad passwords and offline phishing.<\/p>\n<p>It\u2019s a solid solution for those who are interested in going that extra mile to ensure the safety of their data. The only downside of using this system is that it doesn\u2019t work with mobile-only users, because it requires a USB port.<\/p>\n<p>Also, I have to add, it only works for Google properties on Chrome.<\/p>\n<p>A lot of people, especially commuters use their phones for more than just social media and pointless browsing. There is a huge market there for advanced security and encryption services. Reading tons of articles about the new iPhone6 and all its features, it comes to my mind that Google should put more focus on using NFC technology, instead of physical authentication tools.<\/p>\n<p><a href=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/NFC-Security.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-292\" src=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/NFC-Security.jpg\" alt=\"NFC-Security\" width=\"398\" height=\"450\" srcset=\"https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/NFC-Security.jpg 442w, https:\/\/yanado.com\/blog\/wp-content\/uploads\/2014\/10\/NFC-Security-265x300.jpg 265w\" sizes=\"auto, (max-width: 398px) 100vw, 398px\" \/><\/a><\/p>\n<p>Instead of forcing on us a USB device that could turn out to be a problem if the stick itself or a port where we\u2019re trying to put it in isn\u2019t working right, we could use these kind of specific wireless solution and allow ourselves the luxury of securely interacting with all the objects in our close surrounding with just one tap.<\/p>\n<p>Wouldn\u2019t that be great? I sure hope that someone at Google comes up with the same idea and decides to sell it to the right people at his company. If done right, this idea could be the next big thing.<\/p>\n<p>What do you think?<\/p>\n<p><div class=\"swp_social_panel swp_horizontal_panel swp_flat_fresh  swp_default_full_color swp_individual_full_color swp_other_full_color scale-100  scale-\" data-min-width=\"1100\" data-float-color=\"#ffffff\" data-float=\"bottom\" data-float-mobile=\"none\" data-transition=\"slide\" data-post-id=\"284\" ><div class=\"nc_tweetContainer swp_share_button swp_facebook\" data-network=\"facebook\"><a class=\"nc_tweet swp_share_link\" rel=\"nofollow noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.facebook.com\/share.php?u=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\" data-link=\"https:\/\/www.facebook.com\/share.php?u=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\"><span class=\"swp_count swp_hide\"><span class=\"iconFiller\"><span class=\"spaceManWilly\"><i class=\"sw swp_facebook_icon\"><\/i><span class=\"swp_share\">Share<\/span><\/span><\/span><\/span><\/a><\/div><div class=\"nc_tweetContainer swp_share_button swp_twitter\" data-network=\"twitter\"><a class=\"nc_tweet swp_share_link\" rel=\"nofollow noreferrer noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/intent\/tweet?text=Is+Gmail+More+Secure+With+The+New+Security+Key%3F&url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F&via=YanadoTool\" data-link=\"https:\/\/twitter.com\/intent\/tweet?text=Is+Gmail+More+Secure+With+The+New+Security+Key%3F&url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F&via=YanadoTool\"><span class=\"swp_count swp_hide\"><span class=\"iconFiller\"><span class=\"spaceManWilly\"><i class=\"sw swp_twitter_icon\"><\/i><span class=\"swp_share\">Tweet<\/span><\/span><\/span><\/span><\/a><\/div><div class=\"nc_tweetContainer swp_share_button swp_linkedin\" data-network=\"linkedin\"><a class=\"nc_tweet swp_share_link\" rel=\"nofollow noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\" data-link=\"https:\/\/www.linkedin.com\/cws\/share?url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\"><span class=\"iconFiller\"><span class=\"spaceManWilly\"><i class=\"sw swp_linkedin_icon\"><\/i><span class=\"swp_share\">Share<\/span><\/span><\/span><span class=\"swp_count\">8<\/span><\/a><\/div><div class=\"nc_tweetContainer swp_share_button total_shares total_sharesalt\" ><span class=\"swp_count \">0 <span class=\"swp_label\">Shares<\/span><\/span><\/div><\/div><br \/>\n\r\n    <div class=\"subscribe\">\r\n        <div class=\"subscribe_content\">\r\n        <h1>Subscribe to Get More Reviews<\/h1>\r\n        <!--<h3>Reviews of the productivity tools every business needs<\/h3>-->\r\n            <div class=\"widget-content clearfix\">\r\n                <form action=\"https:\/\/netdokumenti.us2.list-manage.com\/subscribe\/post?u=04f16884b0ed8c0e274b55443&amp;id=7c89eb2054\" method=\"post\" class=\"mc-embedded-subscribe-form\" name=\"mc-embedded-subscribe-form\" class=\"validate\" target=\"_blank\" novalidate>\r\n\r\n                    <div class=\"input-group\">\r\n                        <input type=\"email\" value=\"\" name=\"EMAIL\" class=\"form-control\" placeholder=\"Enter your email address\">\r\n                                  <span class=\"input-group-btn\">\r\n                                    <input type=\"submit\" value=\"Send Me More Productivity Tools\" name=\"subscribe\"\r\n                                           class=\"btn btn-orange btn-sidebar-subscribe\">\r\n                                  <\/span>\r\n                    <\/div>\r\n                     <!-- real people should not fill this in and expect good things - do not remove this or risk form bot signups-->\r\n                    <div style=\"position: absolute; left: -5000px;\"><input type=\"text\" name=\"b_04f16884b0ed8c0e274b55443_7c89eb2054\" tabindex=\"-1\" value=\"\"><\/div>\r\n                <\/form>\r\n                <!-- <\/div> -->\r\n                 <!--<script type='text\/javascript' src='\/\/s3.amazonaws.com\/downloads.mailchimp.com\/js\/mc-validate.js'><\/script><script type='text\/javascript'>(function($) {window.fnames = new Array(); window.ftypes = new Array();fnames[0]='EMAIL';ftypes[0]='email';fnames[1]='FNAME';ftypes[1]='text';fnames[2]='LNAME';ftypes[2]='text';}(jQuery));var  = jQuery.noConflict(true);<\/script>-->\r\n            <\/div>\r\n        <\/div>\r\n    <\/div>\r\n<\/p>\n<div class=\"swp-hidden-panel-wrap\" style=\"display: none; visibility: collapse; opacity: 0\"><div class=\"swp_social_panel swp_horizontal_panel swp_flat_fresh  swp_default_full_color swp_individual_full_color swp_other_full_color scale-100  scale-\" data-min-width=\"1100\" data-float-color=\"#ffffff\" data-float=\"bottom\" data-float-mobile=\"none\" data-transition=\"slide\" data-post-id=\"284\" ><div class=\"nc_tweetContainer swp_share_button swp_facebook\" data-network=\"facebook\"><a class=\"nc_tweet swp_share_link\" rel=\"nofollow noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.facebook.com\/share.php?u=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\" data-link=\"https:\/\/www.facebook.com\/share.php?u=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\"><span class=\"swp_count swp_hide\"><span class=\"iconFiller\"><span class=\"spaceManWilly\"><i class=\"sw swp_facebook_icon\"><\/i><span class=\"swp_share\">Share<\/span><\/span><\/span><\/span><\/a><\/div><div class=\"nc_tweetContainer swp_share_button swp_twitter\" data-network=\"twitter\"><a class=\"nc_tweet swp_share_link\" rel=\"nofollow noreferrer noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/intent\/tweet?text=Is+Gmail+More+Secure+With+The+New+Security+Key%3F&url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F&via=YanadoTool\" data-link=\"https:\/\/twitter.com\/intent\/tweet?text=Is+Gmail+More+Secure+With+The+New+Security+Key%3F&url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F&via=YanadoTool\"><span class=\"swp_count swp_hide\"><span class=\"iconFiller\"><span class=\"spaceManWilly\"><i class=\"sw swp_twitter_icon\"><\/i><span class=\"swp_share\">Tweet<\/span><\/span><\/span><\/span><\/a><\/div><div class=\"nc_tweetContainer swp_share_button swp_linkedin\" data-network=\"linkedin\"><a class=\"nc_tweet swp_share_link\" rel=\"nofollow noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/cws\/share?url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\" data-link=\"https:\/\/www.linkedin.com\/cws\/share?url=https%3A%2F%2Fyanado.com%2Fblog%2Fis-gmail-more-secure-with-the-new-security-key%2F\"><span class=\"iconFiller\"><span class=\"spaceManWilly\"><i class=\"sw swp_linkedin_icon\"><\/i><span class=\"swp_share\">Share<\/span><\/span><\/span><span class=\"swp_count\">8<\/span><\/a><\/div><div class=\"nc_tweetContainer swp_share_button total_shares total_sharesalt\" ><span class=\"swp_count \">0 <span class=\"swp_label\">Shares<\/span><\/span><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Since the famous Box &amp; Dropbox file leak, user safety has become one of the hottest topics on the entire web again. For those who are not familiar with what I\u2019m writing about, on May 5th, 2014, a major vulnerability has been discovered on these above mentioned platforms. Due to poor security updates, privately shared&#8230;<\/p>\n","protected":false},"author":1,"featured_media":980,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[138],"tags":[],"class_list":["post-284","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-productivity","hd-light-blue"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/posts\/284","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/comments?post=284"}],"version-history":[{"count":9,"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/posts\/284\/revisions"}],"predecessor-version":[{"id":1475,"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/posts\/284\/revisions\/1475"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/media\/980"}],"wp:attachment":[{"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/media?parent=284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/categories?post=284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/yanado.com\/blog\/wp-json\/wp\/v2\/tags?post=284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}