Google’s New Privacy Update May Not Be Completely Secure

Google’s recent update for its two-factor authentication app introduced a widely demanded feature where users can synchronize secrets across multiple devices. However, a thorough Analysis of the privacy update revealed that the secrets were not completely encrypted and Google has the ability to see the secrets.

Cybersecurity duo Mysk took to Twitter earlier today to share the results of their Analysis of Google’s new privacy update. According to the security researchers, the network traffic when the app syncs the secrets is not end-to-end encrypted. This essentially means that Google can see the secrets, even when they’re stored on its servers.

While the update allows users to sign in with their Google Account and sync two-factor authentication secrets across their iOS and Android devices, the secrets are technically vulnerable. If a malicious actor manages to gain access to the secret, it will be relatively easy to generate a one-time OTP and beat the two-factor authentication measures in place.

In addition to that, 2FA QR codes usually contain other information including the account name and name of the service. Since Google has access to the secrets, it can potentially use private information for its benefit to display personalized advertisements.

The cybersecurity experts also found that when a user exports his/her data from Google, the two-factor authentication secrets stored in the user’s account are not included in the exported data. Mysk has recommended users to exercise caution while dealing with the new privacy update.

“The bottom line: although syncing 2FA secrets across devices is convenient, it comes at the expense of your privacy. Fortunately, Google Authenticator still offers the option to use the app without signing in or syncing secrets,” Mysk tweeted.

Comments

Post a Comment

Popular posts from this blog

XRP Futures Open Interest Surpass $1.1 Billion in 24 Hours

Image
XRP made notable strides in the crypto market, leading to substantial gains. Within the last 24 hours, open interest on futures contracts linked to XRP exceeded $1.1 billion. This achievement marked another milestone, surpassing the $1 billion mark set the previous week and establishing a new record high for the year. Open interest is the number of unsettled futures contracts. This has experienced a 21% increase since earlier this week. Among these positions, the largest share of about $459 million is held on the crypto exchange Binance. Bybit was next in line at $304 million and Bitget followed suit with $263 million. Source A higher open interest indicates a surge in investments or bets on various assets. This signifies the influx of new funds into the financial market. Typically, this suggested an expectation for the current trend to persist. In parallel, the price of XRP experienced an astonishing surge of 67.42% in the past few days. At press time, the altcoin was trad...
Read more

Analyst Predicts Trends Using Whales’ Onchain Borrowing Data

Traders can tell when whales go long by monitoring the Aave/Compound stablecoin borrowing pattern, according to The Data Nerd, an onchain data analyst. According to the analyst, four whales have used this strategy in the last 24 hours. Quick tip: Monitoring Aave/Compound stablecoin borrow can tell you when whales go long. We have created a @DuneAnalytics dashboard for you to easily follow this behavior. So far we have noticed 4 whales using this strategy since yesterday pic.twitter.com/RTwZ8LyWCL — The Data Nerd (@OnchainDataNerd) April 23, 2023 In a Twitter thread, The Data Nerd explained that similar to using margin or leverage on centralized exchanges (CEX), whales would go long by borrowing stablecoin using Aave or CompoundFinance. They would follow this up by using the amount to buy assets on decentralized exchanges (DEX) or to deposit to CEX. They repeat the cycle and use it as a profitable system in the cryptocurrency market. By monitoring the action of w...
Read more

US prosecutors outline jury instructions for SBF’s trial

US prosecutors have submitted their proposed instructions to the jury for the upcoming trial of FTX co-founder Sam Bankman-Fried, set to begin in October. The detailed 100-page filing, dated Aug. 21, outlines how the prosecutors wish Judge Lewis Kaplan to guide the jury in Bankman-Fried’s case. The instructions are based on previous guidance the New York district judge has provided in other cases. Bankman-Fried faces seven charges, including fraud, money laundering conspiracy, wire fraud, commodities fraud, and securities fraud. The filing breaks down each charge, suggesting how Judge Kaplan should present the allegations, the burden of proof required for a guilty verdict, and the evidence related to each charge. The document also includes proposed guidelines for how the jury should assess the evidence, deliberate, and conclude each count. While such proposals are standard in criminal trial s, the final decision on jury instructions rests with Judge Kaplan. The former FTX c...
Read more