Microsoft doesn't require passwords anymore

Microsoft users might be able to throw away the sticky note taped to their laptop: the company introduced a new option to delete password authentication.

Microsoft uses its authenticator app, fingerprint/facial recognition, and SMS/email verification codes to verify accounts— which may be more secure than using "soccerlover123" or "Mychemicalromance1998!" — Read the rest

Gab hacked — 70 GB of passwords, private posts taken, says transparency group DDoSecrets

The far-right hate platform Gab has been hacked and 70GB of private posts and other data are being made available to journalists and social scientists, says Distributed Denial of Secrets cofounder Emma Best.

From Wired:

 "It contains pretty much everything on Gab, including user data and private posts, everything someone needs to run a nearly complete analysis on Gab users and content," Best wrote in a text message interview with WIRED.

Read the rest

How the Fido Alliance wants to eliminate passwords

I use a password manager to deal with my hundreds of different passwords, and it's pretty convenient to use on my phone and laptop. But the Fido (fast identification online) Alliance thinks getting access to your online accounts could be even more convenient and secure by replacing passwords with your trusted devices. — Read the rest

Search-warrant demands that Google turn over account info, Android info, all accounts and passwords, calendar, contacts, cloud docs, financial data, photos, location history, search history, call records, etc

Scott Budnick (producer of the "Hangover" movies) is embroiled in a complicated feud with an LA homicide cop named Sgt. Richard Biddle; Biddle has pursued his investigation against Budnick by securing an incredibly broad search-warrant to seize his Google data.

Facebook admits harvesting contacts of the 1.5m email passwords it asked for

A few weeks ago, we learned that Facebook asked for the personal email passwords of some users logging in. Today, it admits that it used the passwords to harvest 1.5m users' email contacts without consent. Facebook claims that doing this was "unintentional," despite contact harvesting being the plainly obvious purpose of demanding people's email passwords and notifications in Facebook informing users that their contacts were being imported. — Read the rest