Security Reminder

The latest Yahoo breach holds the record for the largest single breach of user account. The hack, which occurred in 2014, enabled hackers to collect personal information associated with at least half billion Yahoo accounts—names, email addresses, phone numbers, birth dates, and even secshutterstock_226276627urity questions and answers, according to Yahoo’s press release. What’s even scarier is that encrypted passwords, which are jumbled so only a person with the right passcode can read them, were also stolen.

As consequence, Yahoo users are encouraged to review their accounts for suspicious activity, change their passwords and security questions, avoid clicking on suspicious links and consider using a new authentication tool called Yahoo Account Key. Of course, there is always the option to switch to Gmail or iCloud.

According to research from Alertsec, about 97 percent of Americans lose trust in companies like Yahoo after massive data breaches, so it will take Yahoo quite some time before it starts rebuilding their users’ trust. However, when a company has allowed their customers’ data to fall into the hands of criminals, regaining trust is difficult, and in some cases, impossible.

This breach serves as a reminder of how widespread hacking is and raises again the question of whether the current system of passwords and security questions provides the best kind of protection, and the answer seems pretty obvious, something needs to change. Cybersecurity specialists recommend using a different password for each account, while other experts are working on alternatives to passwords such as one-time passwords, biometrics and the two-factor authentication process.

“Cybercriminals know that consumers use the same passwords across websites and applications, which is why these millions of leaked password credentials are so useful for perpetuating fraud,” said Brett McDowell, executive director of the FIDO Alliance, an organization that vets the security of password alternatives. “We need to take that ability away from criminals, and the only way to do that is to stop relying on passwords altogether.”

Most likely unrelated to the Yahoo breach, Lenovo announced a partnership to bring FIDO fingerprint authentication to its laptops. The joint venture consists of Lenovo, Synaptics and PayPal and plans to combine Lenovo’s laptops with Intel’s on-chip hardware security, allowing the customer to use Synaptics’ biometric sensors to replace passwords for logging into FIDO-compliant services (such as PayPal). This is secured by FIDO’s security spec, which already shows widespread support across the industry.

The FIDO Alliance was founded in 2013 by Lenovo and PayPal, backed by major companies such as Google, Bank of America and Microsoft, having as goal the development of new methods of authentication that are simpler and more secure than passwords. It’s good to know that, back in 2015, Microsoft announced that it would be integrating FIDO support into Windows 10.

So far, no timeline was given as to when the first batch of FIDO-enabled laptops would be released, but many point to CES 2017 that’s just around the corner. In the meantime, stay safe!

SHARE POST

Facebook LinkedIN

AUTHOR

Anca Gagiuc brings more than a decade of experience within the real estate industry. She is a senior associate editor with Commercial Property Executive and Multi-Housing News who also writes monthly multifamily reports at Yardi Matrix. Contact Anca at [email protected]

Recent articles

Two professionals looking at a laptop together

How to calculate loan-to-value (LTV) ratio in commercial real estate

Learn what the loan-to-value ratio is and how it impacts loan terms, pricing and risk assessment in commercial real estate. This article explains how to calculate loan-to-value ratio and how it impacts loan structure and financing decisions.

Computer screenshot with four people onscreen

AI in CRE valuation: Start small, build trust

Learn how commercial real estate teams can apply AI to valuation and appraisal workflows by focusing on better data, clear outcomes and human oversight.

AI in senior living: practical tools for stronger outcomes

Practical ways to use AI in senior living

AI in senior living communities works best when it makes daily tasks easier and improves outcomes for residents. Learn practical ways to use AI across sales, care and operations.