Skip to main content

US carriers introduce Project Verify to replace individual app passwords

By

Four major US carriers — AT&T, Sprint, T-Mobile, and Verizon — are joining forces to launch a single sign-on service for smartphones. The service, called Project Verify, authenticates app logins so that users don’t need to memorize passwords for all their apps. The companies say their solution verifies users through their phone number, phone account type, SIM card details, IP address, and account tenure. Essentially, your phone serves as the verification method with details that are hard to spoof.

Users have to manually grant apps permission to use Verify, and it works similarly to how you might log into some services through Gmail or Facebook instead of using a unique account password. Of course, these apps also have to choose to work with Verify, and the program hasn’t listed any partners or when it intends to launch. The service can serve as your two-factor authentication method, too, instead of an emailed or texted code that can be intercepted.

Users might not be totally safe if their phone is stolen. The Verify program automatically logs users in, so long as they have access to their phone’s home screen and apps. Obviously, installing a PIN or other biometric data as your lock screen’s protection would keep attackers out of your phone, but assuming they passed through that point, it’s unclear how easily they could access all your apps. Certain apps can require additional verification methods beyond the Verify app, a spokesperson says. So a banking app, for example, could also require a PIN, biometric data, or behavioral data. If someone managed to gain access to your phone’s home screen, however, and the apps you use don’t require any additional verification methods, someone could likely log into all your accounts.

Single sign-on services are clearly convenient; fewer passwords is a great thing. They’re also an alternative to installing a password manager on your phone, which would still require you to remember the password to the app. Still, if someone compromises your one account (or device in this case), everything else will follow, so it could introduce some security liabilities.



from The Verge - Teches https://ift.tt/2CR5gTp
Labels:

Comments

  1. Vishal KumarJuly 21, 2021 at 10:22 PM

    Very efficiently written information. It will be valuable to everyone who uses it, including myself. Thanks.
    I can say this is the best way to know gain knowledge thank You!!
    Regards

    Tinder gold hack

    ReplyDelete

Post a Comment

Popular posts from this blog

Magic Leap is shipping across (most of) the US

By
As Magic Leap holds the first developer conference for its Magic Leap One mixed reality headset, that headset has started shipping across the contiguous United States, instead of in a set of select markets. The Magic Leap One Creator Edition costs $2,295, just like before, but there’s now an installment plan that starts at $96 per month. All orders are supposed to arrive within 60 days. The Magic Leap One Creator Edition went on sale in early August, and while Magic Leap has touted it as a fully functional device, it’s basically meant for people who want to design apps, games, or art for mixed reality. We were ambivalent toward the hardware, which we found limited, and we noted that Magic Leap hadn’t shown off a lot of material that showcased its potential. The company’s developer conference keynote has revealed several new projects. Among other things, Spider-Man studio Insomniac Games is building an experience that will let you grow a holographic creature on your tabletop, and...
Post a Comment
Read more

The company behind the adorably doomed robot Kuri is shutting down

By
Less than a month after Mayfield Robotics said it was stopping production on its Kuri home robot, the company announced today on its blog that the company will be shutting down. Mayfield Robotics launched in 2015 as part of Bosch’s Startup Platform, but struggled to integrate with and find a business fit within Bosch. Since the cancellation of its Kuri robot, Mayfield Robotics had been looking for external partners for long-term technology development, but was unable to find investment to support its future. The company will cease all operations by October 31st. We first met Kuri at CES 2017, and it wasn’t yet able to showcase all the features it was promised to have in the future. The robot was supposed to have smart assistant functionalities like an Amazon Echo, but with a much cuter face and movable body. Promo videos showed it working as a moving home security camera that was controllable through the Kuri app, but in the demonstration we saw, it only had as much functionality a...
Post a Comment
Read more

Amazon’s plans for a New York office are under new scrutiny

By
A month ago, when Amazon announced that it would build regional offices in New York and Virginia at great expense to the taxpayers there, I wrote that it had misunderstood the moment : Perhaps the furor over Amazon’s regional offices will blow over. But it’s hard not to feel today as if the company misread the room — overestimating the public’s appetite for a billion-dollar giveaway to one of the world’s biggest companies, and underestimating the public’s ability to raise hell on- and offline. Amazon may yet feel that pain, in the long run. Today, Amazon met the room: 150 protesters who showed up to the first New York City Council hearing about the plan. According to reports from the scene, demonstrators’ concerns start with the $3 billion in incentives that New York plans to give Amazon in exchange for locating there — and, it says, creating 25,000 jobs. Here’s Leticia Miranda in BuzzFeed : ”You’re worth a trillion dollars,” New York City Council Speaker Corey Johnson told the ...
Post a Comment
Read more