Showing posts with label heavily encrypted. Show all posts
Showing posts with label heavily encrypted. Show all posts

Saturday, March 15, 2014

Google encrypts search text in China.

BBC
NEWS TECHNOLOGY

Google encrypts search text in China

Baidu logo Google's share of the Chinese search market is tiny compared with that of Baidu

Related Stories

Google has started to encrypt searches made by people in China.
The move is widely seen as a way for users of the search engine to avoid official scrutiny of where they go online, reports the Washington Post.
It is also seen as a reaction to continuing revelations about the extent of surveillance of web browsing habits by the National Security Agency (NSA) .
Google said it was now encrypting all the text involved in searches "by default" around the world.
Users in other countries, such as the US and UK, have had the option to encrypt searches since 2010.
"The revelations of this past summer underscored our need to strengthen our networks," said Google spokeswoman Nikki Christoff in a statement.
Documents taken by whistleblower Edward Snowden have shown that the NSA has had regular access to the data centres operated by Google and many other web firms.
In China, the web browsing and social media habits of citizens are monitored by a very sophisticated system that attempts to stop people finding out about or sharing information on sensitive subjects.
Ms Christoff said encrypting search text was just one of many improvements it had made in the past few months to help people maintain their privacy.
Google reduced its presence in China in 2010 after it clashed with the nation's authorities over demands to censor searches or redirect people to government-approved sites. This has meant that Google has a very small share of all searches, about 5%, carried out in China,
Most Chinese people tend to use the home-grown Baidu search engine that does comply with official censorship requests.
In Europe, Google has come under fire for not doing enough to protect users' privacy. In January EU Justice Commissioner Viviane Reding said firms should face hefty fines if they abused personal data. She said fines handed down to Google over data breaches were "pocket money".

More on This Story

Related Stories

Tuesday, February 18, 2014

Google acquires audio ID startup SlickLogin



News

Google acquires audio ID startup SlickLogin

Warwick Ashford Monday 17 February 2014 08:58

Google has acquired Israeli startup SlickLogin that has developed technology that enables online services to authenticate a user with sound waves.
SlickLogin confirmed the acquisition on its website but did not provide any financial details of the deal.
Security-iStock_Henrik5000.jpg
Online services that use SlickLogin play a unique sound inaudible to humans over a user’s computer speakers which is picked up by the SlickLogin smartphone app and sent back to confirm identity.
SlickLogin's technology uses a combination of protocols, including Wi-Fi, Bluetooth and QR to verify that a user's smartphone is in the same location as the computer being used to access to the online service.
The technology’s creators claim it offers “military-grade” security as everything is heavily encrypted and the sound transmissions will work only with the user’s smartphone at a particular moment in time.
According to the firm’s website, SlickLogin’s three founders are recent graduates of the Israeli defence force’s elite cyber security unit, and have more than six years’ experience working on cutting-edge information security projects.
The technology can be used either as a replacement for a password or as an additional security layer to enable two-factor authentication.
Google was one of the first online firms to offer two-factor authentication to users, with several others following suit in light of several high-profile leaks of usernames and passwords.
Most two-factor authentication systems in use rely on one time pass cards sent via text message or codes generated by tokens or other special gadgets.
However, text-based systems are vulnerable because if hackers compromise accounts they can change the mobile number set to receive the codes.
SlickLogin eliminates this vulnerability and does not require users to carry around a separate gadget for generating codes as used by some UK banks.
Some analysts expect Google to use the technology to enable two-factor authentication for Android devices and all Google services.
The acquisition is consistent with Google’s goal to enable easier, more-secure online authentication.
In October 2013, Google confirmed that it is planning a two-factor authentication token, and the firm is also a member of the  Fast IDentity Online (Fido) Alliance.
The alliance is an open industry consortium set up to develop standards for simpler, stronger authentication and recently published draft technical specifications for a new authentication protocol.
The Online Security Transaction Protocol could eliminate the use of passwords in the future by enabling the interoperability of a variety of multi-factor identity checks.
These include include biometrics, Trusted Platform Modules (TPMs), USB security tokens, embedded secure elements (eSEs) and smart cards.

Read More