One thumb up for Facebook security improvements
Outstandingly mediocre
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
Security changes designed to curtail the spam and scams that have become endemic on Facebook over recent months have received a cautious welcome from security watchers.
Facebook has introduced a raft of features including: a known-bad-site blacklist (via a partnership with crowd-sourced blacklist outfit Web of Trust); protection against clickjacking; and limited support for two-factor authentication. As an opt-in service, Facebook will send users an SMS every time someone logs in from "a new or unrecognised device".
Net security firm Sophos welcomed the changes as a step in the right direction but criticised the dominant social network for not going far enough towards creating a genuinely safe online environment. Further measures Facebook ought to introduce include a popup confirmation dialog every time a user "likes" something, and an option to apply two-factor authentication for every login, not just for those from new devices.
"There's much more they could be doing, so we all need to maintain pressure on Facebook to keep on improving," said Paul Ducklin, Head of Technology, Asia Pacific at Sophos.
A blog post by Sophos, explaining its take on the changes, can be found here. ®
COMMENTS
Tell us more to protect you
"As an opt-in service, Facebook will send users an SMS every time someone logs in from "a new or unrecognised device"."
So Facebook wants my mobile phone number?
So not going to happen.
Oh no
Is Graham Clulely ill?
Hope he gets better and back to work again soon. Wouldn't want to miss out on what Sophos think.
um
I should have added I'm talking about the Sophos guy, not FaceBook - fair play to FaceBook for this, I guess it'll help the people who take FB WAY too seriously.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
