Feeds

One thumb up for Facebook security improvements

Outstandingly mediocre

Top three mobile application threats

Security changes designed to curtail the spam and scams that have become endemic on Facebook over recent months have received a cautious welcome from security watchers.

Facebook has introduced a raft of features including: a known-bad-site blacklist (via a partnership with crowd-sourced blacklist outfit Web of Trust); protection against clickjacking; and limited support for two-factor authentication. As an opt-in service, Facebook will send users an SMS every time someone logs in from "a new or unrecognised device".

Net security firm Sophos welcomed the changes as a step in the right direction but criticised the dominant social network for not going far enough towards creating a genuinely safe online environment. Further measures Facebook ought to introduce include a popup confirmation dialog every time a user "likes" something, and an option to apply two-factor authentication for every login, not just for those from new devices.

"There's much more they could be doing, so we all need to maintain pressure on Facebook to keep on improving," said Paul Ducklin, Head of Technology, Asia Pacific at Sophos.

A blog post by Sophos, explaining its take on the changes, can be found here. ®

Combat fraud and increase customer satisfaction

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Canadian taxman says hundreds pierced by Heartbleed SSL skewer
900 social insurance numbers nicked, says revenue watchman
German space centre endures cyber attack
Chinese code retrieved but NSA hack not ruled out
Burnt out on patches this month? Oracle's got 104 MORE fixes for you
Mass patch for issues across its software catalog
Reddit users discover iOS malware threat
'Unflod Baby Panda' looks to snatch Apple IDs
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.