Dirk Balfanz

[Ricky Mondello @rmondello]

Huge day for passkeys!

Starting today, you can set up a passkey for your Google account. At this stage of the industry-wide transition, setting up a passkey doesn’t invalidate your password, so it’s 100% safe to set up. https://t.co/vyrTdEghdd

[Ricky Mondello @rmondello]

New today at #WWDC21! 🔑 Passwords are fundamentally flawed. The future of app/website authentication for everyone should be secure by design, easy to use, and built on standards. Learn about passkeys — synced WebAuthn credentials — in iCloud Keychain. https://t.co/hc0u2AzWiv

[Devdatta Akhawe @frgx]

1/ Recently, we switched Figma's Okta to only allow phish-proof webauthn/FIDO MFA. I wanted to share a few things that helped us and might come in handy for any other security team.

[Roman Kirillov @sgzmd]

@Google Advanced Protection users now benefit of additional protections on @Android https://t.co/cKjDHt4rqv

[mark risher @mrisher]

Today we've made the @Google Advanced Protection Program even easier: No separate security keys required, just use your Android or iPhone to enroll instantly. https://t.co/jjqdsOR514

[mark risher @mrisher]

Advanced Protection is the Internet’s strongest and most unphishable account security. To help protect the people most at risk, we’re offering up to $35 off Titan security keys. Use the code B-TITAN35OFF for up to $35 off at https://t.co/46EzYIPScj 🔐

[Shane Huntley @ShaneHuntley]

Blog post about the work Google's Threat Analysis Group (TAG) does. Targeted phishing stats, Sandworm campaign details and disinfo campaign takedowns. We plan to do more of these. https://t.co/fhZ912A8l5 @t_gidwani @billyleonard

[Stammy @Stammy]

Just published 15,000+ words on security keys. 🔐📱💻

With SIM attacks at their highest, now is a great time to take a closer look at your online security.

Removing SMS from your two-factor auth is a start, but authenticator apps have downsides too...

https://t.co/Dk0MPJHL2V

[Shane Huntley @ShaneHuntley]

If you care about your account security please check this out and consider enabling. This is serious protection designed based on Google’s experience with countering targeted threats. https://t.co/CzEswyXPrs

[Dirk Balfanz @balfanz]

@boblord sorry to say it won't be recorded. Go to https://t.co/WDK2hT1J5P and follow the instructions - that's almost like being there! :)

[Dirk Balfanz @balfanz]

@waynepope Hi - can you point me to the bug and patch?

[Dirk Balfanz @balfanz]

@ericlaw yes, temporary channel id extension # in Chrome 24 is 30031 (0x754F). (Sorry for delay - didn't see the mention)

[Dirk Balfanz @balfanz]

Survey: Why do you log out? http://t.co/jbvPahyw

[Dirk Balfanz @balfanz]

@johnbrayton nice write-up. Will shoot you an email. /CC @awans

[Dirk Balfanz @balfanz]

Presenting 'ClientLogin #FAIL' tomorrow at #io2011 #GoogleAPIs http://t.co/HPxvHwJ

[CNN Breaking News @cnnbrk]

Stanford women end UConn's 90-game basketball winning streak, 71-59 http://on.cnn.com/hgFvvn

[Dirk Balfanz @balfanz]

Mike Jones collecting input for new OAuth spec at #IIW room E

[Dirk Balfanz @balfanz]

Google launches two-step verification http://bit.ly/dy7d29

[Belle & Sebastian @bellesglasgow]

Write About Love: http://bit.ly/writeabout