Tag Archive for: verification

Facebook mandates stronger digital verification of apps

Facebook will require application developers to move later this year to a more secure type of digital signature for their apps, which is used to verify a program’s legitimacy.

As of Oct. 1, apps will have to use SHA-2 certificate signatures rather than ones signed with SHA-1. Both are cryptographic algorithms that are used to create a hash of a digital certificate that can be mathematically verified.

Apps that use SHA-1 after October won’t work on Facebook anymore, wrote Adam Gross, a production engineer at the company, in a blog post.

“We recommend that developers check their applications, SDKs, or devices that connect to Facebook to ensure they support the SHA-2 standard,” Gross wrote.

To read this article in full or to leave a comment, please click here

Network World Security

Google goes beyond two-step verification with new USB Security Key

Google’s adding support for a physical USB second factor that will first verify the login site as being a true Google website, not a fake site pretending to be Google, before it hands over a cryptographic signature.
Naked Security – Sophos

Android “Master Key” vulnerability – more malware exploits code verification … – Naked Security

Android "Master Key" vulnerability – more malware exploits code verification
Naked Security
Thanks to Rowland Yu of SophosLabs in Sydney for the technical work he put in behind the scenes of this article. Researchers at SophosLabs have come across yet more samples of Android malware exploiting the so-called "Master Key" vulnerability.

“android security” – read more