Android one-click Google authentication method puts users, businesses at risk

News

By Lucian Constantin

August 4, 2013 02:32 PM ET

IDG News Service - A feature that allows Android users to authenticate themselves on Google websites without having to enter their account password can be abused by rogue apps to give attackers access to Google accounts, a security researcher showed Saturday at the Defcon security conference in Las Vegas.

The feature is called "weblogin" and works by generating a unique token that can be used to directly authenticate users on Google websites using the accounts they have already configured on their devices.

Weblogin provides a better user experience but can potentially compromise the privacy and security of personal Google accounts, as well as Google Apps accounts used by businesses, Craig Young, a researcher at security firm Tripwire, said during his talk.

Young created a proof-of-concept rogue app that can steal weblogin tokens and send them back to an attacker who can then use them in a Web browser to impersonate a victim on Google Apps, Gmail, Drive, Calendar, Voice and other Google services.

The app was designed to masquerade as a stock viewing app for Google Finance and was published on Google Play, with a description that clearly indicated it was malicious and shouldn't be installed by users.

During installation, the app asks for permission to find accounts on a device, use the accounts on a device and access the network. When run, it then displays another prompt asking for permission to access a URL that starts with "weblogin" and includes finance.google.com.

This secondary prompt is uninformative and most users are likely to accept the request, Young said.

If they do, a weblogin token is generated and the users are automatically signed in to the Google Finance website. However, at the same time, the token is siphoned off through an encrypted connection to a server controlled by the attacker.

The issue is that this weblogin token does not only work for Google Finance, but for all Google services, Young said.

For example, it can provide access to the victim's documents in Google Drive, emails in Gmail, calendar entries in Google Calendar, Google Web search history or potentially sensitive company data stored in Google Apps, the researcher said.

It can also be used to access a user's Google Play account and remotely install apps on his device or to access his accounts on third-party websites that support Google Federated Login.

If the user is an administrator for a company's Google Apps domain, the attack could compromise the company's entire Google Apps operation. The attacker would gain the ability to reset the passwords for other users on that Google Apps domain, create and modify privileges and roles, create and modify mailing lists, and even add new users with administrative privileges, the researcher said.

Reprinted with permission from IDG.net. Story copyright 2012 International Data Group. All rights reserved.

Source: http://rss.computerworld.com/~r/computerworld/s/feed/topic/17/~3/NIWfNE3Xkmc/Android_one_click_Google_authentication_method_puts_users_businesses_at_risk

dr. seuss the temptations rush limbaugh sandra fluke green book some like it hot whale shark whale shark

The Week in Pictures: Crunch Time Edition (Powerlineblog)

Share With Friends: | | Politics - Top Stories News, RSS Feeds and Widgets via Feedzilla.

Source: http://news.feedzilla.com/en_us/stories/politics/top-stories/323717862?client_source=feed&format=rss

gerard butler danielle fishel daylight savings Daylight Savings Time 2013 DeAndre Jordan Oz the Great and Powerful Mothers Day 2013

Geronimo Dos Santos Cleared Of Hepatitis B

Source: MMA Junkie

Geronimo dos Santos is medically cleared to fight and is expected to finally make his UFC debut before the year ends, reports MMA Junkie.

Santos had to be pulled from UFC 153 as his blood test came back positive for Hepatitis B. The heavyweight underwent a yearlong chemotherapy treatment to drop his viral count to zero.

The 32-year-old has won his last 11 fights against the likes of former UFC fighters such as Antonio Mendes and Assuerio Silva.

While medically cleared, Santos needs to complete some paperwork before he can return to competition.

Follow FightLine.com on Twitter by clicking the "Follow" button below:

Source: http://feeds.fightline.com/~r/fightline_news/~3/kGCguLW1CSc/

amber heard Google Now Jason Collins White House Correspondents Dinner 2013 NHL playoff schedule Queen of Versailles Nicole Eggert

Sikhs sidestep fights over Wis. rampage donations

OAK CREEK, Wis. (AP) ? In the aftermath of shooting rampages in Colorado, Virginia and elsewhere, victims' families have clashed over how to distribute money donated by well-wishers. But after a gunman killed six worshippers at a Milwaukee-area Sikh temple last year, survivors and their families vowed not to let money divide them.

In the weeks following the August 2012 shooting, $1.1 million in donations poured in to the Sikh Temple of Wisconsin from the U.S., India, Canada, England and elsewhere. Contributions came from individuals, corporations, churches, other Sikh temples and even elementary school children.

Among the victims were a 41-year-old mother of two, her family's primary breadwinner, and an 84-year-old man who retired decades earlier. Their different life circumstances raised difficult questions: Do their families deserve an equal share of the money? Or should the families of younger or higher-earning victims receive more?

In the end, on the advice of outside counsel, temple leaders divided it equally among all six families. It was a controversy-free decision, said Harcharan Gill, a temple trustee.

"There were no issues about, 'Why did you give this much to this person?' They're all just thankful for what they got," Gill said. "There was some rethinking about the need basis, about the age in life. But the people advised us that a life is a life and the value is the same."

Each family's total amounted to more than $125,000. The family of another victim, a 65-year-old priest who has remained nearly comatose since he was shot in the head at close range, also received about the same amount. Another priest was shot twice in the abdomen and survived; his family got about $75,000.

Surinder Kaur's husband, Sita Singh, was among the dead. She and her four children, who range in age from 9 to 20, came to the U.S. from India immediately after the shooting.

Singh said didn't know how her family could have survived without the generosity of the countless anonymous donors.

"The money has gone to rent, food, utilities. There's still some left but life's getting hard," she said, tears welling in her eyes. Her 19- and 20-year-old children are still trying to get work permits in order to help support the family, she said.

The outpouring of financial support followed a rampage a year ago Monday in which Army veteran Wade Michael Page, who had ties to white supremacy groups, killed six people at the temple and wounded five others before killing himself. FBI agents were unable to determine a motive, leaving survivors to forever wonder ? why?

"It's frustrating," said Harpreet Singh, a nephew of the temple's slain president. "But you can do nothing about it, so you let it go."

Besides the two priests injured, three people who suffered minor arm or leg injuries were given several thousand dollars.

And temple officials offered $1,000 apiece to the 26 worshippers who were inside the temple during the shooting, including 16 who squeezed into a tiny pantry for two hours until police told them it was safe to leave. Most, though, gave the money back to the temple, Gill said.

The temple also paid $10,000 to Oak Creek police Officer Brian Murphy, who was shot nine times after he engaged the shooter in gunfire in the parking lot. Murphy now speaks with a rasp and has no feeling in his right leg and forearm.

Satwant Singh Kaleka died in the temple he helped found. The temple president fought off the shooter briefly with a butter knife, a move that first lady Michelle Obama praised as heroic because it gave the women and children enough time to hide.

Kaleka's sons, Pardeep and Amardeep Kaleka, also donated much of their share of the donations back to the temple. About half was used to import five golden fiberglass domes from India to be installed on the temple this week.

"This was something my father always wanted," Pardeep Kaleka said.

Temple officials are still hoping to raise another $1 million to $1.5 million for a memorial to the victims. They also plan to build a Sikh museum or religious center next door where people can learn about Sikhism and its history, an idea that arose after they were flooded with invitations from schools and churches to attend functions and discuss their religion.

"We got so many invitations we weren't able to accommodate all of them," Gill said. "We're really sorry for that."

Punjab Singh, 65, was the most seriously injured; he was shot in the head. He requires around-the-clock care, and his family says it's unlikely he'll ever speak again. His medical bills, which have topped $1 million, are being covered by the temple's insurance.

The insurance company has since amended the temple's policy to exclude coverage of "acts of terror," Harpreet Singh said.

Punjab Singh's sons alternate spending every waking hour by his bedside. They don't have work visas, and have been spending their share of the donations on rent and groceries. They're not sure what will happen when the money runs out.

But they do know one thing.

"We are very, very thankful to those who donated," said Singh's elder son, Raghuvinder Singh. "May God bless those people."

___

Online:

Sikh Temple of Wisconsin: http://www.sikhtempleofwisconsin.com

___

Dinesh Ramde can be reached at dramde@ap.org.

Source: http://news.yahoo.com/sikhs-sidestep-fights-over-wis-rampage-donations-162651986.html

Charlie Strong Calendar 2013 john boehner HGTV Dream Home 2013 eric cantor eric cantor HGTV

Jordin Sparks Serenades 'Lover, Gangsta' Jason Derulo

Sparks drops brand-new track 'Skipping a Beat' day after posting sweet serenade teaser featuring her BF on IG.
By Nakiya Morgan

Jason DeRulo and Jordin Sparks
Photo: Jordin Sparks/ Instagram

Source: http://www.mtv.com/news/articles/1711689/jordin-sparks-jason-derulo-skipping-a-beat-instagram.jhtml

mayan calendar end of the world end of the world december 21 2012 norad 12/21/12 winter solstice

Ford pays $17.35 million fine over Escape recall - Automotive News

Related Downloads

Related Topics

WASHINGTON -- Ford Motor Co. reached a settlement with U.S. auto safety regulators in June over a recall of older Escapes last year and paid the maximum $17.35 million fine to resolve claims that the automaker took too long to notify its customers of a defect.

Last August, Ford recalled about 423,000 vehicles from model years 2001 through 2004 model years in the United States because of a defect that could cause the gas pedal to remain pressed down even after the driver lifted their foot. The recall covered Escapes with 3.0-liter V6 engines and speed control.

Regulators felt that the recall "may have been untimely," and thus could have justified an enforcement action, according to a settlement document with the National Highway Traffic Safety Administration.

The Ford-NHTSA settlement documents, dated June 28, also mention the Escape's sibling, the Mazda Tribute. Last year Mazda followed Ford and recalled 217,000 Tributes from the 2001-2006 and 2008 model years. It didn't make the Tribute in 2007.

A Mazda spokesman said the company was not involved in the settlement between Ford and NHTSA.

"We are unaware of a fine directed towards Mazda, but will, as always, work closely with NHTSA," the spokesman said.

In agreeing to settle the case, Ford did not admit fault.

"We are absolutely committed to addressing potential vehicle issues and responding quickly for our customers," a Ford spokeswoman said in an e-mailed statement today.

"We take the safety of our customers seriously and continuously evaluate our processes for improvements. While we are confident in our current processes for quickly identifying and addressing potential vehicle issues, Ford agreed to this settlement to avoid a lengthy dispute with the government."

Ford's penalty, which was paid on July 26, ties the largest single fine ever paid under U.S. auto safety law.

"If there was ever a company that deserved a civil penalty for failing to do a timely recall, it was Ford," Clarence Ditlow, executive director of the Center for Auto Safety and a longtime industry safety advocate, said in a statement.

"The only unknown is how many people died because Ford failed to do this recall in 2005. The Center is very happy to see the agency impose this penalty on Ford as it sends a strong message not only to Ford but also to other auto companies to obey the law."

Toyota paid a $17.35 million fine in December to resolve claims that it failed to report a rash of gas pedals getting stuck under the floor mat in the Lexus RX 350 from model year 2010.

Toyota also paid three separate fines in 2010, totaling $48.8 million, for a series of recalls stemming from claims of unintended acceleration.

The settlement was reported earlier today by The Wall Street Journal.

Ryan Beene and Philip Nussel contributed to this report.

You can reach Gabe Nelson at gnelson@crain.com.

Source: http://www.autonews.com/article/20130801/OEM11/130809995/ford-pays-17-35-million-fine-over-escape-recall

easter recipes live free or die hard carlos pena amanda bynes arrested f 18 jet crash in virginia beach nicki minaj beez in the trap video

More accurate model of climate change's effect on soil

[unable to retrieve full-text content]Scientists have developed a new computer model to measure global warming's effect on soil worldwide that accounts for how bacteria and fungi in soil control carbon.

Source: http://feeds.sciencedaily.com/~r/sciencedaily/~3/89WuUHiC_Kk/130801142430.htm

jcp Sports Authority Hollister old navy walmart black friday walmart black friday Target Black Friday

GOP says no to Obama jobs package

President Barack Obama delivers remarks on the economy at the Amazon Chattanooga Fulfillment Center in Chattnooga, Tenn., July 30, 2013.

President Obama pressed GOP lawmakers on Tuesday to strike a deal that would lower corporate tax rates in exchange for boosting spending on jobs and infrastructure programs.

The White House cast the new plan as a ?grand bargain for the middle class,? as well as a new way to ease the partisan gridlock expected to intensify this fall with battles over funding the government and raising the debt ceiling.

?If we?re going to break free of the same old arguments, where I propose an idea and Republicans say no just because it?s my idea, let me try offering something that serious people in both parties should be able to support,? Obama said at an Amazon.com warehouse in Chattanooga, Tenn., where he outlined his new offer: ?A deal that simplifies the tax code for our businesses and creates good jobs with good wages for the middle-class folks who work at those businesses.?

Despite the olive branch, Obama?s proposal immediately drew fire from the top Republicans in Congress.

The plan, Senate Minority Leader Mitch McConnell (R-Ky.) insisted, was ?an unmistakable signal that the president has backed away from his campaign-era promise to corporate America that tax reform would be revenue-neutral to them.?

GOP senators and aides also said the new White House plan raises serious questions about the chances for tax reform ? especially after Senate Majority Leader Harry Reid (D-Nev.) had already said last week that the $975 billion in additional revenues included in the Senate budget should be the starting point for tax reform negotiations.

?Sometimes it just seems that this administration never misses an opportunity to miss an opportunity to grow this economy,? Sen. Pat Toomey (R-Pa.) told reporters on Tuesday.

?This is part of the reason we have the slowest economic recovery since the Great Depression,? Toomey added. ?We don?t need more tax increases.?

Obama?s new plan recycles several of his previous proposals on corporate tax reform.

The White House plan to lower the corporate tax rate from 35 percent ? among the highest in the developed world ? to 28 percent was first rolled out by Treasury in 2012, as was the idea of pushing the effective rate to 25 percent for manufacturers.

The White House is also proposing to allow small businesses to write off as much as $1 million in investments, and calling on Congress to sign off on new infrastructure spending, aid to community colleges and investment in manufacturing hubs.

To pay for the new spending, Obama proposed a one-time ?transition fee? on the hundreds of billions of dollars that companies are currently holding or earning overseas.

?The point is, if Washington spent as much time and energy these past two years figuring out how to grow the economy and the middle class as it spent manufacturing crises in pursuit of a cut-at-all-costs approach to deficits, we?d be much better off,? Obama said in Chattanooga. The Hill

AHT/ARA

Source: http://rinf.com/alt-news/breaking-news/gop-says-no-to-obama-jobs-package/54637/

Win McMurry Whitey Bulger pga tour robin roberts Liz Cheney ESPYS 2013 project runway

Business Process Outsourcing | Customer Support | Virtual Assistant

Tax Type Tax Rate Tax ID or Company no.

eg. VAT, GST ? Registration no.

Source: http://www.freelancer.com/projects/Customer-Support-Virtual-Assistant/Business-Process-Outsourcing.html

will ferrell coachella zack greinke zack greinke jackie robinson Coachella 2013 Scary Movie 5

University of Oklahoma researchers studying rare form of adult diabetes

By SILAS ALLEN NewsOK.com on Jul 31, 2013, at 2:28 AM??Updated on 7/31/13 at 5:42 AM

Source: http://www.tulsaworld.com/article.aspx/University_of_Oklahoma_researchers_studying_rare_form/20130731_11_A12_OKLAHO739044?rss_lnk=16

arizona cardinals Big Bird Adam Greenberg Fall Leaves Jim Lehrer 666 Park Avenue Kara Alongi