PayPal's security procedures have been described as 'shoddy,' with the possibility of bypassing the company's two-factor authentication, according to security firm Duo Security. PayPal has created a workaround in place to reduce vulnerability, and a permanent fix is currently being developed.
Exploiting a flaw in the two-factor authentication (2FA) mechanism, but at least one person used flight mode to turn off connectivity immediately after logging into PayPal.
"The vulnerability lies primarily in the authentication flow for PayPal's API web services," according to the Duo Security blog post. "In particular, api.paypal.com, a REST-ful API which uses OAuth for authentication/authorization, does not directly enforce two-factor authentication requirements server-side when authenticating a user."
California Senate Bill 962, aimed at forcing smartphone manufacturers to include mandatory kill switches on smartphones, has passed the California Assembly committee. Apple, Google, Microsoft, Verizon Wireless and AT&T say they are okay with the law, after showing initial distrust of mandatory kill switches.
Last month, the California Senate passed the smartphone kill switch bill on its second try, with lawmakers saying police across the state are seeing smartphone thefts plaguing communities. San Francisco District Attorney George Gascon and Oakland Mayor Jean Quan applaud anti-theft smartphone technology, especially with smartphone-related crimes staggering high in San Francisco and Oakland, respectively.
"The only way to stop the victimization of innocent cell phone customers is to enable theft-deterrent technology on nearly every new smartphone sold in California, which this legislation will do," said Sen. Mark Leno, (D-San Francisco), the sponsor of the bill
The City of San Francisco banned apps that give residents the chance to purchase and sell public parking spaces, saying it's illegal to auction public land. Most recently, MonkeyParking has received a cease-and-desist order, while Apple city officials requested Apple remove it from its app store.
MonkeyParking lets bidders purchase parking spots from others, typically for $5 up to $20, and the seller waits until the winning bidder shows up to claim the parking spot. Residents are allowed to rent private driveways and garage spaces, but will always face legal scrutiny from the city. Similar parking apps face stiff fines and possible legal action if they continue to release in San Francisco.
"It's illegal, it puts drivers on the hook for $300 fines, and it creates a predatory private market for public parking spaces that San Franciscans will not tolerate," said Dennis Herrera, San Francisco City Attorney, in a statement.
Google I/O 2014 - Google provided a preview of its Google Fit Platform at Google I/O, with Fit letting an app go to a single place to provide users' fitness stream.
It's interesting to note that Nike is stepping up and helping Google, since it has its own platform with Fuel. But Nike's Fuel will be baked into the Fit stream for other apps to use, along with a bunch of other companies you can see above.
We only just reported on the truly astounding VR device from BlackRock VR, but now the company has removed everything from its website, leaving a short message to everyone.
This message reads: "At the request of the VR community, all advertising and pre-orders for the V have been stopped until further notice. HorizonVR". So there are only a few things that have happened here. People have felt like they're not going to see this device come out, as it did have some truly mind-bending specifications, or it was a scam.
We're not saying it was a scam, but from what I've read online, this is the opinion of a few. For the entire site to be ripped down after they were asking people to pay $300 pre-orders on a $1,199 virtual reality HMD that might not ever make it to the market... well.
Google I/O 2014 - Google took some time out of its important, and feature-packed Google I/O conference to talk about its cloud storage service: Google Drive.
Google Drive is now the cloud home to over 190 million monthly active users. Google Drive is an incredibly important part of Google, something that I've been using and pushing for quite sometime. Google had some interesting numbers to share, with 67 out of 100 start-ups using Google, versus Microsoft Office. When it comes to the Fortune 500 list, 58% of them are using Google services, and education wise, 72 of the top 100 universities have moved over to Google.
Google I/O 2014 - The L release of Android is getting a good tease at Google I/O, with the next iteration of Google's mobile OS fusing together the world of personal and corporate smartphones - seeing the same applications installed on both.
Within the OS, there is still data separation, so your personal data doesn't mix with the important work data. This will pave the way for the bulk deployment of apps too, which will make the lives of IT support staff that much easier. Samsung has worked closely with Google on this, with Google thanking Samsung for its contribution on their work on Knox.
Google I/O 2014 - You may not own a Chromebook personally, but Google is doing big things with its notebook platform. Google has 15 devices available in 28 countries right now, with many more planned for the future.
Google has said that ten of the top ten highest-rated laptops on Amazon right now are Chromebooks, an impressive statistic. When it comes to education, Google has seen a huge 600% growth in K-12 schools across the United States.
Google I/O 2014 - There's an update coming out later in the year, which will allow you to use your Chromecast to blast your screen on your smartphone, to your TV.
You can mirror anything on the TV, including the camera app if that's what you wish. LG, HTC and Samsung will be supporting it, with a slew of smartphones to work with this technology, and many more to come.
Google I/O 2014 - Google just announced the impressive looking Android TV at Google I/O, but one of the bigger announcements that didn't seem to get much attention was who Google were working with.
Google will have Android TV powering the entire 2015 lineup of HD and UHD smart TV ranges from Sony, Sharp, TP Vision and Philips. Sony is a big partner here, and seems to be center stage for the Android TV platform. I'm excited to see what Sony can pull off with Android TV with its future HD and UHD sets.
Razer and ASUS will also be making Android TV-powered streaming boxes, which is another interesting thing to see.