Technology - Google News

Facebook won't keep your two-factor phone number truly private - Engadget

Posted: 04 Mar 2019 05:50 AM PST

Rapacious consumer of personal data Facebook is once again receiving bad press, for being a rapacious consumer of personal data. The company is under fire for its refusal to allow users to opt out of being found by their phone number when those digits were only supplied for two-factor authentication. TechCrunch is drawing attention to the annoyance, pointing out that some folks are now learning about the bait'n'switch.

Twitter user Jeremy Burge pointed out, in a thread, that phone numbers could be searched, with "no way to disable" the feature. He added that, perhaps unsurprisingly, this data is also shared with WhatsApp and Instagram, which means your phone number becomes a unique ID for you. And it's impossible to disable the feature if you added your number -- only limit it to your immediate friend circle.

For years Facebook claimed the adding a phone number for 2FA was only for security. Now it can be searched and there's no way to disable that. pic.twitter.com/zpYhuwADMS
— Jeremy Burge 🐥🧿 (@jeremyburge) March 1, 2019

Facebook told TechCrunch that this is not a new situation, which is true, and we've known that the platform uses phone numbers for ad tracking since last September. The company uses that unique ID, since it's tied to you, and can use it to sell ads, much as it does with everything else it knows about you. It's a practice that columnist Violet Blue said "gives a middle finger to infosec" on this very website.

To be fair to Facebook, you don't need to offer up a phone number to engage two-factor authentication. Third-party systems, like Google Authenticator and Duo Security can also be used to add an additional layer of protection onto your account. That will be small comfort to those who engaged the security before the rules were changed, however.

The fact that Facebook accounts are searchable purely with a phone number raises some interesting privacy and security concerns. It's possible to limit this to just your circle of friends, but it's set to everyone by default, which could lead to unwanted lookups.

Let's block ads! (Why?)

With USB 4, Thunderbolt 3’s benefits become open to all - The Verge

Posted: 04 Mar 2019 06:00 AM PST

Hot on the heels of USB 3.2 receiving a confusing Gen 2x2 suffix, the USB Implementers Forum (USB-IF) has today announced USB 4, the next version of the ubiquitous connector. Although the draft specification won't become official until it's published later this year, the standard is expected to increase its maximum speed to 40 Gbps over the 20 Gbps offered by its current version, USB 3.2.

If that speed sounds familiar, then that's because it's already offered by the Thunderbolt 3 specification, which first started shipping on devices way back in 2015. However, in order to encourage adoption in 2017 Intel announced that it was going to make the standard available to other chipmakers, allowing anyone to manufacture the technology, royalty free. With USB 4, Intel is finally making good on this promise.

If you're familiar with Thunderbolt 3 then you'll already know a lot of the specs of USB 4. It will still be able to deliver up to 100W of power, and has enough data throughput for the use of external graphics cards, and to power two 4K displays, or a single 5K display. You'll need to use cables that are capable of 40 Gbps speeds to enjoy the standard's full benefits, but any existing Thunderbolt 3 cables (and, for that matter, accessories) you have should work with the new port.

All this means that means that USB 4 is essentially just catching up with a three year old technology, but by becoming an open standard it's likely to become both more widely available and cheaper. That's true of the computers themselves, but it's also true of external devices such as monitors, docks, and eGPU enclosures.

Outside of its specs, the USB-IF is also hoping to use the USB 4 standard as a means of simplifying the USB ecosystem. Rather than each USB device picking and choosing which aspects of the standard it supports, the group wants to produce a list of features each kind of USB 4 device will have to offer, which could standardize features such as display out and audio out (although the exact features are yet to be determined).

This simplification sounds like a sensible approach, but the problem is that USB is an open standard, and so the implementation of any of these recommendations will be voluntary. Companies will be able to have their devices certified by the USB-IF, but this is entirely optional. When I asked a spokesperson from the organization if they'd ever consider imposing mandatory requirements on their manufacturing partners, they suggested it would be almost impossible to police because of the amount of companies using USB.

Other confusing aspects of the standard could also stick around. While previous versions of USB have used different color ports to indicate which version of the standard they support, that's not possible with the USB-C ports that USB 4 will exclusively use (sorry USB Type-A, your days are numbered). There's no requirement in the standard for manufacturers to add any labels to their ports, or to their cables.

Unfortunately the USB-IF was unable to confirm whether the standard's recently bizarre naming conventions (which last week reached a fever pitch with the announcement of the USB 3.2 Gen 2x2 spec) will continue with USB 4. When I queried them about the recent confusion they said that full branding guidelines will be released after the publication of the final standard.

Although USB 4 will integrate Thunderbolt 3's features, Intel says that the two standards will coexist. While USB 4 is open, Thunderbolt 3 is not, and Intel requires manufacturers to be certified to use it. It also offers these manufacturers more support with reference designs and technical support. USB 4 might have the same specs, but Intel provides other Thunderbolt 3 services that go beyond the hardware itself.

The publication of the full USB 4 specification is currently due to arrive in the second half of this year, after which point the USB-IF said that it expects it to be another year and a half before manufacturers start producing devices. After all these years, it looks like the particular annoyances of the USB standard aren't about to disappear overnight, but at least soon we'll be able to stop worrying about getting USB confused with Thunderbolt 3.

Let's block ads! (Why?)