Posted: 15 May 2019 04:24 PM PDT

If you use one of Google's Titan Security Keys for two-factor authentication, you probably think your account was as secure as it can be. On its website, in fact, Google promises that Titan Security Keys "are the same level of security used internally at Google" and "keep out anyone who shouldn't have access to your online accounts."

Make that most people. In a post on its security blog, Google divulged Wednesday that it has discovered a "misconfiguration" with the Bluetooth Low Energy version of its Titan Security Key that could allow a nearby attacker to "communicate with your security key, or communicate with the device to which your key is paired."

As Google explains, there are two ways an attacker can strike. While pairing the key with your PC or phone, someone could "potentially connect their own device to your affected security key before your own device connects (and) sign into your account using their own device if the attacker somehow already obtained your username and password and could time these events exactly."

Furthermore, if you are using the device to obtain authentication, an attacker "could use their device to masquerade as your affected security key and connect to your device at the moment you are asked to press the button on your key. After that, they could attempt to change their device to appear as a Bluetooth keyboard or mouse and potentially take actions on your device."

What this means for you: While certainly a rare case—since it's a Bluetooth key, an attacker would need to be with 30 feet of you when you press the button—it's still likely to be alarming for anyone who purchased a key to secure the account. Rather than try to patch the vulnerability via software, Google will replace all affected security keys free of charge. To check if your key is among the affected units, look at the small number above the USB port on the back. If it reads T1 or T2, your key needs to be replaced.

Google recommends using the NFC- or USB-based security authentication until the replacement arrives, as these methods are not affected by the issue. Additionally, the upcoming June 2019 security patch for Android devices will automatically unpair affected Bluetooth security keys to eliminate the risk of attack.

All affected users can request a free replacement by visiting google.com/replacemykey.

To comment on this article and other PCWorld content, visit our Facebook page or our Twitter feed.

Let's block ads! (Why?)

Instagram Direct is Dead - Thurrott.com

Posted: 16 May 2019 06:01 AM PDT

Instagram is shutting down Instagram Direct, its erstwhile SnapChat competitor, a little over a year after launching the standalone app.

"We're rolling back the test of the standalone Direct app," an Instagram statement explains, as if the app was an experiment of some kind. "We're focused on continuing to make Instagram Direct the best place for fun conversations with your friends."

"The Direct app is going away," a more direct message to users of the Instagram Direct app reads. "In the coming months, we'll no longer be supporting the Direct app. Your conversations will automatically move over to Instagram, so you don't need to do anything."

The failure of Instagram Direct is perhaps related to a broader strategy change at Facebook, which his trying to push its core social media service to a more chat-based infrastructure that is, yes, based on the success of SnapChat and other similar apps. In this model, Facebook—and presumably Instagram—would favor more personal conversations over traditional social media posts that often spread misinformation, fake news, and biased viewpoints.

Instagram unveiled its Direct app in December 2017, in effect pulling the messaging functionality from Instagram out into a standalone app. Presumably, the death of Direct means that Instagram will once again pick up this "private sharing" functionality and that planned Direct features will now come to that app instead.

Tagged with Instagram, Instagram Direct

Let's block ads! (Why?)

Google Pixel 3a review - TechRadar

Posted: 16 May 2019 06:13 AM PDT

Google has traditionally courted the high-end smartphone market with its Pixel range, so the Pixel 3a, pitched as an affordable alternative to the Google Pixel 3, represents a notable change of tack for the company.

Launched at Google IO 2019 alongside the Pixel 3a XL, the affordable version of the Pixel 3 XL, the Google Pixel 3a shows the company is trying to cast its customer net wider by offering phones at a lower price point than its flagship devices.

Until rumors started circulating this year we weren't expecting Google to release affordable handsets any time soon, and we wouldn't have expected a handset that's launching at the Pixel 3a's price point to be as impressive as it is, so in many ways the Google Pixel 3a is a little surprise of a phone.

With many features ported over from the Pixel 3, like its cutting-edge camera and Active Edge squeeze function for launching Google Assistant, the Pixel 3a appears to be a serious rival to its older sibling. Sure, there's a small specs drop, but there's an even bigger price cut – so does the Pixel 3a make the Pixel 3 redundant?

Google Pixel 3a release date and price

The Pixel 3a, alongside the Pixel 3a XL, became available in a range of stores and from various carriers on May 8, one day after its announcement, but in the US you were able to buy it online before then.

There's only one power/storage option: 4GB RAM and 64GB, which costs $399 / £399 / AU$649. That's roughly half the price of the Pixel 3, which cost $799 (£739, AU$1,199) for the 64GB storage model when it was released.

At this price it sits slightly cheaper than other mid-range competitors like the OnePlus 6, Xiaomi Mi 9 and Honor View 20, and we don't expect the upcoming OnePlus 7 or Honor 20 to beat it in terms of price either, but they'll possibly beat it in terms of specs and features.

Design

To look at, the Google Pixel 3a could easily be confused with the Pixel 3 – it has a similar-looking body with rounded edges and screen corners, and the same two-tone rear design, with the top of the phone is reflective whereas the majority of the panel is matted; however, on the Pixel 3 the material used for the rear is glass whereas here it's plastic – the first clue to the 3a's budget status

The similarities extend to the placement of the rear camera and flash on the left of the phone's back panel, the volume rocker and power button on the right side of the handset, and the USB-C port at the bottom of the device.

There's also an extra port, and it's a welcome addition – a headphone jack, which you won't find on many mid-range phones. On the other hand, there's only one front-facing speaker instead of two, so media played on the Pixel 3a doesn't reach the bar set by the Pixel 3.

One of the most useful features of the Google Pixel 3 is Active Edge, which lets you squeeze the edges of the handset to summon Google Assistant, and this is also present on the Pixel 3a, which is something we didn't expect given the lower price. It did feel a little harder to press than on the Pixel 3 however, so we found ourselves having to squeeze quite tight to use the feature.

The Pixel 3a is a little bigger than its high-end forebear, with dimensions of 151.3 x 70.1 x 8.2mm, but it's rather light at 148g – this is because, as mentioned, instead of the glass back of the Pixel 3, the rear of the Pixel 3a is plastic, giving the handset a slightly less 'premium' feel.

The phone feels easy to use in the hand – the rear-mounted fingerprint sensor is at the right height to make it easy to reach when you pick up the phone, as are the power button and volume rocker on the right side of the device, and the display is small enough that most won't have to stretch to reach anything on the screen.

If you like smaller handsets, the Google Pixel 3a is definitely a viable option – its small dimensions make it the perfect pocket phone, and it's a lot easier to use for everyday tasks like texting and checking emails than its plus-sized relative.

Display

At 5.6 inches, the Google Pixel 3a display is proportionate to the relatively small body of the phone – that's to say, it's rather small. If this is a problem for you, you can check out the Pixel 3a XL, but many people don't need big-screen phones, and the Pixel 3a's display is just right for everyday functions.

The display is Full HD+ and OLED, with a resolution of 2220 x 1080, and because of the relatively small screen size the pixels per inch count is rather high at 441. This means media you stream, as well as pictures you take, can be viewed in more detail, although you'll be hard pressed to notice at such a high resolution.

These specs combine to make the screen more than adequate to use for a variety of features – but it's definitely not as impressive as the Pixel 3. The display has a rather limited max brightness and weaker color reproduction, both of which are most noteworthy when streaming media.

You won't find the screen quality an issue most of the time, but if you're trying to watch something on a sunny day, or take a picture where color accuracy is important, you may find yourself wishing for a better display.

Let's block ads! (Why?)