Month: January 2017

The Facebook signature wall in question is much bigger than this one, by the way. (credit: Matteo Artizzu)

Facebook is enhancing its existing protection against account takeovers with cryptographically based security keys that can be used as a second factor of authentication, the social network is announcing today.

A handful of online services—including Google, Dropbox, GitHub, and Salesforce—already support security keys based on the open Universal 2nd Factor, or U2F, standard, created by the Fido Alliance. Now Facebook is offering them, too. The inexpensive devices, which plug into users' USB port, were recently shown to beat out smartphones and most other forms of two-factor verification in a two-year study of more than 50,000 Google employees. That assessment was based on the ease of using and deploying keys, the security they provided against phishing and other types of account-takeover attacks, and the lack of privacy trade-offs that accompany some other forms of two-factor authentication.

Just as attackers can using phishing techniques to trick people into divulging their passwords, attackers can also trick people into divulging the one-time passwords that form the basis of most two-factor authentication schemes. Security keys, by contrast, rely on a cryptographic secret baked into their silicon. This data can't be easily divulged. Security keys also can't suffer from dead zones that often prevent cellphones from receiving text messages. The keys are also not susceptible to the types of malware compromises that can hit smartphones.

Airbus | P. Pigyere | Master Films

Commercial aircraft giant Airbus has come up with a way to mature its aircraft faster. The French manufacturer has created its own simulated airline to replicate the way the world's commercial carriers use and look after their airplanes. Dubbed AIRLINE1, the concept was introduced in 2013 to speed development of Airbus' new A350 XWB (a Boeing 787/777 competitor) by reducing the technical issues that typically surface after new airliners enter service.

In essence, AIRLINE1 is a new way of developing Airbus airliners—a system that allows the flight test team to think and operate as an airline would during flight testing and certification. An airline maintenance control center in a dedicated hangar at Airbus' Flight Test Center in Toulouse, France is its main component. As the A350 flight test program unfolds, the company's test team does real-time maintenance, support, and repair operations on test aircraft using the procedures and even the documentation Airbus customer airlines use.