bypass
Why buy a PayPal authentication token if a crook can login without it? [POLL]
![PayPal makes it easy to bypass two-factor authentication - good or bad? [POLL]](http://sophosnews.files.wordpress.com/2012/10/paypal-token-250.png?w=115&h=115&crop=1)
PayPal will sell you an authentication token that can greatly boost your account security.
But you can skip token authentication easily. Find out how, and vote in our poll to say what you think of this feature...
Russian hacker's App Store fraud site adds Mac support
ZonD Eighty, the Russian hacker who brought App Store fraud to unjailbroken iPads and iPhones, has extended his "service" to OS X users.
Mac owners can now join their iDevice brethren in ripping off developers.
Apple's App Store bypassed by Russian hacker, leaving developers out of pocket
A Russian hacker has created a website you can use to make fraudulent in-app purchases on your iPad or your iPhone.
This is a pretty big blow to Apple - especially at a time when it is facing criticism for some of the stuff it lets into the App Store in the first place.
"One in 256 times *any* password might get you in" - MySQL authentication disaster
What if your authentication system itself were at fault? You could have the hardest-to-guess password, salted and hashed thousands of times, and still be at risk.
That's what happened to MySQL and MariaDB.
Khobe "vulnerability" – no earth shaker
The security panic of the week is the widely-reported story of a "vulnerability" called Khobe. One news headline goes so far as to announce that this "new attack bypasses virtually all AV protection". I disagree. The sample "attack", which claims Read more…
