Eliana Willis

More stories

  • 100 Shares129 Views

    in Information Technology

    The best password generator of 2025: Expert tested

    When it comes to creating strong, secure passwords, the best course of action is to use a password generator, which is much better than humans are at randomizing characters into long (16 or more) and hard-to-crack credentials. Thankfully, there are numerous tools available. Also: The best password managersWhat is the best password generator right now?At ZDNET, we’ve tested a long list of password generators to find the top tools for creating strong (random) passwords to secure your digital accounts. The best password generator is the one you’ll actually use — and if you have a password manager, the simplest and most seamless way to create and save strong passwords is to use the built-in generator. That said, NordPass More

  • 200 Shares199 Views

    in Information Technology

    Why Gmail is replacing SMS codes with QR codes – and what it means for you

    ZDNETGoogle is aiming to dump SMS as a two-factor authentication method for Gmail and switch to a more secure approach using QR codes. Reducing SMS abuse In an email conversation with Forbes published in a story on Sunday, Gmail spokesperson Ross Richendrfer described this upcoming change. Instead of entering your number and getting a six-digit code via SMS, you’ll see a QR code that you scan with your phone’s camera. Richendrfer said Google is making this switch to “reduce the impact of rampant, global SMS abuse.” In an email to ZDNET, Richendrfer provided more details. Also: Gmail just made it easier to pay your bills — here’s howUsing two-factor authentication with your online accounts is highly recommended as a way to verify your identity and guard against suspicious or malicious logins. But some forms of 2FA are better than others. A common method is to receive a confirmation code via an SMS text message. However, that type of unencrypted communication can be exploited by cybercriminals. Why QR codes? If you’re wondering why QR codes, Richendrfer and Google security communications manager Kimberly Samra zeroed in on the vulnerabilities of SMS authentication. A scammer can spoof such a message to trick you into sharing the correct verification code. You may not always have access to the device in which you receive the code. And through SIM swapping, a mobile carrier can be fooled into transferring the victim’s phone number, allowing the scammer to receive SMS texts, thus negating the security value of the authentication. That’s why a dedicated authenticator app, such as Microsoft Authentication or Google Authenticator, is a more foolproof alternative. Physical security keys also are much more secure than SMS. But those methods can take time to set up, which is likely why Google is opting for a simpler but still stronger approach of QR codes. Also: How to turn on Private DNS Mode on Android — and why it matters for privacyCurrently, Google uses SMS verification for two purposes — security and abuse control, Richendrfer told Forbes and ZDNET. The first purpose is to ensure that the company is dealing with the same user as in previous interactions. The second is to ensure that scammers aren’t abusing Google’s services. One example of the latter occurs when cybercriminals create Google accounts to send out spam and malware. Another trick used by scammers is something called traffic pumping, also known as “artificial traffic inflation” or “toll fraud.” Popping up over the past two to three years, “it’s where fraudsters try to get online service providers to originate large numbers of SMS messages to numbers they control, thereby getting paid every time one of these messages is delivered,” according to Richendrfer. More

  • 200 Shares169 Views

    in Robotics

    Act now: The secret trick to downloading Kindle books in bulk – before it’s too late

    ZDNETFebruary 26 is this coming Wednesday. That’s how long you have to download your Kindle books as files to your computer. We discussed the deadline at length in my previous article.If you have a lot of Kindle books that you want to download and backup, it will take you about five clicks per book. If you’re like my wife, who has a few thousand books, you’re looking at something on the order of 10,000 clicks and a very sore wrist between now and Wednesday. Also: Download your Kindle books right now – Amazon is killing this option in a few daysBut I found a hack that can let you bulk download 25 books at a time. In her case, that reduces the clicks from about 10,000 to a few more than 50. This makes it practical to save your library to your personal storage. Since time is of the essence, let’s get to it. Warnings and disclaimers To do this, you’re going to need to install a Chrome plugin that lets you run any JavaScript script you want on web pages. It’s very powerful, and it’s equally very dangerous. The plugin, Tampermonkey, has been around in one form or another for years, but it’s still a third-party plugin that can modify everything in your browser. We’ll be downloading some JavaScript source code from GitHub. I looked over the code before we installed it on my wife’s machine and it seems benign. But who knows if it will change between when I checked it over and when you install and use it? It’s probably fine, but my point is you need to know you’re walking on a cliff’s edge, and you need to take care. Also: If COBOL is so problematic, why does the US government still use it?You’re going to change a bunch of browser settings that could also open your browser to mischief. I’ll recommend you return it to normal when you’re done, but this is your warning. When the script runs, your screen will flash. If you’re sensitive to flashes, you’ll want to consider giving this process a pass, or at least avoid staring at the screen while it runs. Now, the disclaimer. This works on my wife’s machine. I have no idea if it will work on yours. I have no idea, even though it worked on Friday, whether or not it will break on Tuesday. If it doesn’t work, don’t come crying to me. I can’t help you. If you can’t download all your books, don’t come crying to me. If this stuff causes your computer to become corrupted, and you lose everything, and the Earth crashes into the sun, don’t come crying to me. Also: The best AI for coding in 2025 (and what not to use)I’ll tell you exactly what I told my wife. I’m telling you this thing is here. I’m advising against it. But if you want to go ahead and run the risks, good luck. But don’t come crying to me or ZDNET or your local deity if something doesn’t work out. Got it? Good. Now, let’s do this thing. Caveat: Make sure you have a pre-registered device My wife has a whole stable of Kindle devices of various ages, all registered to her account. I’m not a big fan of the Kindle devices. I prefer reading my books on my iPhone. As such, I didn’t have any Kindle devices registered to my Amazon account. So, when I tried running the procedure below in my account, I got this message. More