je.st
news
Android one-click Google authentication method puts users, businesses at risk
2013-08-05 13:38:44| InfoWorld: Top News
A feature that allows Android users to authenticate themselves on Google websites without having to enter their account password can be abused by rogue apps to give attackers access to Google accounts, a security researcher showed Saturday at the Defcon security conference in Las Vegas. The feature is called "weblogin" and works by generating a unique token that can be used to directly authenticate users on Google websites using the accounts they have already configured on their devices.
Tags: users
google
method
risk
Category:Information Technology