Google Blogoscoped

Forum

Hotmail's new security features vs Gmail's old security features

Juha-Matti Laurio [PersonRank 10]

Saturday, May 22, 2010
14 years ago4,276 views

Source:
http://www.zdnet.com/blog/security/hotmails-new-security-features-vs-gmails-old-security-features/6509

ianf [PersonRank 10]

14 years ago #

Juha-Matti, please SUMMARIZE the content that you alert us to. Since you already read it, and deemed it important enough to post here, even short summaries will save each and every one of us countless seconds [become minutes [become hours [become days [become that much shorter spans of lives]]]].

Mrrix32 [PersonRank 10]

14 years ago #

So basically the only feature Hotmail added that isn't already in Gmail is the option to get a temporary password sent to you by text message for use on public computers.... Wow, Microsoft.

ianf [PersonRank 10]

14 years ago #

Wow indeed. Maybe they ought to drop the Windows Live from the name, and call it Agooglsynchronous Hotmail instead. http://blogoscoped.com/forum/171101.html

Roger Browne [PersonRank 10]

14 years ago #

Agreed, Hotmain remains underwhelming.

But props to Hotmail for offering single-use keys. I think this is an extremely worthwhile security feature for users who access their email from random internet cafes while travelling.

ianf [PersonRank 10]

14 years ago #

Agreed, it's a welcome extension—provided it has been implemented "just-so" from end-user's perspective. Which, alas, I doubt the Microsoft to be fully capable of.

Assuming SMS delivery of the single-use keys, and not [another password-protected] IM or similar, and given the plethora of cell networks operating in any one country, the Hotmail account will presumably need to be set up in advance with prefixes to the chosen one(s), since such could never be extracted from IP-requests alone. But that indirectly opens up a new vulnerability while closing another – because, if one's cellphone gets stolen, the knowledgeable thief only needs to discern (or brute-force synthetize) the Hotmail address of its "previous owner" to gain access to the account, and do the dirty.

Juha-Matti Laurio [PersonRank 10]

14 years ago #

[put at-character here]ianf: I'll add a summary next time, written with mobile browser or desktop machine :)

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement

 

This site unofficially covers Google™ and more with some rights reserved. Join our forum!