<div dir="ltr"><div><div class="m_-7033894072894340887m_-6516068197341029301gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">
<table class="m_-7033894072894340887m_-6516068197341029301backgroundTable" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="100%">
<tbody>
<tr>
<td align="left" valign="top">
<table cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td style="border-top:0px solid rgb(0,0,0);border-bottom:1px solid rgb(255,255,255);background-color:rgb(255,255,255);text-align:center" align="center"><span style="font-size:10px;color:rgb(96,96,96);line-height:200%;font-family:verdana;text-decoration:none">Email not displaying correctly? <a href="http://www.oplin.org/4cast/" style="font-size:10px;color:rgb(0,0,255);line-height:200%;font-family:verdana;text-decoration:none" target="_blank">View it in your browser.</a></span></td>
</tr>
<tr>
<td style="border-top:0px solid rgb(51,51,51);border-bottom:0px solid rgb(255,255,255);background-color:rgb(255,255,255)">
<center><a><img id="m_-7033894072894340887m_-6516068197341029301editableImg1" src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/4cast_email_header.png" title="OPLIN" alt="OPLIN 4Cast" align="middle" border="0"></a></center>
</td>
</tr>
</tbody>
</table>
<table style="width:763px;height:877px" bgcolor="#ffffff" cellpadding="20" cellspacing="0">
<tbody>
<tr>
<td style="font-size:12px;color:rgb(0,0,0);line-height:150%;font-family:'Gothic Sans',sans-serif" bgcolor="#ffffff" valign="top">
<p> <span style="font-size:20px;font-weight:bold;color:rgb(0,0,0);font-family:arial;line-height:110%">OPLIN 4Cast #609: Passwords are not enough. The time for 2FA is now</span><br>
<span style="font-size:11px;font-weight:normal;color:rgb(102,102,102);font-style:italic;font-family:arial">August 29th, 2018</span></p>
<p style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><img align="left" class="m_-7033894072894340887m_-6516068197341029301alignleft m_-7033894072894340887m_-6516068197341029301size-full m_-7033894072894340887m_-6516068197341029301wp-image-6101" src="https://4cast.oplin.org/wp-content/uploads/2018/08/Fotolia_165934887_XS.jpg" alt="2FA Two-factor authentication" width="130" height="94" style="padding-right: 14px; padding-top: 4px; padding-bottom: 4px;" title=""> A couple of months ago, I got an online subscription to <em>WIRED</em> magazine. As a thank-you gift, I was sent a <a>YubiKey</a>. When I received it, I really had no idea what it was: it looked much like a flattened USB drive. When I realized that it was a form of hardware two-factor authentication (2FA), I happily proceeded to set up and configure my account. I even ordered myself another one, as a spare I can carry around. <br><br>I'm a huge fan of 2FA. It's turned on for pretty much everything I can do online, where it has been possible to do so. If you're reading this, and you haven't done this...well, this is one of those things for which you'll kick yourself later. Two-factor authentication simply means that, beyond providing login credentials (like a username and password), there's a second step required to log into a site or service. Ideally, this second step is providing a code from an app like <a href="https://mashable.com/2017/10/29/how-to-set-up-google-authenticator/#JXQzDxglVqqZ" target="_blank">Google Authenticator</a> or activating a hardware 2FA key like my Yubikey. Some online services still use a SMS message as a second step (I'm looking at <em>you, </em>Paypal!), which is not really a good idea, as you'll see below. You don't have to buy a Yubikey. Keep in mind that you may have to do a little googling to find out how to set 2FA up for each site or service.</p><ul>
<li style="list-style-type:none">
</li><li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://arstechnica.com/information-technology/2018/08/password-breach-teaches-reddit-that-yes-phone-based-2fa-is-that-bad/" target="_blank">Password breach teaches Reddit that, yes, phone-based 2FA is that bad</a> [Ars Technica] "A newly disclosed breach that stole password data and private messages is teaching Reddit officials a lesson that security professionals have known for years: two-factor authentication (2FA) that uses SMS or phone calls is only slightly better than no 2FA at all."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://9to5mac.com/2018/08/09/2fa-adoption/" target="_blank">Even many tech-savvy people not using two-factor authentication, finds university</a> [9to5Mac] "What they found was that while these students understood technology, they didn’t understand why they needed to take this cybersecurity precaution. 'There was a tremendous sense of confidence,' Camp said. 'We got a lot of, ‘My password is great. My password is plenty long enough.''</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://thenextweb.com/gaming/2018/08/24/fortnite-2fa-funky-emote/" target="_blank">Fortnite motivates players to turn on 2FA with a funky new emote</a> [The Next Web] "The <em>Fortnite</em> team today announced it’d be offering a “Boogie Down” emote to those of its consumers who enabled two-factor authentication on their accounts. This creative way of incentivizing security might help motivate some younger fans who don’t yet fully understand how to protect themselves online."</li>
<li style="text-align:justify;font-size:16px;font-family:arial;line-height:110%"><a href="https://mashable.com/2018/08/22/instagram-hacks-raise-questions-about-2fa-security/#n2MpltSD7aqd" target="_blank">Instagram hacks raise questions about its 2FA security</a> [Mashable] "Instagram lets users secure their accounts with two-factor authentication, but it currently relies on text messages, which aren't as secure as app-based authentication methods."</li>
</ul>
<div style="text-align:left"> </div>
<p style="text-align:left;font-size:20px;font-family:arial;line-height:110%"><small><strong><em>From the <a href="http://ohioweblibrary.org" target="_blank">Ohio Web Library</a>:</em></strong></small><br>
</p>
<div style="text-align:justify;font-size:16px;font-family:arial;line-height:110%">
<ul> <li><a href="http://proxy.oplin.org:2054/login.aspx?direct=true&db=buh&AN=128120315&site=ehost-live" target="_blank">Two-Factor Authentication: Who Has It and How to Set It Up</a> (GRIFFITH, E. (2018). Two-Factor Authentication: Who Has It and How to Set It Up. <i>PC Magazine</i>, 115-123. )</li> <li><a href="http://proxy.oplin.org:2054/login.aspx?direct=true&db=cmh&AN=99233743" target="_blank">Multi-Factor Authentication—It's Not Just Buying Another Lock</a> (west, j. (2014). Multi-Factor Authentication—It's Not Just Buying Another Lock. Computers In Libraries, 34(9), 26-27.)</li> <li><a href="http://proxy.oplin.org:2054/login.aspx?direct=true&db=cph&AN=129861039&site=ehost-live" target="_blank">WHAT TO DO AFTER A DATA BREACH: 5 STEPS TO MINIMIZE RISK</a> (PAUL, I. (2018). WHAT TO DO AFTER A DATA BREACH: 5 STEPS TO MINIMIZE RISK. Pcworld, 36(6), 84-89. )</li>
</ul>
</div>
<div style="text-align:left"> </div>
</td>
</tr>
<tr>
<td valign="top" width="760"><span style="font-size:10px;color:rgb(96,96,96);line-height:100%;font-family:verdana"> <hr>
<div style="text-align:justify">The <strong><em>OPLIN 4cast</em></strong> is a weekly compilation of recent headlines, topics, and trends that could impact public libraries. You can subscribe to it in a variety of ways, such as: <br>
</div>
<div style="text-align:left"> </div>
<ul>
<li style="text-align:justify"><strong>RSS feed.</strong> You can receive the OPLIN 4cast via RSS feed by subscribing to the following URL: <a href="http://www.oplin.org/4cast/index.php/?feed=rss2" target="_blank">http://www.oplin.org/4cast/ind<wbr>ex.php/?feed=rss2</a>.</li>
<li style="text-align:justify"><strong>Live Bookmark.</strong> If you're using the Firefox web browser, you can go to the 4cast website (<a href="http://www.oplin.org/4cast/" target="_blank">http://www.oplin.org/4cast/</a>) and click on the orange "radio wave" icon on the right side of the address bar. In Internet Explorer 7, click on the same icon to view or subscribe to the 4cast RSS feed.</li>
<li style="text-align:justify"><strong>E-mail.</strong> You can have the OPLIN 4cast delivered via e-mail (a'la OPLINlist and OPLINtech) by subscribing to the 4cast mailing list at <a href="http://lists.oplin.org/mailman/listinfo/OPLIN4cast" target="_blank">http://lists.oplin.org/mailman<wbr>/listinfo/OPLIN4cast</a>.</li>
</ul> </span> </td>
</tr>
<tr>
<td style="text-align:center;font-family:'Century Gothic',sans-serif;border-top:0px solid rgb(255,255,255);background-color:#2c4587;color:#fff" valign="top" width="760">© 2018 Ohio Public Library Information Network<br> <a href="http://www.slideshare.net/oplin" title="Find us on Slideshare" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/slideshare3.png" alt="Find us on Slideshare"></a> <a href="http://www.facebook.com/oplin.org" title="Find us on Facebook" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/facebook_0.png" alt="Find us on Facebook"></a> <a href="https://plus.google.com/107751358238995507967" title="Find us on Google+" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/google+.png" alt="Find us on Google+"></a> <a href="http://www.twitter.com/oplin" title="Find us on Twitter" target="_blank"><img src="http://www.oplin.org/4cast/wp-content/themes/unlimited/assets/images/twitter_0.png" alt="Find us on Twitter"></a> </td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div></div></div></div></div></div></div>
</div>