Blog Posts by Andy Y Wu

  • Yahoo! Introduces Stronger User Authentication – Second Sign-in Verification

    Online account compromise occurs regularly and will probably continue in the foreseeable future. Often hackers employ botnets to hijack accounts from millions of unsuspecting consumers. In turn, these hijacked accounts are sold and used to initiate email scams, with messages seemingly sent from the legitimate account owners to their contacts. Scams can range from the less harmful “check this cool stuff” advertising spam to the more damaging “send money to help your friend” email. Worse still, the scam emails may contain malicious links that lead to the installation of malware on computers, which then makes the computers part of the ever-growing botnet networks.

    To thwart account compromise, Yahoo! is introducing a stronger user authentication feature that aims to prevent account hijackers with a stolen password from accessing a person's account. If you have a Yahoo! account, you can now further protect it by activating this new second sign-in verification feature from Yahoo! Account

    Read More »from Yahoo! Introduces Stronger User Authentication – Second Sign-in Verification
  • Yahoo! Enables Monitoring of Login Activity for Better Account Protection

    Today Yahoo! is enhancing account security by allowing users to monitor their recent login activity and consequently better protect their account access. Online accounts are regularly phished or hijacked. Abusers can then use these compromised accounts to send email spam or defraud unsuspecting users. The latest incident of email breach at Dallas-based Epsilon, where millions of stolen email addresses potentially could be used for targeted "spear-phishing" further emphasizes the importance of safeguarding your online account. In fact, I was among the millions of consumers who received an alert email from Chase Bank regarding the Epsilon security breach. Everyone is at risk at any time.

    Being able to view your Yahoo! account login activity will allow you to monitor and confirm any suspicious event before taking the correct course of action to remedy it. A detected suspicious login event is highlighted by an “alert” icon – see the screenshot below. You should then take the recommended

    Read More »from Yahoo! Enables Monitoring of Login Activity for Better Account Protection
  • Yahoo! Opens to Third-Party Authentication with Facebook/Google IDs

    Today we're excited to announce that on Thursday, January 20, Yahoo! opens to third-party user authentication with Facebook and Google logins (via OpenID) across the Yahoo! Network. Hundreds of millions of Facebook and Google users will be able to easily sign in and interact on Yahoo! using their Facebook or Google IDs. This eliminates the proverbial necessity of registering for yet another new ID and remembering yet another password. From Yahoo!'s perspective, any signed-in user engaging with Yahoo! services is a valued user, whether she authenticates using a Yahoo!, Facebook, or Google ID.

    Yahoo login page accepting Facebook and Google IDs

    By supporting user sign-in to Yahoo! through Facebook and Google, we streamline the Yahoo! user identity creation process and can further personalize user experience across Yahoo! services. Commenting on a Yahoo! News article, playing Yahoo! Fantasy Sports, or interacting with photos on Flickr -- now users can do all this with their existing Facebook or Google IDs. Returning users who are already

    Read More »from Yahoo! Opens to Third-Party Authentication with Facebook/Google IDs
  • Yahoo! Accepts OpenID Authentication with Google

    Today we're excited to announce that Flickr, Yahoo!’s premiere photo sharing service, is accepting OpenID authentication with Google. This allows hundreds of millions of Google users to easily sign in to Flickr using their Google accounts with a few mouse clicks. By accepting OpenID authentication with Google, Flickr has streamlined account creation experience and also made it easier for existing users to sign-in and interact with photos on the site.

    Flickr Mini RegFlickr OpenID Mini Reg

    Returning users who are already signed in to Google can further benefit from the “one-click” sign-in to Flickr, without having to enter user ID and password. As a return user, you can initiate the “one-click” sign-in process by clicking on the Google icon within the Yahoo! login popup screen. You are then signed in to Flickr instantly.

    Flickr OpenID LoginFlickr OpenID Login Screen

    Yahoo! embraces open standards and believes that online users should have choices in how they identify themselves on the Web. More choices in user identification and authentication translate to a richer,

    Read More »from Yahoo! Accepts OpenID Authentication with Google