Yahoo Mail Moves From Passwords To Push Notification Sign-Ins (tumblr.com)

Posted by timothy on Saturday October 17, 2015 @01:29AM from the we-think-you're-you dept.

An anonymous reader writes: A revamp of Yahoo Mail includes a new feature which eliminates the password from the sign-in process on mobile platforms, instead relying on the user's phone number as a token of authenticity. Notification-based sign-ins are a network-heavy commitment used with less frequency during some online banking authentication procedures, and by Google and others in specific events such as the need for a password reset. But Yahoo is well-motivated to improve security after a 2014 data breach led to a mass-reset of passwords for affected users.

1 of 78 comments (clear)

Min score:

Reason:

Sort:

Ready for the spam? by holophrastic · 2015-10-17 03:29 · Score: 4, Informative

Welcome to allowing anyone to make my phone beep a thousand times every minute while I'm at dinner.
What do you think my father is going to do when his phone asks for authorization that he didn't instigate? He's going to call me saying that his e-mail is being hacked. ...and when it happens a dozen times an hour, he's going to accidentally authorize something -- and then have no idea what's happened as a result.