From PC Mag: Google decided to celebrate Halloween and the final day of Cybersecurity Awareness Month by introducing a new risk assessment every time you try to log in to your Google account. The knock-on effect being, JavaScript is now required to sign in. No JavaScript? No access.
Attempting to sign in with JavaScript disabled in your browser will result in a "Couldn't sign you in" message appearing, suggesting JavaScript either isn't supported by your browser or turned off. The only solution is to turn it back on or use a more modern browser. The good news is, there's plenty of choice with Chrome, Edge, Firefox, Safari, Opera, Vivaldi, and even Internet Explorer offering support and JavaScript turned on by default.
Google doesn't see this demand for JavaScript as being a big problem because according to the search giant only 0.1 percent of Google Account users turn it off. The internet is becoming increasingly JavaScript-reliant anyway, so it's unlikely that tiny percentage will grow in the future.
There's no details on what Google's risk assessment actually entails, and I don't expect any to be forthcoming. Why would Google publicly share how it's checking the security of a sign-in process? That would only make it a weaker process as the more information an attacker has about how it works, the better the chances of them finding a way to circumvent it.
View: Article @ Source Site
