Why you should use 2-step verification

"2-step verification adds an extra layer of security to your Google Account by requiring you to have access to your phone – as well as your username and password – when you sign in. In addition to your username and password, you'll enter a code that Google will send you via text or voice message upon signing in.

2-step verification drastically reduces the chances of having the personal information in your Google account stolen by someone else. Why? Because hackers would have to not only get your password and your username, they'd have to get a hold of your phone."

I recently switched to using 2-step verification and it is only a little more work and a lot more secure. There are a couple of apps that don't work with it - like the Picasa Logitech Revue App, but most will work using an "application specific password". This video talks about those as well. I was recently prompted by a friend to do this after E-mails in my name that *appeared* to come from my gmail account. In the end it was a spoof and my account was fine. Still it scared me enough to change my password and switch to 2-step verification.

TiVo^® Service Announcement
Dear TiVo Customer,

Today we were informed by our email service provider that your email address was exposed due to unauthorized access of their system. Our email service provider deploys emails on our behalf to customers who have opted into email-based communications from us.

We were advised by our email service provider that the information that was obtained was limited to first name and/or email addresses only. Your service and any other personally identifiable information were not at risk and remain secure.

Please note, it is possible you may receive spam email messages as a result. We want to urge you to be cautious when opening links or attachments from unknown third parties.

We regret this has taken place and apologize for any inconvenience this may have caused you. We take your privacy very seriously, and we will continue to work diligently to protect your personal information.

If you have unsubscribed in the past, there is no need to unsubscribe again. Your preferences will remain in place.

Sincerely,
The TiVo Team

Old news from April.. file it in the "Can ANYONE Keep Our Data Safe" department. It was just our e-mail addrs, but we *really* need to pay closer attention to our personal security. And those that are trusted with our information had better get their acts together.

Dropbox (http://dropbox.com) has been a savior for sync'ing my multiple machines and acting has my storage in the cloud. However, you have to trust your cloud service and Dropbox has "dropped" the ball in a big way at least once. (http://news.cnet.com/8301-31921_3-20072755-281/dropbox-confirms-security-glit...

There are a number of competing cloud storage services out there and YouSendIt is the latest offering. Their unlimited storage is appealing, but they lack Mac sync software to make it compelling to me yet.

YouSendIt on security: http://www.yousendit.com/security-overview
Dropbox on security: https://www.dropbox.com/help/27 (You know, except for when they are sending code to their servers that make passwords optional.. and you know, when their employees have the ability to decrypt all your stuff...)

Tell a friend" resulted in suspended Facebook account

Mint.com has been a financial life saver for me. I can finally track where all my money goes and set a budget that I can follow! However, since its been acquired by Intuit, quality of service has been a little erratic. For example, a week went by before they resolved a problem with sync'ing with my bank. Its hard to fault a free service like this, but there are some things even a free service should not fail on - security. For Facebook issue, it just looks like Mint's third party promotional partner did not follow protocol with Facebook. I spent last evening changing all my account passwords for fear of a real phishing attack had occured. Regardless, Mint *should* be all over this doing damage control. BTW, Mint, get your act together and charge me for a "Pro account." I'll pay!

1Password has an update for their Google Chrome plugin - still alpha.