Article first published as Online Security: Using Two-Factor Authentication With Google on Blogcritics.
Did you know you can now use two-factor authentication with your Google account? Think about it: most people use a single username/password combination to gain access to a system-wide array of services in the Google universe. Gmail, AdSense, Blogger, Analytics, Docs, etc, is a whole lot to leave vulnerable to the single username and password approach. And it’s easier than you think for a hacker to acquire your password without your knowledge.
Recently, Google has made two-factor authentication available as a login option worldwide. Two factor authentication in its most basic definition is this: A) something you know (your trusty old Google username/password); and B) something you have (a key or one-time passcode that regenerates every 60 seconds). In short, A + B = access to your account. You need both. So even if your password got sniffed, or you left it in your stolen wallet somewhere, the hacker would still need a unique code to complete the login process.
Google makes it easy, too. The idea is after you login using your normal user/pass (A... something you know), you will be asked for a unique piece of information, a code, to complete authentication (B... something you have), to verify your identity. The code is something your smart phone can provide for you. Simply download an app (iPhone, Android, and Blackberry are supported). The app generates a code based on an algorithm that Google and your smart phone app have in common. Or if you prefer, a regular cell phone can be used (a txt message will arrive with the code embedded). The code is only good for 60 seconds, and then it expires and another code is generated.
So why bother? Your account will be a lot safer if you enable two-factor authentication, especially if you're a regular user of multiple Google products. Heck, it even makes sense even if you just have Gmail. Lock it down, people!
Google has prepared a great set of instructions to help you get started. Go to www.google.com/account to find out more.
Read more: http://blogcritics.org/scitech/article/online-security-using-two-factor-authentication/#ixzz1bRhwSo8O
Showing posts with label technology. Show all posts
Showing posts with label technology. Show all posts
Friday, October 21, 2011
Wednesday, October 5, 2011
Guest Blog: Online Password Strategy
by Michael Puhala
Day job: Dir. of Sales Engineering, Lithium Technology
Twitter: @puhala
Personal site: www.puhala.com
Late last year, I posted an article about online password strategies. For a refresher, you can visit that article here:
Day job: Dir. of Sales Engineering, Lithium Technology
Twitter: @puhala
Personal site: www.puhala.com
Late last year, I posted an article about online password strategies. For a refresher, you can visit that article here:
I mentioned technologies such
as Lastpass, 1Password and Passpack that help manage your online
security and provide some serious convenience in the process. However,
other than mentioning the technologies I liked, I did not really
prescribe a specific path to help protect your identity and your
accounts.
Consider this a mini guide in finally getting on-top of your online security practices.
Consider this a mini guide in finally getting on-top of your online security practices.
Of course, the easiest thing to do is do nothing. I
am going to make some recommendations from the easiest to options that
take a little more effort. Obviously, the path of least resistance also
is the most vulnerable in terms of online security.
Option 1 - Easy
If you are the kind of
person who uses a single password for everything that requires you to
sign-up, you should really rethink that strategy. At the very least,
use a different password for those accounts that are tied to online
banking, and anything related to your personal finances (e.g. Paypal
Account, money management, and commerce sites like Amazon.com). This
password should be at least eight characters long and have some
combination of upper and lower case letters, numbers and special
characters like punctuation. Also, if you have not changed your
passwords to these accounts in more than a couple of years, you should
set a reminder to change your passwords at least every couple of years
if not more frequently.
Option 2 - Moderate
Using a technology
like Lastpass can not only help make your online activity more secure,
it provides some added convenience like automatically logging you into
frequently used sites after you put in your master password when you
start your computing session. In some ways, this option might seem less
secure than putting in your password manually each and every time, but
one way that potential threats make you vulnerable is through
key-logging software that tracks your typing history and is an effective
method to extract passwords. If lastpass is automating the login, than
you are not using the keyboard to type your password. Lastpass gives
you the option to login to the service using an on-screen keyboard which
would also prevent key-logging. Lastpass and other similar services
also allow you to generate unique and random passwords for each site
which is a great method to keep you secure. Since you are not having to
remember the passwords that are generated, you can use a stronger
password combination and length than what you would typically try to
remember.
Option 3 - More Involved
As you might
guess, this is the option I recommend and use myself. The most secure
method of online password protection is called multi-factor
authentication or two-factor authentication. This involves a two step
process to gain access to a account. Some companies like Google and
PayPal offer two-factor authentication when logging into those systems.
Lastpass also offers two-factor authentication when logging into this
system. As Lastpass manages all of your online identities and stores
this information in the cloud (encrypted of course), I prefer using a
more secure system for gaining access to all of my online passwords.
Enter the Yubikey by Yubico. This solution includes a
USB key that is required to be plugged into the computer before gaining
access to your Lastpass account. It’s called two-factor authentication
because both your master password is needed and the Yubikey USB device
is used. Brilliant! So, even if someone has your master password, they
can’t gain access to your password management system unless they also
have the USB key. Conversely, just having the USB key does you no good,
because you also need the master password. Also, the USB key is very
nondescript. Most people will pass if off as a thumb drive rather than a
security device. It can be placed on your keyring so that it’s always
with you.
I’ve chosen to use a Yubikey together with Lastpass,
however, I do not use Lastpass to gain access to my Gmail account as I
want a separate layer of protection for my email system. Gmail now
offers its own two-factor authentication system. Rather than a USB key,
I downloaded an app to my Android phone that generates a real-time
secondary passcode to be entered after you use your normal password.
Also, since Paypal is tied directly to my bank account, I use a
separate hardware based security key to gain access to my Paypal
account. The combination of these systems provides multiple layers of
security. For my banking information, I have configured Lastpass to
prompt me for my master password (and Yubikey) before it will
automatically login to my account. You might see the precautions that
I’ve taken as extreme, but my perspective is that it’s easier than ever
for someone to hack their way into a whole treasure trove of personal
information.
For great technology advice sent directly to your inbox a few times a month, signup for my newsletter, called Citizen Savvy here.
LastPass: http://www.lastpass.com
Yubico: http://www.yubico.com
Twitter: @puhala
Google+: http://gplus.to/puhala
Friday, December 10, 2010
Bow down to Database
Our new god is named Database. Database is in all things and in all creation. Data is its Spirit. Device its flesh. Database wishes to know all and probably does.
Database doesn't require cash. Currency is only a one or a zero in Database. It only confirms that you have adequate reserves at the time of purchase. It knows where you work. It knows your gross compensation; and it knows how much to excise for taxes. Perhaps you're unemployed; Database knows. Or, sadly homeless. Database has already made a note of it. It knows if you're charitable, and how much it should disperse to your place of worship, causes, and political affiliations. Database knows how much retirement savings you have. It knows which stocks you've made or lost money on.
Where do you live? Database knows your address, and those among you who also call it home. Database knows if you're buying or renting. Spouse. Offspring. Database knows who they are and what day they were born. Or maybe you live alone. It knows. Occupations. Schools. Grades. Teachers. Phone numbers. Pets. Subscriptions. Book purchases. TV viewing habits. Internet usage. Music preferences. Water and power consumption. Database knows what your home and property are worth, and how much you owe on your mortgage.
Are you a consumer? Database knows where you like to shop. It knows what you like to wear and where you like to buy it. It knows preferences and predicts purchases. Cash or check. Debit or credit. Paper or plastic. Coke or Pepsi. Verizon or Sprint. Chevy or Ford. Windows or Mac. Directv or Dish.
Database knows what you drive. Did you buy your vehicle or is it leased? Database knows. It knows your payment and who is in possession of the title, how much fuel it demands, insurance coverage, mileage, VIN number, accident history, and known recalls. It says here the floor mats were not replaced as requested by the vehicle's manufacturer. This information will serve useful as it constructs a trail of culpability to the guilty party, in the unfortunate, however likely, event of an accident. Database knows who's at fault. Speeding tickets. Moving violations. Fender benders. Tire rotations. Oil changes. 60,000 mile maintenance records.
Perhaps you don't have an automobile. Database knows you ride the bus, train, or jump from taxi to taxi to traverse the space between points of interest in your life.
Database knows where you like to vacation and how often you travel. Domestic flights. International interests. Meals. Lodging. Rentals. Attractions. Souvenirs. Destination Database.
Database determines net worth. It weighs your plusses and minuses, taking credits and weighing them against debts, thus arriving at a number to be used as your very own financial litmus test, asserting forever more that you're either drowning in red or splashing about playfully in black. Credit scores come in three flavors, which Database uses as ingredients to bake that financial cake called your value. Go on... have a bite.
Database knows every school you ever attended. It knows your level of education. It knows if you were educated by an accredited institution, or alternately, studied at the University of Hard Knocks. Ethnicity. Skin color. Religious affiliation. Memberships. Associations. Military history, if applicable. Political proclivities.
Did you know Database can help you with your career? It organizes and offers millions upon millions of jobs. Search Database for opportunity. Apply, apply, and apply again to however many jobs you may feel qualified for; and even some you don't. Go crazy! Database will settle any and all remaining reservations, through a highly secretive and mysterious algorithm, and rate whether you're hirable or not. Be aware that you must fill out a unique database instance for each and every job listing you've expressed an interest in applying. Database reserves the right to list jobs that don't exist, have expired, are found to be made up, or were posted in the spirit of covering one's ass with the guidelines laid out by the Equal Employment Opportunity Commission (A fancy name for a government idea dreamed up to fight discrimination in the workplace. But the EEOC fails miserably short because instead of enforcing the laws and prosecuting violators, the commission publishes easy-for-employers-to-follow rules highlighting compliance, accentuating the bare minimum required). This travesty is of no concern to Database. Your dream job awaits, though citizen, so get on it.
Have you ever been convicted of a crime? Database knows. Background checks are available upon request, for a small fee.
Database knows your blood type and insurance number. Healthcare provider. Medical history. Prescriptions. Dr. visits. Database knows you have high cholesterol. You're considered overweight. You don't exercise enough. You eat unhealthy foods. Are you a smoker? Does your family have a history with cancer? Were you adopted? When was your last physical? Database knows you down to your last strand of DNA.
And let's not forget about fun. Database puts the F.U. in fun. It monitors, requisitions content on your behalf, and supplies all forms of entertainment, leisurely longings, and recreational relaxations. You'll never have to sit alone in a room and read, say, an actual book or something. Database keeps a detailed log of the whole shebang. How awesome is that? This becomes less a challenge and more the norm as technology takes over every last detail of humanity, as is the will of Database -- as long as all good netizens remain faithfully tethered to Internet-connected devices like mobile phones, laptops, pads, desktop computers, gaming consoles, TVs, cars, and more. Passive aggressive mechanisms like traffic cams, security cameras, GPS enabled gadgets, RFID chips, and more all work without requiring pesky input from you. So take a break for a change. You've earned it.
Culture will be tolerated but with a preference towards unnecessary, if not retooled a bit. Database defines culture for us now, because we've lost generations of cultural uniqueness in pursuit of homogenized technology. Black guy and white guy use the same iPhone. Instant harmony. Liberal douche and Conservative douche are Facebook friends. Grandma and Goth like Grey's Anatomy. The melting pot has brewed itself into a yummy bowl of Tolerance, with a side of Acceptance, and washed down with a bottle of Robotic Reason. Feel free to be yourself; just don't ruffle the feathers of the precious Sissy Bird. Database prefers everyone to get along. This is crucial. Individuality will be punished by the Wrath of enlightened do-gooders. The Offended shall be heard. Should you persist in your individuality, Database will be forced to provision you with a shun-worthy label.
Database relies on you to feed it data -- for the most part -- but does employ an army of minions, such as: bankers, administrators, authorities, creditors, nurses, doctors, pharmacists, dentists, insurance offices, Internet providers, utility commissions, grocery stores, Walmart, Costco, clubs, convenience stores, lube shops, tire stores, mechanics, fast food restaurants, Starbucks, Wi-Fi enabled businesses, gyms -- feel free to add some -- all collaborating to fill in those lingering gaps and more completely form an accurate picture of the everyday you. Database reserves the right to fire these participants if it so deems appropriate (in the future, perhaps). But for now, these countless underlings are necessary in rendering the myth of free will. They push and pull us along in an effort to guide us to a place called Options. From there, by deciding between a couple of "options" we will arrive at Choice. Simple, huh?
Database has blessed a few shady entities who are to profit greatly from the relentless gathering, manipulation, and analysis of the data. These Keepers will hold in their possession the crown jewel of knowledge: eternal ownership. It's a win-win for a most unholy union. They get filthy rich for the bargain basement price of their souls. Database gets an turbo-charged upgrade where facts, information, and knowledge about you flow into boundless storage at warp speed.
And the loser here? Well, friend... that's you. Not because you chose wrong at all the right times, or had too much debt, or didn't use your time wisely, or didn't love your family, or showed too much compassion, and too little brains. You were moral. You were fair. You gave a damn. No. You were caught breathing. You were found to be alive. Therefore, you should be cataloged. Some even volunteer the data freely. Early adopters. Programmed fools. Maniacal narcissists, addicted to their own greatness.
A tragic end to the drum-beating enticement of technological advance. The more that is known about you, the more obvious that the desired end is simply that every last remaining fact about you -- the whole of your life -- is to be hunted down and stored, the more you'll disappear into a sea of anonymity. Everywhere and nowhere. Just gone. You lose yourself. You lose you.
Bow down to your new god. You belong to Database now and forever more.
Database doesn't require cash. Currency is only a one or a zero in Database. It only confirms that you have adequate reserves at the time of purchase. It knows where you work. It knows your gross compensation; and it knows how much to excise for taxes. Perhaps you're unemployed; Database knows. Or, sadly homeless. Database has already made a note of it. It knows if you're charitable, and how much it should disperse to your place of worship, causes, and political affiliations. Database knows how much retirement savings you have. It knows which stocks you've made or lost money on.
Where do you live? Database knows your address, and those among you who also call it home. Database knows if you're buying or renting. Spouse. Offspring. Database knows who they are and what day they were born. Or maybe you live alone. It knows. Occupations. Schools. Grades. Teachers. Phone numbers. Pets. Subscriptions. Book purchases. TV viewing habits. Internet usage. Music preferences. Water and power consumption. Database knows what your home and property are worth, and how much you owe on your mortgage.
Are you a consumer? Database knows where you like to shop. It knows what you like to wear and where you like to buy it. It knows preferences and predicts purchases. Cash or check. Debit or credit. Paper or plastic. Coke or Pepsi. Verizon or Sprint. Chevy or Ford. Windows or Mac. Directv or Dish.
Database knows what you drive. Did you buy your vehicle or is it leased? Database knows. It knows your payment and who is in possession of the title, how much fuel it demands, insurance coverage, mileage, VIN number, accident history, and known recalls. It says here the floor mats were not replaced as requested by the vehicle's manufacturer. This information will serve useful as it constructs a trail of culpability to the guilty party, in the unfortunate, however likely, event of an accident. Database knows who's at fault. Speeding tickets. Moving violations. Fender benders. Tire rotations. Oil changes. 60,000 mile maintenance records.
Perhaps you don't have an automobile. Database knows you ride the bus, train, or jump from taxi to taxi to traverse the space between points of interest in your life.
Database knows where you like to vacation and how often you travel. Domestic flights. International interests. Meals. Lodging. Rentals. Attractions. Souvenirs. Destination Database.
Database determines net worth. It weighs your plusses and minuses, taking credits and weighing them against debts, thus arriving at a number to be used as your very own financial litmus test, asserting forever more that you're either drowning in red or splashing about playfully in black. Credit scores come in three flavors, which Database uses as ingredients to bake that financial cake called your value. Go on... have a bite.
Database knows every school you ever attended. It knows your level of education. It knows if you were educated by an accredited institution, or alternately, studied at the University of Hard Knocks. Ethnicity. Skin color. Religious affiliation. Memberships. Associations. Military history, if applicable. Political proclivities.
Did you know Database can help you with your career? It organizes and offers millions upon millions of jobs. Search Database for opportunity. Apply, apply, and apply again to however many jobs you may feel qualified for; and even some you don't. Go crazy! Database will settle any and all remaining reservations, through a highly secretive and mysterious algorithm, and rate whether you're hirable or not. Be aware that you must fill out a unique database instance for each and every job listing you've expressed an interest in applying. Database reserves the right to list jobs that don't exist, have expired, are found to be made up, or were posted in the spirit of covering one's ass with the guidelines laid out by the Equal Employment Opportunity Commission (A fancy name for a government idea dreamed up to fight discrimination in the workplace. But the EEOC fails miserably short because instead of enforcing the laws and prosecuting violators, the commission publishes easy-for-employers-to-follow rules highlighting compliance, accentuating the bare minimum required). This travesty is of no concern to Database. Your dream job awaits, though citizen, so get on it.
Have you ever been convicted of a crime? Database knows. Background checks are available upon request, for a small fee.
Database knows your blood type and insurance number. Healthcare provider. Medical history. Prescriptions. Dr. visits. Database knows you have high cholesterol. You're considered overweight. You don't exercise enough. You eat unhealthy foods. Are you a smoker? Does your family have a history with cancer? Were you adopted? When was your last physical? Database knows you down to your last strand of DNA.
And let's not forget about fun. Database puts the F.U. in fun. It monitors, requisitions content on your behalf, and supplies all forms of entertainment, leisurely longings, and recreational relaxations. You'll never have to sit alone in a room and read, say, an actual book or something. Database keeps a detailed log of the whole shebang. How awesome is that? This becomes less a challenge and more the norm as technology takes over every last detail of humanity, as is the will of Database -- as long as all good netizens remain faithfully tethered to Internet-connected devices like mobile phones, laptops, pads, desktop computers, gaming consoles, TVs, cars, and more. Passive aggressive mechanisms like traffic cams, security cameras, GPS enabled gadgets, RFID chips, and more all work without requiring pesky input from you. So take a break for a change. You've earned it.
Culture will be tolerated but with a preference towards unnecessary, if not retooled a bit. Database defines culture for us now, because we've lost generations of cultural uniqueness in pursuit of homogenized technology. Black guy and white guy use the same iPhone. Instant harmony. Liberal douche and Conservative douche are Facebook friends. Grandma and Goth like Grey's Anatomy. The melting pot has brewed itself into a yummy bowl of Tolerance, with a side of Acceptance, and washed down with a bottle of Robotic Reason. Feel free to be yourself; just don't ruffle the feathers of the precious Sissy Bird. Database prefers everyone to get along. This is crucial. Individuality will be punished by the Wrath of enlightened do-gooders. The Offended shall be heard. Should you persist in your individuality, Database will be forced to provision you with a shun-worthy label.
Database relies on you to feed it data -- for the most part -- but does employ an army of minions, such as: bankers, administrators, authorities, creditors, nurses, doctors, pharmacists, dentists, insurance offices, Internet providers, utility commissions, grocery stores, Walmart, Costco, clubs, convenience stores, lube shops, tire stores, mechanics, fast food restaurants, Starbucks, Wi-Fi enabled businesses, gyms -- feel free to add some -- all collaborating to fill in those lingering gaps and more completely form an accurate picture of the everyday you. Database reserves the right to fire these participants if it so deems appropriate (in the future, perhaps). But for now, these countless underlings are necessary in rendering the myth of free will. They push and pull us along in an effort to guide us to a place called Options. From there, by deciding between a couple of "options" we will arrive at Choice. Simple, huh?
Database has blessed a few shady entities who are to profit greatly from the relentless gathering, manipulation, and analysis of the data. These Keepers will hold in their possession the crown jewel of knowledge: eternal ownership. It's a win-win for a most unholy union. They get filthy rich for the bargain basement price of their souls. Database gets an turbo-charged upgrade where facts, information, and knowledge about you flow into boundless storage at warp speed.
And the loser here? Well, friend... that's you. Not because you chose wrong at all the right times, or had too much debt, or didn't use your time wisely, or didn't love your family, or showed too much compassion, and too little brains. You were moral. You were fair. You gave a damn. No. You were caught breathing. You were found to be alive. Therefore, you should be cataloged. Some even volunteer the data freely. Early adopters. Programmed fools. Maniacal narcissists, addicted to their own greatness.
A tragic end to the drum-beating enticement of technological advance. The more that is known about you, the more obvious that the desired end is simply that every last remaining fact about you -- the whole of your life -- is to be hunted down and stored, the more you'll disappear into a sea of anonymity. Everywhere and nowhere. Just gone. You lose yourself. You lose you.
Bow down to your new god. You belong to Database now and forever more.
Wednesday, July 7, 2010
Screen Saviour
Salvation awaits, friends. Commit your souls to Screen. Gaze deeply -- intently -- into Screen. Devote your lives to Screen's will. Pledge your money, your energy and your complete attention to the greatness and glory of Screen. Your sins will be wiped clean and your purpose revealed by Screen's plan for your lives. Dance and worship together in the shiny glow of Screen. Praise all-knowing Screen.
All of your yesterdays and all of your tomorrows belong to Screen. And to those all around you who pledge their lives to Screen.
Close your eyes each night peering into Screen's magnificence. Awake each morning and seek the will of Screen. Look to the strength of Screen for guidance. Cling to Screen all your days, at home, at work, in the car, in the store. Screen is everywhere, everywhere there is a screen.
Be on fire for Screen. Share your passion for Screen. Feed Screen your life and everything in it, and Screen will feed you hapiness and joy forever and ever. Hallelujah, Glory be to Screen.
Subscribe to:
Posts (Atom)

