How Apple and Amazon Security Flaws Led to My Epic Hacking
For the people that want to turn on two-factor authentication on their Gmail account, here's how to do it: <a href="http://support.google.com/accounts/bin/answer.py?hl=en&topic=1056283&answer=185839" rel="nofollow">http://support.google.com/accounts/bin/answer.py?hl=en&t...</a> I highly recommend it.<p>Some of the common misperceptions I see:<p>Myth: But what if my cell phone doesn't have SMS/signal?<p>Reality: You can install a standalone program called Google Authenticator, so your cell phone doesn't need a signal.<p>Myth: Okay, but what about if my cell phone runs out of power (added: or my phone is stolen)?<p>Reality: You can print out a small piece of paper with 10 one-time rescue codes and put that in your wallet.<p>Myth: Don't I have to fiddle with an extra PIN every time I log in?<p>Reality: You can tell Google to trust your computer for 30 days and maybe even longer.<p>Myth: I heard two-factor authentication doesn't work with POP and IMAP?<p>Reality: You can still use two-factor authentication even with POP and IMAP. You create a special "application-specific password" that your mail client can use instead of your regular password. You can revoke application-specific passwords at any time.<p>Myth: Okay, but what if I want to verify how secure Google Authenticator is?<p>Reality: Google Authenticator is open-source: <a href="http://code.google.com/p/google-authenticator/" rel="nofollow">http://code.google.com/p/google-authenticator/</a><p>Hmm. Maybe I should throw this up on my blog too.