This week, TechCrunch made a big to-do by publishing internal Twitter business documents that they apparently received from an enterprising hacker. The access to multiple networks apparently began when the hacker accessed the GMail account of the wife of a co-founder.
If you, like Twitter employees, store any sensitive information in your Google Docs, or even have other people’s passwords hanging out in your GMail archive, then yes, it’s important to pick a unique password for different services, and make sure they’re all strong passwords. But that still leaves a hole in your security strategy: using the “forgot password?” feature in your Google Account.
1. Log into your Google Account settings (don’t worry, that link isn’t really for your account), and you’ll see an area for “Personal Settings”:

Click on “Change password recovery options”. This is the feature that lets you get your password back when you’ve forgotten it, or when someone who isn’t you wants to get at it.
2. Google will ask you to verify your password for added security.
3. On this screen, there’s an option for “Security Question”:

If someone that you don’t trust implicitly can guess the answer to the question you’ve chosen, you need to change this. Even if you’re not the spouse of the co-founder of the most popular and secretive company of the last few years. Sensitive personal data is retrieved through social engineering all the time, and if someone has access even just to your e-mail, you’re a prime candidate.
Better Than Your Old Phone Number
More people than I probably know about may have my old home phone number in an address book somewhere. I had that phone number for over 20 years. Anyone could have it. So, instead, I’m going to use the write my own question option:

Here’s the novel part: come up with a fake answer. Even better: come up with an absurd answer to a reasonable question.
For example:
Question: What’s your husband’s mother’s name?
Answer: banana bread
This question/answer combination is memorable, provided that you love your mother-in-law’s banana bread. You know more than anybody about how your brain works, and how your brain will likely still be working in the future. Spend some time on it, and come up with something truly unique, but outwardly ridiculous at the same time.
For what it’s worth: no, I’m not a big fan of banana bread.
For the purposes of this article, the term “iPhone” includes “iPod Touch”, and I’m assuming that your operating systems are up to date.
Along with new firmware for existing iPhone owners, and the new iPhone 3G itself, Apple is releasing this week a new service called “MobileMe”, succinctly described as “Exchange for the rest of us.” In short, it automatically syncs your contacts, calendar, e-mail and photos between your home computer and/or work computer and/or iPhone. It stores these items in a 20 GB cloud of data and is smart enough to push updates to you from any of these categories, wherever you are, as long as you have an Internet connection or cell phone signal.
It sounds wonderful. Unfortunately, it costs $99 (US) a year for one person or $149 for a Family Pack. Calendars and contacts don’t take up much hard drive space, but between e-mail attachments and photos, it wouldn’t be that hard to bump up against the 20 GB ceiling, and it’s $49 for another 20 GB (or $99 for another 40 GB). As of this writing, a 500 GB hard drive goes for around $100. I will admit that managed data storage should be more expensive than buying yourself a hard drive, but twelve times as expensive?
I think we should hold off on signing up for MobileMe for a little while, because if the goal is automatic syncing of your contacts, calendar, e-mail and photos, I predict Google and Yahoo! are going to make this possible for free (and probably with “unlimited” data storage) in the near future. Taking each one in turn:
E-mail
If you use GMail (and I believe everybody should, even if your e-mail address is at a different domain), your e-mail is already syncing with GMail on your iPhone. Having it automatically pushed to your phone isn’t happening, yet, but it will be possible for all applications to take advantage of the “cloud computing” scenario that Apple designed for the iPhone. Do you suspect that Google won’t make a GMail app for the iPhone with push e-mail?
Contacts
With the update to OS X 10.5.3, you can already sync your contacts between your iCal (and by extension, the iPhone) and Google. See previous comment about future push scenarios, but for the time being, it would be a weird kind of emergency needed to make a lack of push technology a serious problem in this arena.
Calendar
I actually originate my calendar with Google Calendar, and subscribe to it in iCal, and by extension, my iPhone. See previous comment about future push scenarios, but Google already has a nicely iPhone-formatted version of the Calendar that loads in the Web browser.
Photos
This is probably the first thing that made me second-guess my temptation to subscribe to MobileMe, mainly because I love my Flickr account. It’s got a long history, and all my friends are there, etc. I can already e-mail photos from my iPhone to Flickr using a customized e-mail address, so that could hardly be simpler. Even so, it appears that Flickr has every intention of making their site as friendly as possible for the iPhone.
Now, I’m merely speculating that Google will come out with native iPhone apps that mimic most of the functionality of MobileMe, but look at Google’s track record. They try everything, and succeed at most of them. My plan as described may not be as elegant as a MobileMe account, but I think it’ll be just as easy, and it’ll cost 100% less.
This is only a prediction. Don’t blame me if I’m wrong. But unless you know something I don’t about Google’s plans, it’d still be smart to wait a month or so and see what they have to offer.
There’s a new kind of gasoline pump being shipped to gas stations, and it’s the kind of thing guys will like. If you need directions, just check the pump. These new devices are equipped with a stripped-down version of Google Maps, pre-loaded with locations hand-picked by the station owner.
Once you find your destination on the device, you can even print out the directions and coupons. As of now, Google will not place advertising on the service, encouraging gas station owners to work with their local restaurants, hotels, and other destinations.
There’s a strong drawback. If you don’t have a destination address, and the place you want to visit is not one of the gas station’s “partners,” the maps will be useless. You’ll have to suck it up and ask for directions from a live human being anyway.
Those of us filling up in New Jersey are not permitted to pump our own gas, so we probably won’t see this technology. In fact, some gas stations around here haven’t upgraded their pumps since what I imagine would be some time in the 1960s or 1970s. This could be helpful when traveling out of state, though.
Gas Stations Getting Pumped for Google Maps [News.com]