This is a good article on how to close security holes for Google Apps users. At the core is “two-factor authentication”. I’ve written about two factor authentication before and I wish it was available on more sites. I like Google’s and PayPal’s implementation (using my iPhone to receive a one-time second authentication password). It’s not a huge pain because I can check a box to have Google remember me for a while. Why aren’t more sites using this? My bank doesn’t even offer this. Although two factor authentication isn’t the end all be all of security, it closes a gaping hole.
