Chatting with a google engineer and talking about security

Chatting with a google engineer and talking about security.

I wanted to know what I should be using for myself.

They use 2-factor auth *everywhere* and suggested that they are about to add another 3rd layer.

Nothing ever lands on their laptops that is actually sensitive in any manner. No code, nothing sensitive.

They can leave their laptops on a table in Starbucks and walkaway. They are disposable at will and constantly.

They use all of these cloud services everywhere, so much so that they assume all networks are compromised or hostile.

Also, they have a background task watching all of their password entries and if they ever type in a password too similar to their work password on any site, then they have to change their google password. Not to mention any attempt to use the same password in another site.

Originally posted on Facebook on May 10, 2018.