Last week, Google’s chairman Eric Schmidt said he was ‘very proud’ that Google was able to avoid paying taxes in overseas markets like the UK. This is at a time when multi-national companies like Google are under fire in the UK for not paying their fare share of taxes, and when public services are being cut because there’s not enough money left from government funds – funds which are raised through taxes. Ergo, if these companies did pay fair taxes, we wouldn’t be so screwed.
Frankly, Schmidt’s comments are insulting. The only people who will be pleased by his statement will be Google shareholders and investors; to everyone else, especially in the UK, it’s demeaning. And, unsurprisingly, people are looking to boycott Google as well.
This means things like:
Using Mozilla Firefox instead of Google Chrome
Switching to Yahoo! Mail or Outlook.com instead of Gmail
Uploading videos to Vimeo and photos to Flickr, instead of YouTube and Picasa Web Albums
Searching using Bing
Sharing on Facebook or Twitter instead of Google+
Using an ad-blocker to hide Google’s advertising
Storing files in Dropbox or SkyDrive, rather than Google Drive
Using maps from Apple or Microsoft
Personally, I’m not going down the route of a boycott, even though I think Schmidt’s attitude is unacceptable. And, in any case, Apple are also guilty of tax avoidance in the UK, as is Facebook, and I’m sure Microsoft probably is as well. Unfortunately Google products are so ingrained in how I use the internet that I’d find it difficult to not use them.
And I think the best way of tackling the problem is to close the loopholes that these companies exploit. Avoiding tax increases profits; for some companies, this would be a no-brainer and has, until recently, not really attracted attention. Of course, times have changed and now these companies have the negative image that tax avoidance brings to counter; Starbucks have found that this was to their detriment and I hope that Google will follow.
Disclaimer: This site carries advertising via Google and Amazon.
Good password practice should mean that passwords are hashed, using a one-way algorithm, and ideally salted as well. Tesco claims its passwords are stored in an encrypted format, but presumably this is a symmetrical encryption method because if you forget your password, Tesco will email it to you, in plain text. Remember, email isn’t encrypted so anyone who is snooping your emails will be able to retrieve your password, and log in to your Tesco account.
What makes this worse is that Tesco doesn’t allow for particularly strong passwords, either. They have to be a maximum of 10 characters, and can only contain letters or numbers. Even worse is that passwords aren’t case sensitive, and top it off, the tesco.com web site uses very old versions of Microsoft’s IIS and ASP.Net, which are potentially more vulnerable to security attacks.
If you have a Tesco account, I’d therefore strongly suggest that you ensure the password you use is unique (this is good advice for any web site but especially applies here) and that you don’t store your credit card details with Tesco. If you don’t use Tesco anymore, then you could contact them to ask them to delete your account, citing fears about their security.
Of course, Tesco are far from being the only offenders here, and Plain Text Offenders collects various emails from web sites who will also send you your password in plain text.
It is with a little sadness that Mozilla Thunderbird will no longer receive resources from the Mozilla Foundation. The decision has been made to focus on other products (mainly Firefox), and that there’s not much room for further innovation in desktop email clients – especially as many people now use webmail services exclusively.
I’ve been a long-time user of Thunderbird – right back to version 0.1 alpha (then called Minotaur) which I reviewed back in April 2003. It’s come on a long way since then, and is still my favourite email client on Windows – especially with the Lightning extension adding a calendar feature. A myriad of other extensions has also allowed me to customise it how I want.
That being said, in some ways it’s no longer meeting my needs. I use at work – officially we’re supposed to use Outlook but there are many people using Thunderbird instead, as its IMAP support is much better. This is fine for our email server which is Unix based, but if we ever move to a Microsoft solution then the lack of support for Exchange, even after all of these years, makes Thunderbird fall short.
I also no longer use Thunderbird at home; earlier this year, I moved to Sparrow which offers a much simpler and lighter experience. Thunderbird is great for an all-singing, all-dancing email client and great for the large volumes of mail that I get spanning different folders, but at home, I just want something basic that can stay in the background. It may have far fewer features but Sparrow suits my needs better. Thunderbird is still installed for the few times when I work from home, but I may now look into Apple’s own email client instead.
As I understand it, the next release of Thunderbird will be an ‘extended support release’, at which point it will receive fixes for major bugs and security issues, but no new features – at least, not from Mozilla themselves. It’ll still be hosted by Mozilla and, being open source, should ‘the community’ want to contribute patches to it then they will be welcome to. Postbox remains as a commercial fork of Thunderbird, although its £30 price tag is high.
It’s a shame to see Thunderbird fade into further obscurity but an understandable one. Many users just don’t need a desktop email client anymore, because they pick up their email on a mobile device or webmail. Outlook and Lotus Notes rule the corporate roost. That doesn’t leave much of a market for Thunderbird to serve.
Back in December I did a quick comparative review of Microsoft’s SkyDrive and Dropbox, and basically declared Dropbox the winner. Things have changed since then – Skydrive, now known as OneDrive, has become much simpler, and Google Drive has launched (literally a few hours ago). So, it’s about time to revisit the subject of which is the best.
Storage space
If we’re talking free, then OneDrive is the clear winner here. At the moment, you can get 25 GB of space for free, although this is for a limited time only; if you don’t sign up before the offer ends, you’ll have 7 GB. But this still compares favourably with Google Drive, which offers 5 GB, and Dropbox, which offers only 2 GB (although it’s easy to get more, up to a maximum of 18 GB).
If you’re willing to pay, then Google’s cheapest package is 25 GB for $2.49 per month ($29.88 per year), Dropbox’s cheapest is 50 GB for $9.99 per month or $99 per year (but you still get extra space with referrals so you may get up to 82 GB), and Microsoft’s cheapest is £6 per year for an extra 20 GB on top of your free 25 GB, for a total of 45 GB. On this basis, OneDrive also wins for being the cheapest.
So, if it’s lots of space you’re after, go for OneDrive.
Desktop compatibility
If you want to be able to use your files on a computer, you’ll need to install a desktop client. If you use Windows Vista, Windows 7, or Mac OS X Lion, then all three services will cater for you. If not, then your choices are a little more restrictive.
If you use Linux, then Dropbox is your only option, as OneDrive and Google Drive doesn’t yet have an official client. Dropbox and Google Drive support Windows XP, but OneDrive doesn’t – although it is possibly to mount your OneDrive in XP using the command line, if you’re happy to do that sort of thing. OneDrive will also only work on Mac OS X Lion – earlier releases aren’t supported. Google Drive definitely works on Lion but I’m not sure about older OS releases.
Dropbox also seems to offer more features – files can be synchronised between computers over a LAN if they’re on the same network, thus making uploads faster between machines, and you can also enable ‘selective sync’ if you don’t want all of your Dropbox folders to be synced to certain computers. There’s also some extra options when you right-click a file, allowing you to copy a public link to that file in your Dropbox to share – OneDrive and Google Drive only offer this on their online versions.
On my Mac, Dropbox used the least RAM of all three – around half that of Google Drive. All three apps are 32-bit only, however, and do not take advantage of the performance improvements available to 64-bit apps on the Mac.
Dropbox is also very bandwidth efficient, especially when compared to Google Drive; if you modify a file in your Dropbox, only the parts of the file that have been changed will be uploaded, not the whole file as with Google Drive. Finally, Dropbox and Google Drive put indicators on each icon to show its status – whether the file has been synced or is being synced, and, on a Mac at least, OneDrive doesn’t do this.
Dropbox wins this round, for greater compatibility and more features.
Mobile compatibility
None of the three services officially support all four major smartphone platforms – iOS, Android, Windows Phone and BlackBerry. Google Drive is, at time of writing, Android only, although an iOS app is in the works and should be available shortly. Dropbox has official apps for iOS, Android and BlackBerry, and there is an unofficial Windows Phone app called Boxfiles (which I believe costs a small amount of money to buy). OneDrive has official apps for iOS and Windows Phone, but no Android or BlackBerry client; although Browser for SkyDrive is a third-party Android app. So, chalk another win for Dropbox as it’s the only one that can be used on all four smartphone platforms, albeit unofficially on Windows Phone.
Web access
All three services are designed to help you move files between multiple computers, but what if you need to access your files on a computer where you haven’t installed the desktop client? Well, thankfully you can also access your files in any web browser on all three services.
Dropbox’s web access is basic, allowing you to do basic file and folder operations, view photos and movies and recover previous versions of files, but you can’t edit any documents stored on it. OneDrive and Google Drive both integrate file editors – Office Live and Google Docs respectively – so you can actually view and edit documents online. Unfortunately, files created in Google Docs on Google Drive can only be edited in Google Docs unless they’re exported as Microsoft Office or OpenDocument files, so even on the desktop, opening a Google Docs file will open your web browser.
All services allow you to search your storage, but Dropbox’s search is quite basic. OneDrive uses Bing, which should be more powerful, but Google Drive excels by including OCR support in its search, letting you search text inside image files, and image recognition, so it would recognise photos of the Eiffel Tower (for example) and allow you to search for these accordingly.
Security and Sharing
Google Drive is arguably more secure than Dropbox or OneDrive because it allows 2-factor authentication along with the rest of your Google account, so even if someone has your password, it’s almost impossible for that person to get access to your account. Note that all three now offer this (March 2014)
All three let you share files with others, and while Dropbox is the only one that lets you do this on the desktop as well as online, OneDrive will also share files with your friends on Twitter, Facebook, LinkedIn and MySpace (although you can’t control which friends can access it). Google Drive similarly offers Google+ integration.
Google Drive and OneDrive also provide collaboration tools with other users; whereas Dropbox simply lets you share a file with another user, Google Drive and OneDrive will let others edit the file, track their changes and allow you to chat whilst doing it.
Third-party access
Dropbox has an open API which means that you can allow third-parties to access your files, such as ifttt, and also means that unofficial clients can give you access to your Dropbox. Google Drive also has an open API, but having only just launched means that there are only a few sites, like HelloFax, which can use it as yet. But, this does mean that unofficial clients for platforms like BlackBerry and Windows Phone are possible in the future. Similarly, OneDrive has an API which has resulted in the aforementioned unofficial Android client, as well as a plugin for Outlook, but there isn’t yet the breadth of apps which take advantage of the Dropbox API.
In summary
If you’re after a lot of space, go for OneDrive, as it gives you more free space than the others and extra space is pretty cheap. If you need to collaborate on documents, or regularly work on the web rather than on a computer where you can save files, then Google Drive and OneDrive are both worth considering. But if you want the greatest compatibility, and, in my opinion, something simple that just works, go for Dropbox.
Of course, all of these services are constantly evolving – and Google Drive only launched today – so this advice may well change in future. In the meantime, I’m personally sticking with Dropbox – and here’s my referral link for good measure.
(credit to Lifehacker for some of the information in this article)
Note that this article was updated on the 27th April to mention the SkyDrive API and the availability of an unofficial SkyDrive app for Android.
On Monday, Gowalla announced that the two co-founders of Gowalla and several of its staff were moving to Facebook shortly and that the service would be closing sometime in January. Having formally launched at SxSW 2009, the site will therefore be gone before its third birthday.
This hasn’t come as much of a surprise for those following Gowalla over recent months. Foursquare has been the big elephant in the room, attracting more attention and having a much larger user base. For a while, Gowalla had a niche – the design of the web site and app was much better, and there were features like Trips (where you could create a list of venues, or ‘spots’ to visit) and virtual items that you could collect. But earlier this year version 4.0 of the app was announced, which removed several features, including items, and tried to focus on travel guides.
This was not well-received. For a while I’d been trying to use both Foursquare and Gowalla, as they both offered something different, but the 4.0 update put me off. Gowalla wanted to focus more on ‘stories’ – not just individual checkins taken in isolation, but say catching a plane, staying in a hotel, visiting attractions and then coming home as one story – or at least this appeared to be the intention. Sadly this wasn’t the reality – ‘stories’ were just individual checkins.
So what now? Gowalla is presently still around and you can still download the app from the iOS App Store, but presumably new user signups will end soon. An export feature has been promised to allow you to retrieve your data but it isn’t live at the time of writing. Even though several of the developers are going to Facebook (the others have been sacked, apparently), it’s a ‘talent acquisition’ which means that Facebook is essentially buying out the staff and not the product, so any data you have on Gowalla will not be transferred to Facebook. This isn’t the first time Facebook has done this – box.io was one of the most recent services to be ‘aqhired’ by Facebook where the developers moved to FB and the service shut down. Still, if you think Facebook is an evil privacy-stealing flying purple people eater, then once you’ve exported your data you can delete your account.
While it’s sad to see Gowalla go, this is potentially good for Facebook, and its new profiles that are aiming to document your life as a story (as far as I can tell). Gowalla’s talent could well be very important in making this a good feature.
As for Foursquare? On the one hand, with Gowalla out of the picture, it has less competition, and could gain favour with ex-Gowalla users if it allows them to import their data and gain badges retrospectively. However, this new deal with Facebook could see Facebook Places resurgent, and while Foursquare has over 10 million users, Facebook has hundreds of millions. Quite what Facebook plans with respect to its location based features remains to be seen but this acquisition shows that it’s more serious about it than some of us thought.
A couple of weeks ago I focussed on the huge number of new features that Foursquare had rolled out in a four week period. Things have quietened down a bit since then – although there has been an updated Android client to include events and better photo support to match the iPhone, as well as the ability for staff to reverse venue merges, SU2s can edit venue descriptions and a new URL format for venues on the web site. But the service is still very much alive and innovating.
Alas the same cannot be said for its competitors – Gowalla, Facebook Places and Google Latitude.
A couple of weeks ago Gowalla announced the removal of some features from the platform in the next version. Items, like those shown above, will be removed completely; Notes will be removed pending a new implementation to come later, and Pins (like Foursquare’s badges) will see the ‘fat trimmed’ from them. There will be other new features introduced but the announcement doesn’t expand on what these are.
Now while I prefer Foursquare, I do use Gowalla and have cr.osspo.st configured to push my check-ins there as well, and it’s a particular shame to see Items removed. Gowalla stated that fewer than 0.5% of its users actually used items, and there seemed to be a lot of confusion about their purpose. If Gowalla made more effort to explain the role of items, how to get them and why you should drop them at spots then maybe more people would use it – it’s one of the features that makes Gowalla unique.
Foursquare had a similar problem with check-in points before Foursquare 3.0 was released – they didn’t seem to serve much of a purpose and were open to abuse. But rather than remove the feature completely, Foursquare overhauled and improved the points system and re-introduced the leaderboard to encourage competition between friends, and now it works well.
Without Items, the differences between Gowalla and Foursquare are almost minimal. Foursquare’s new Lists feature is very similar to Gowalla’s Trips, and Foursquare’s design improvements mean it’s not far behind Gowalla in terms of appearance. There’s now very little that’s unique about Gowalla and it’s a shame.
I also mentioned that Facebook Places. A recent Business Insider article suggests that Facebook is scaling back its Places feature, and so rather than you checking in you would simply add a location to your status updates and have a choice of venues to do so. Facebook updated its iOS app this week and whilst the standalone checkin feature is there, you can also attach a location to a status update. Facebook also recently discontinued its Deals feature in the UK (not sure about the US) which competed against Foursquare’s Specials, where businesses could offer special deals to those who checked in.
And finally Google Latitude. Earlier in the year an update allowed users to check into anywhere that existed on Google Places, rather than just updating their location co-ordinates, but there hasn’t been any changes since. With the advent of Google+, it may be that Google decides to focus on the location-based elements of that instead, similar to what Facebook is doing.
It’s been a while since I last posted about Foursquare, and a lot has happened. Foursquare has been busy rolling out new features, so I’m going to summarise what’s new. Most of these have cropped up in the past month.
Lists
You can now make lists of venues, such as your favourite museums, pub crawl routes, best places to go for a good burger, that kind of thing. Foursquare starts you off with three lists – venues you’ve added to your to-do list, tips you’ve ‘done’ and tips you’ve added yourself – but you can add more. It’ll even suggest some based on your checkin habits – it’s suggested food places in Leeds and Bradford for me.
Foursquare now pulls data from external sources so that you can not only check into a venue, but check into an event at that venue. In the screenshot on the right is my local cinema, and Foursquare knows which two films are being shown there today. When you select ‘Check In Here’, it’ll ask you which film you want to check into – or whether you just want to check in to venue itself. Events listings appear in the iPhone app and on the web site, but haven’t yet been rolled out to the other mobile clients on Android, Blackberry and so on.
New mobile clients
Speaking of which… the iPhone client got a bit of an update recently. It’s now more blue with several screens re-designed, and it now looks a lot more professional than it did before. Another major change is that photos attached to checkins now show in the timeline on the friends page.
Android also received some attention to make it feel more like a native Android app and not a quickly-ported iPhone app, but it lags behind the iPhone app in terms of features. Similarly the Blackberry app now integrates with Blackberry Messenger and has been finally updated to version 3.0, with the Explore feature.
More brand pages
Foursquare has launched new brand pages, so it’s now much easier to create a brand presence on Foursquare. Pages are free to set up, but I gather there are still costs involved if you want a custom badge for your brand.
More badges
Speaking of badges… as usual, Foursquare has added more badges including a new ‘core’ badge – Baker’s Dozen, for 13 checkins at bakeries. You may want to head to Gregg’s for a sausage roll or 12! New partner badges have been introduced from ESPN, MTV and Pepsi, plus the badge for the upcoming film 30 Minutes or Less is now available globally and not just in the US.
Notifications
Back in July Foursquare introduced a notification ‘tray’ on its Android client and web site, which came to the iPhone a few weeks later (rare example of Foursquare offering something to Android users first!). There’s now an icon to the right of the Foursquare logo, which when clicked will inform you of new friend requests, when you’ve been ousted as a mayor, when a friend does one of your tips or comments on your checkins or when a venue you’ve previously checked into starts offering a special deal. It’s a bit like Facebook notifications. You can also control whether these do a push notification in the mobile apps.
Presidential Foursquaring
Barack Obama is touring the country, so you can now follow The White House on Foursquare. Of course, this probably has nothing to do with him running for re-election next year…
New categories
Foursquare has added a handful of new categories – Tennis stadiums, Military Bases, Car Rental counters for airports, apartments and neighbourhoods. A few existing categories, mainly related to food, now have new icons as well.
US Merge-a-thon
Foursquare used their computers to identify a whole host of potential duplicate venues, which were queued up for SU2s and SU3s to process – over 100,000 of them. As it happens, quite a few were not duplicates but hopefully it will result in a net improvement in the quality of Foursquare’s listings. All of the venues were in the US this time.
So, as you can see, a lot has happened on Foursquare over the past few weeks. Foursquare is still owned and run by its founders and hasn’t been absorbed as a subsidiary of a larger company, so it’s agile enough to be able to make major changes like this very quickly. And hopefully there will be more to come!
Earlier this week I said that our flat move had gone well and in particular that our phone line would be activated on Thursday, i.e. yesterday. It hasn’t.
Christine got a voicemail message from BT (with whom we have our phone and broadband) asking her to ring them. After being on hold for quite a while, someone finally answered, but initially didn’t know why we ringing. Eventually, we were told that there was a problem with the phone line and that the activation would have to be put back. We could have a working phone by Friday (today), but with a different telephone number, and that the broadband wouldn’t be working until Thursday next week – a week later than we’d been told originally.
To make it worse, we’re not receiving a discount on the monthly bill for the time (nearly 2 weeks) when we’ve been unable to use our phone line or broadband, so we’re effectively paying for a service that we aren’t getting.
Initially I had praise for the way BT handled our move – our first call to them assured us that it would be a quick, simple process which would allow us to keep our number. A few days without phone and internet access would be inconvenient but understandable. But having no internet for the best part of two weeks seems excessive, especially as there’s no financial compensation. And really, does it take a whole week for someone to drive over to our local exchange and press a few buttons?
The problem isn’t necessarily with BT Retail, with whom we pay the contract with, but seemingly with BT Openreach, the subsidiary of BT which owns and operates the telephone lines and exchanges in the UK. To me, they seem to be a very expensive and inefficient outfit which only serves its own shareholders, i.e. the BT Group. Although it’s regulated by Ofcom, other parties have very little say in how it’s run.
In Britain, we don’t have that many alternatives to broadband via phone lines. Virgin Media’s cable network is good, but generally limited to large towns and cities – no good for my small town. Wireless broadband over 3G mobile networks is an option: prices are coming down to be comparable with fixed-line internet, there’s no need to install anything apart from plugging in a Mifi router and they can even be bought on pay-as-you-go contracts. But wireless suffers from latency issues, making it poor for use in online gaming, and again, it’s not always available. We’re also some years away from better and faster 4G networks.
Maybe it’s high time for the ownership of Openreach to change; its shares could be split amongst the other large ISPs in the UK (Sky, Talktalk, Orange, Virgin Media etc.) so that all have a say in how its run; it could be made a not-for-dividend company answerable to Ofcom like Network Rail for the railways; or completely re-nationalised. The last one is a long-shot, but any of those should improve accountability to its direct customers (the ISPs) and regular home users.
In the meantime, I’ve paid for an extra 2 GB of data to be added on to my mobile contract with 3 for this month. Thankfully it only costs £5, and 3 don’t charge extra for internet tethering or using your phone as a personal hotspot, so I’m only partially out of pocket. I’ll still be pointing this out to BT in a letter.
In an age when I can order a book at half 4 in the afternoon, and have it on my desk at work at half 9 the following morning, how does it take so long for phone lines to be connected? Is BT’s equipment really that old and archaic, or is their lack of accountability and need to shore up profit margins the driving force here?
A release candidate of Firefox 4 has finally been released after a very protracted beta phase (over six months), and the final release should be coming very soon. One of the major new features is hardware acceleration – using your graphics card to help to make the browser faster and more responsive – and it’s available to varying degrees for Windows XP, 7, Vista, Mac OS X and Linux users. XP users get basic DirectX 9 acceleration, Vista and 7 users get DirectX 10, and if you have Mac OS X Snow Leopard 10.6.3 or above you get to use OpenGL.
Hardware acceleration will be enabled automatically if your computer and drivers supports it, so to check whether it’s working, open a new tab and type ‘about:support’ in the address bar. Scroll right down to the bottom, and there’ll be a section called ‘Graphics’. On the very last line, you’re looking for ‘GPU Acclerated Windows’ – if it says 1/1, then you’re all set. 0/1 means that you’re not using the hardware acceleration. Thanks to Joedrew for this information.
If it is disabled, the next thing to do is to try to enable it. On a Mac, you’ll need to be running Snow Leopard and ideally version 10.6.3, so upgrade to that if you can. On Windows, you’ll probably need to update your graphics drivers. Right now, only Intel, AMD (ATI) and nVidia graphics are supported, so if your graphics card is by someone else, you’re out of luck. But for those three, once you know what type of graphics card you have, head to the manufacturer’s web site and download the latest drivers. In most cases, your drivers will need to be quite new – ATI and nVidia issued updates in June 2010 which are required for hardware acceleration to be enabled.
How good is hardware acceleration? On my test machine, which runs Windows XP and has Intel integrated graphics, I tried Microsoft’s flying images demo in Firefox 4 beta 12 and Internet Explorer 8. Firefox managed a steady 60 frames per second with no problems, whilst IE8 struggled to make 6 frames per second. IE8 also needed 50% CPU usage for just 1 tab, whilst Firefox needed 45% with 9 other tabs open.
There’s some more information on the Mozilla Wiki, including the specific driver versions supported. If you haven’t updated your graphics drivers in a while, now may be a good time to do so, so that you can make full use of Firefox 4’s extra oomph when it’s finally released later this year.
Google has recently enabled two-factor authentication for all users with a Google Account. This means that, when you log in, you provide two pieces of secret information, rather than just a password (which would be ‘one-factor’ authentication). This second piece is a 6-digit code that is generated randomly every 30 seconds from another device.
This improves security by ensuring that, even when a third party knows your password, they still cannot log into your account without the 6-digit code (although see below). Think of it like a PIN number – a thief could steal your credit card but wouldn’t be able to get money out of an ATM without knowing the PIN number.
Some banks have started using two-factor authentication for their online banking services – as well as your username and password, you are asked to enter a code generated by a small electronic device on your keyring. Blizzard Entertainment offers a similar device for World of Warcraft and Starcraft II players, as well as a free iPhone app that does the same thing.
So Google isn’t the first to offer this – it’s actually reasonably well tried and tested. To activate it, log into your account and click the ‘Using 2-step verification’ link. Google will then walk you through setting up your account for two-factor authentication.
There are a variety of options for the second factor. There are apps for the iPhone and Android phones, but you can also receive a code by text message to a mobile phone number that you provide during the initial setup. You’ll also be asked to provide a backup system in case you lose your phone; in my case, Google will phone my work number and a computer will read a number to me.
I mentioned there’s a caveat. Two-factor authentication works great on Google’s various web sites, but falls down if you access Google services through other apps, such as IMAP for Gmail, or CalDAV for Google Calendar, which aren’t really designed with two-factor authentication in mind. As soon as you enable two-factor authentication, any attempts to access data over these protocols will see your login fail.
Thankfully, there’s a way around it, in the form of application-specific passwords. Essentially, for each method of connecting to your Google Account, you can create a separate password. Each password can then be revoked if you find someone using it without your permission, and once generated, passwords cannot be viewed again. Furthermore, the passwords can’t be used to get into your account on the Google web site (they would need your main password and verification code), so it wouldn’t be possible for a hacker to change your main password, or deactivate the two-factor system. It’s not a perfect solution, though.
I’ve turned on two-factor authentication because I have a lot of important personal data in my Google Account – all my contacts, my calendars and hosting details for this site – and wouldn’t want anyone obtaining unauthorised access. The workarounds for CalDAV and IMAP are a bit of a pain, but I feel it’s worth it for the piece of mind.
Whilst we’re on the subject of Google Account security, if you use Firefox I’d recommend installing the HTTPS Everywhere addon, which forces the use of SSL/TLS on most parts of Google. I would, however, suggest disabling the ‘Google APIs’ option in its preferences as this may break some other web sites. Still, it will help to prevent your Google Account data being caught be man-in-the-middle attacks.