davidmitchell2

While these seems to be secure... tampering with default settings always cause PITA; especially during automated upgrades. In addition, ssh port changes are all security thru obscurity.

+1 for Canary!

Pretty sure EU and US will not diverge so much like Russia did. Russia is also tiny market (both population, GINI, internet penetration). See EU-US Privacy Shield - courts may say but nothing practical.

May be India/Middle-Eastern countries might but still there is so much inter-dependency everywhere - no one dares to annoy other.

There are lots of executives, politicians across EU/US living + having family in either places. So unlikely.

I therefore have one for facebook, slack and so on (i.e) for every major company when I login. Then one is for just browsing.

Yes, I just tested it with one my accounts that has NO recovery email address/phone. ONLY U2F key.

Select forgot password; the it asks Insert U2F Key. Then recovered. Yes, it may be that if one loses U2F key in Metro it is dangerous but some risk is always there. (i.e) how many times have you lost your key in your life? If more than one per year then keep one U2F at work and one at home.

Lets be honest - not having cards working for a day is not the same as earthquake. Sure people will miss trains/rent etc. 1 or 2 business may go under but for 90 % people all will be fine. Heck I am sure if many shops/metro will be free if some one like erste bank or Sparkasse does not work.

That is what it means by encrypted data storage. Only the user has access. If they managed to see/recover your files then it is not encrypted.

(at the end, people will complain at both ends - some want convenience and do not care if companies see data. Others want total encryption and do not care if lost.

Get an account with iCloud and forward all mails as backup to iCloud

Assuming they have cryptography all data is lost.

You are correct but it is one in year or decade. Right... rest of the time all is good. people will opt for convenience.

But as one can imagine people (99% are on Windows) do it in haste...

2. Instead of that use separate firefox profiles - one exclusively of Gmail. Another for casual browsing. If you clear cookies all the time then it seems like you are logging in so many times per day. This could be a warning sign of hacked account - for google. (i.e) do not do unusual things.

3. At the end U2F is the proper solution, albeit late!