Once said this - and again with all due respect - the idea of having *anything* of actual value accessible "from everywhere" (as is - at least partially and if I get it right - on the cloud) via Facebook, Google or similar is very different from what I would envision as "safe" or "protected".
Working on an air-gapped PC inside a faraday cage in an underground rebar concrete bunker with 5" thick steel doors is more like it wink .
To make more clear the above note, there is most probably no issue whatever in the actual implementation of the crypto/protocols/whatever of the service/tool, but a Google or Facebook login (which are handy means to get access easily with a "same" ID/password to many services) should not be used for anything exception made for personal, not professional, stuff of the lowest importance.
Raise your hand (if you are either a Google or Facebook user) if you NEVER have used that id/login on a non-secure machine, or on another people PC/phone/device or when connected to an unsecure wi-fi network.
And those that raised your hand, please lower it IF you EVER used that login/password by mistake when attempting to access ANY other site.
Good, I see that no hands are in the air. )
Sure, if you have a "dedicated" Google or Facebook account that you ALWAYS and ONLY access from a (hopefully) secure connection you are good to go.
And - as a side note - the underground rebar concrete bunker is pleasantly fresh at around 22° in these days of exceptionally high temperature. wink
jaclaz
but a Google or Facebook login (which are handy means to get access easily with a "same" ID/password to many services) should not be used for anything exception made for personal, not professional, stuff of the lowest importance.
Jaclaz,
Thank you for clarifying your statement and I do agree that a dedicated email with a complex password not used for any other services would provide an extra level of security.
In our case, Multi-factor authentication is mandatory on all our accounts (except Enterprise within a secured VPN on dedicated hosts) and this does offer an extra layer of security, but the first weakness in any account compromise is often a compromised password from a situation like you describe.
No matter what application is used, be it online or offline, security of your data should be the #1 priority.