Jump to content


Level 1
  • Content Count

  • Joined

  • Last visited

Community Reputation

0 Neutral

About StoreItAll

  1. +1 Evernote is great for storing things in and as a way to capture notes, but if you're writing blogs, articles, etc., there are better tools. Which is a shame. Evernote needs a way to display word count dynamically (the info button doesn't cut it; type a little, open info, type a little more, open info again, and again, and again, etc.). And the counter should then display the number of words/characters in the highlighted selection.
  2. I think we need to separate out multiple issues. Specifically: Garden-variety hackers who merely break in and steal data. Governments who, through force of law compel cloud services to reveal user data (e.g., PRISM). The answer for #1 is that Evernote needs better encryption, specifically for all data in transit at at least more data at rest than is currently provided. Generally, encryption messes up things like indexing and search. Fine. I'm good with that. If I want a file attachment, picture, or audio data encrypted, I should be able to do that through the Evernote clients and Evernote should make sure that the data is always and forever stored in an encrypted format. I'm willing to give up any indexing on the content in order to achieve security. I'm fine with metadata for a particular note, such as title, tags, etc., remain in the clear. It's the content that I'm sensitive to. Given the fact that Evernote provides an ability to encrypt text snippets but not attachments, pictures, and audio, the typical excuse by Evernote apologists that Evernote can't encrypt because it would interfere with indexing is a bit of a farce -- Evernote has already provided text encryption that interferes more with indexing that it would for average file attachments and audio files. So, stop making excuses and get on it with. I want to store things in Evernote that I do not want to fall into the hands of a hacker if they are able to penetrate Evernote's defenses, the same way I encrypt snippets of text today. The answer for #2 is that people concerned with government-level intrusion will have to use their own independent encryption technique like PGP at the file level. Simply, governments could compel Evernote to build in a back-door, so if you're worried about PRISM, you have to either keep your data local or you have to store it with encryption that is 100% under your own control. That is not to say that Evernote-provided encryption might not help you with your own local despotic government. But since Evernote is a US corporation, you might be subject to US eavesdropping. The two things are not the same and need to be dealt with separately. Personally, I'm far more worried about #1 than #2 (though I'm very worried about that, too). Ideally, I'd have convenient encryption options at the note, attachment, picture, and audio level, to mirror that at the text snippet level currently in place. That would ensure that my data is always and forever encrypted both in transit to Evernote's servers as well as on disk.
  3. I fully agree, but the "someone" who needs to do this is Evernote. It's amazingly silly for them to provide for the encryption of snippets of text in the middle of a text body while ignoring the encryption of whole bodies, attachments, pictures, and other things. Particularly in the wake of the PRISM scandals, they need to step up and provide for the encryption of all those pieces of data. I'm fine if they don't want to encrypt metadata like note titles, tags, etc. Those can and should still be used for search purposes. Replies like, "Just use <random external program> to do your encryption first" don't fly for me. You can easily replace those with, "Just use <service other than Evernote> that supplies encryption from the get-go."
  4. This overall feature request (more encryption options) seems like it's long-standing and persistent. Given that there is already encryption of text-blocks within individual notes, adding further encryption options for other object types (images, documents, etc.) would seem relatively easy. Yes, encrypting a picture or document would prevent OCR and indexing, just as it breaks indexing for encrypted text blocks today. I think users are willing to suffer that limitation, as it follows directly from the behavior they are requesting: if we encrypt something for you, we can't read it and therefore can't index it. Further, since I can manually create a note that consists of a degenerate case of nothing but encrypted text, it would seem that Evernote could save me the trouble and do that for me with a checkbox or something at the note level, encrypting all the body text and all embedded objects (pictures, documents, etc.). Again, yes, that would defeat indexing of all the objects in that note. The note metadata (title, tags, etc., would still be indexable, however. Given that behavior, it would then seem relatively easy to create a notebook that auto-encrypted all contained notes in such a manner. I can understand resistance to encrypting metadata, as that would seem to be fundamental to Evernote's storage system. But obviously body text is not since Evernote already encrypts this. It's relatively easy for me as a user to avoid putting confidential information in metadata. It's significantly harder for me to do that in note bodies. Now, as for the persistent objections to this from the Evernote evangelists, and I presume from Evernote staff, they just don't wash, IMO. To put it bluntly, they sound like excuses. Limitations based on behavior are acceptable to users. I'm willing to give up indexing of encrypted information. That's fine. Evernote still provides huge value in delivering an ever-present, multi-platform information repository with some organization features. If the ability to search on metadata (tltle, tags, etc.) is still present, that's enough to find a lot of things. Can I use another product to perform all the encryption? Yes, of course. Would it be as integrated and convenient? No. Would it be cross-platform, on my mobile devices, too? Maybe. I can also use a different product from Evernote entirely, which suggests that maybe there is a market there to develop a competing Evernote alternative that products such a solution and which listens and responds to persistent feature requests. I know that this post is likely to trigger a, "Fine, go ahead and choose another alternative to Evernote because we just don't do that." Let me suggest that such an attitude will eventually be counter-productive to Evernote's corporate growth goals. Maybe not this month or next month, but in time. Which would be sad because Evernote is a great product with a lot of promise. But it is far from perfect and those who work on it and shepherd its direction should be fully aware of its limitations and the desires of its user-base. It should be common sense that responding to persistent, loud, and *reasonable* feature requests with defensiveness, excuses, and sometimes hostility would be a bad thing, but I guess common sense isn't so common.
  • Create New...