Jump to content

Saad K

Level 1
  • Posts

    6
  • Joined

  • Last visited

Everything posted by Saad K

  1. A "simple passcode lock" does pretty much nothing except keep out the casual user. IE, a guest in your home who has access to your computer. It won't keep out a hacker. Exactly. It won't keep out hackers and it doesn't need to. I am talking about those "Casual users" who can come to my computer today and read my stuff. With a Passcode lock, they can't access my evernote.
  2. You should use a true password manager for this type of info. Well again its all about convenience and who do you trust. Lastpass was hacked 2 years back. Evernote makes it easy to store information and find them. Even though i dont condone people to store things like password out in the open, but evernote certainly has the ability to store sensitive information. The encryption feature is also great but sadly its on "Per note" basis and not on entire account or notebook. A simple passcode lock will certainly add an extra layer of security on the existing secured and awesome Evernote. Hi. I don't think LastPass was ever certain if they got hacked or what was taken, right? My understanding is that whatever happened, if the evildoers got a tiny amount of encrypted data (usernames and passwords), it hasn't apparently resulted in anyone's account actually getting hacked. Evernote does a lot of great things, but when it comes to encryption and passwords, I think LastPass is going to come out ahead in any comparison. That's because they do it for a living. For example, Evernote doesn't offer strong encryption of data (64-bit). As for the password protected account on the Mac, I think it is really just for show, because anyone with physical access to your computer could just open Spotlight and comb through your stuff. Every Mac has far better protection (separate user accounts and filevault) than Evernote could possibly design into an app. That's just my opinion, though. I didn't follow up on that news. But all i am pointing out is, even the most secured services may be hacked by sophisticated attacks (be it lastpass, evernote or gmail). A group of people may track down the data centre of Evernote and walk out with their servers that contains user information. But Is it a likely scenario? No. But A user leaving his computer unlocked for 5 mins and a co-worker/friend snooping into the Evernote is a more likely scenario...and also a scenario that can be easily stopped by adding a basic passcode. 64-128 bit encryption is great, and I am sure eventually evernote will do more R&D on those areas to prevent unauthorised access. They have well over 200million in funding to date and also looking to go IPO in 2015. So I am sure all those money will eventually go somewhere to make the product more secured for sophisticated external hacks. Good points. Regarding your scenario, to put my advice another way -- secure your device and Evernote will be secure. If I were in your scenario, I could do far more to protect myself now than Evernote could do with all of their money and R+D. I think Evernote would agree (http://discussion.evernote.com/topic/1716-make-encryption-global/?p=18623). How? I have a hot corner (see your preferences) set so that just swiping into the corner of the screen shuts the screen off. It takes less than a second and the entire computer is locked. Even if it were stolen, the drive is encrypted (filevault), so it is pretty unlikely anything (not just Evernote) would be compromised. If someone wants to use your computer, just tap your name in the upper right hand corner, select the guest account (see your preferences) and you are secured. The hot corner is a great idea. I think I am going to do that too. I agree with all the encryption and user switching. I use both. But my point still remains -- When my evernote app is closed, and I am away from my computer for 2 mins (without a screen lock) -- Someone can come and sit on my chair, Find evernote in applications ...open it and note down my information...close evernote and leave. A passcode creates an addition layer of security so that when the application opens -- my notes are not straight away visible. Think about it...If you leave your computer unattended for even 2 mins today, and your screensaver/lock doesnt kick in (or you forget), I can go and open your evernote and see whats in there. Regardless of all your encryption and security setup, you cant stop me Depending on what you have stored there you would either care or not care. For my case - i think its absolutely necessary. So I am rooting for a Passcode lock.
  3. You should use a true password manager for this type of info. Well again its all about convenience and who do you trust. Lastpass was hacked 2 years back. Evernote makes it easy to store information and find them. Even though i dont condone people to store things like password out in the open, but evernote certainly has the ability to store sensitive information. The encryption feature is also great but sadly its on "Per note" basis and not on entire account or notebook. A simple passcode lock will certainly add an extra layer of security on the existing secured and awesome Evernote. Hi. I don't think LastPass was ever certain if they got hacked or what was taken, right? My understanding is that whatever happened, if the evildoers got a tiny amount of encrypted data (usernames and passwords), it hasn't apparently resulted in anyone's account actually getting hacked. Evernote does a lot of great things, but when it comes to encryption and passwords, I think LastPass is going to come out ahead in any comparison. That's because they do it for a living. For example, Evernote doesn't offer strong encryption of data (64-bit). As for the password protected account on the Mac, I think it is really just for show, because anyone with physical access to your computer could just open Spotlight and comb through your stuff. Every Mac has far better protection (separate user accounts and filevault) than Evernote could possibly design into an app. That's just my opinion, though. I didn't follow up on that news. But all i am pointing out is, even the most secured services may be hacked by sophisticated attacks (be it lastpass, evernote or gmail). A group of people may track down the data centre of Evernote and walk out with their servers that contains user information. But Is it a likely scenario? No. But A user leaving his computer unlocked for 5 mins and a co-worker/friend snooping into the Evernote is a more likely scenario...and also a scenario that can be easily stopped by adding a basic passcode. 64-128 bit encryption is great, and I am sure eventually evernote will do more R&D on those areas to prevent unauthorised access. They have well over 200million in funding to date and also looking to go IPO in 2015. So I am sure all those money will eventually go somewhere to make the product more secured for sophisticated external hacks.
  4. You should use a true password manager for this type of info. Well again its all about convenience and who do you trust. Lastpass was hacked 2 years back. Evernote makes it easy to store information and find them. Even though i dont condone people to store things like password out in the open, but evernote certainly has the ability to store sensitive information. The encryption feature is also great but sadly its on "Per note" basis and not on entire account or notebook. A simple passcode lock will certainly add an extra layer of security on the existing secured and awesome Evernote.
  5. I know User accounts on desktop OS gives you an overall security. However if someone really uses Evernote as his/her Second brain, even a slightest mistake of not logging off or switching to a different user can cost big. It really depends on the use case. If a user uses Evernote for general note taking, to-dos and store clips then they probably wont really appreciate the lock feature. However if you are storing passwords, credit card information, banking information and other crucial details I think having an extra layer of security is a must. If someone really wants to use your Machine for the purpose of looking at your personal information, they aren't going to ask you for it (so no chance of user switching). They will just see the opportunity and take advantage of Evernote's search feature when you are away for 2 mins.
  6. I wonder why isn't there a passcode lock for Evernote Desktop App? Other people with access to my pc/mac can simply come in and open my evernote and see my private stuff. I believe having a simple passcode lock (just like the Iphone/android) app solves this problem.
×
×
  • Create New...