Jump to content

engberg

Employee Alumni
  • Content Count

    8,894
  • Joined

  • Last visited

  • Days Won

    2

Everything posted by engberg

  1. Thanks! This is definitely the right place ... we don't have a Mac-specific forum set up, but there's enough cross-over topics that we'll just keep it all in one place for now.
  2. The current behavior of the web UI is broken ... you're seeing a bunch of crypto gunk that isn't very friendly. That should be changed by the end of the week so that you see a more pleasing graphical placholder that indicates "there's encrypted content here". Like crane said, the security of this feature makes it very difficult for us to offer decryption via the web UI, since we don't ever want to see your encryption passphrase on our servers. This means that, for the short term, you'd want to view your encrypted content on one of our desktop clients.
  3. In general, scanned typewritten text should result in relatively high quality text recognition, but there are a million variables involved in image files that can occasionally throw things off. Would you be willing to send us a copy of the image for testing?
  4. We're storing the "Source URL" for clipped pages, but haven't displayed it in all of the right places yet. E.g. if you were to publish the notebook, you'd see the Source URL for any clipped notes in that notebook: http://preview.evernote.com/pub/dave/di ... 390638c283 We'll get these URLs into your main account UI in the near future. Thanks
  5. We're currently testing an update to the Mac client which includes support for To Do checkboxes. This should be available (via software update) at the end of the week.
  6. The current display of encrypted regions on the web is broken (i.e. "not implemented yet"). You're seeing the raw crypto gunk, which obviously isn't too useful. Relatively soon, this will change so that you'll see a more pleasing placeholder that indicates "there's encrypted stuff here, go back to your Windows client to view it." You'll be able to edit around this placeholder, or remove it entirely, from the web UI, but you won't be able to see the encrypted content. At some point in the future, we may consider a way to allow you to decrypt your encrypted regions via the web UI, but this isn't a trivial thing to do correctly. I.e. we don't want you sending your encryption passphrase to the server for us to decrypt. We'd want to get your browser to prompt you for a password and then decrypt the content locally so we never see your secrets on the server. This would probably require some form of browser plugin unless we can get enough crypto capabilities out of javascript. Either way, this wouldn't be trivial to implement, so it's on the longer-range roadmap. Thanks
  7. Notes in the Evernote service are protected like email at a high-end email service: We have a private, locked cage at a guarded data center that can only be accessed by a small number (3) of Evernote operations staff that have a key and are on an access list at the data center. All system and database access is also restricted to these three staff members. Network traffic from the Internet can only reach these servers through a set of firewalls and Level 7 switches. The user database is on a separate subnet that is only accessible from the application servers. All remote administrative access to these servers is restricted through a hardened gateway server that requires encrypted communications and a password known to the same 3 people. User passwords are not stored on the server and are only transmitted to our servers over SSL. (For web logins and client authentication.) The passwords are compared against a stored value via an MD5 checksum, but the password is never stored on disk in a usable form. Phil (Evernote's CEO) and I came to Evernote from a company we founded that builds and sells millions of dollars of security/cryptography software to large governments and corporations. We explored the idea of only storing encrypted notes, but this basically means that you wouldn't be able to have a web-only UI for your notebooks. I.e. if the data is encrypted, the servers wouldn't be able to search your notes unless the servers also have access to all of the encryption keys, which basically defeats the whole point of encrypting the data. (If a server has encrypted data and a copy of the decryption key, then a successful attacker has everything they need to read the data.) A service that only stored encrypted notes would look a lot different than Evernote. It would be more like a backup service for your desktop application, with no web UI at all. There are plenty of options for encrypted offsite PC backup, so we didn't think there was much of a reason to do this for a single desktop app. I.e. you could achieve this effect by using Evernote 2.2 and signing up for (e.g.) Iron Mountain's encrypted offsite backup service for your PC files. Again, the Evernote service offers the same type of protection you get for your private emails when you use any popular mail service like gmail, hotmail, yahoo, etc. If you have a few notes that you don't want to be accessible on the web, you have two options: You can put these in a "local only" notebook that won't be synched to the service at all. On the Windows application, you can encrypt a region of your Note so that it will only be accessible if you reenter the passphrase. This content will not be readable (or searchable) on the Web. This feature uses the symmetric RC2 cypher (64 bits, due to US export restrictions).
  8. Marc - What web browser (plus version, OS) are you using? The page you're showing only works properly on Firefox 2 right now, although most other browsers should at least get a dialog explaining this to them (not what you're seeing). You wouldn't by any chance be using a beta release of Firefox 3 or something like that? (Needless to say, we're working asap to get all major browsers supported, but thought it would be useful to get some feedback on our first platform rather than holding off the beta until we had full coverage.) Thanks again
  9. Right, Evernote 3 is starting our beta with: [*:86472]Windows desktop client & native "clipper" [*:86472]Macintosh desktop client & native "clipper" [*:86472]Desktop web UI (with browser clipper) [*:86472]Mobile web UI [*:86472]Windows Mobile/PPC uploader for pictures, audio, text, and ink [*:86472]SMTP/MMS gateway for emailing notes [*:86472]IMAP/POP gateway for synchronizing notes to mobile We've got plenty of other things in the pipeline, but hope that this is enough to tide most people over for the short term. You've described something that's very interesting to us, but we know from experience that it's not a trivial project to build a PPC app that can manage and search 1GB of text, images, notes, audio clips, etc. We'll definitely keep you posted ... (I realize this probably isn't what you really want, but I think there are PPC mail clients that can can store to SD/CF: http://pocketpccentral.net/software/mail.htm)
  10. "Notebooks" and "tags" are two different metaphors, which may be useful to different people. A notebook is an exclusive container that holds notes ... think of it as a "folder" in an operating system. Every note is in exactly one notebook. People who are used to the folder metaphor from operating systems and mail clients may find it useful to organize their notes based on notebooks. A tag is a label that can be added to notes. A note may have one or more tags on it, and you may have notes with no tags at all if you like. People who are used to tagging/labeling/categorizing in (e.g.) Web 2.0 systems may find it useful to use tags to organize their notes. We don't expect every user to want to use both of these metaphors for organizing their notes. (In fact, I expect a fair number of people just will throw all of their notes in a single notebook and use our enhanced search capabilities instead of spending a lot of time organizing.) On the other hand, we feel that there are a lot of people who feel more comfortable with either exclusive (notebooks) or many-to-many (tag) organization, so we wanted people to have both options.
  11. Right now, you can search and read any of your notes through the mobile web UI (go to http://preview.evernote.com/m from your device). You can also get there from the installed application via the "Search" option on the home page. We will also be introducing IMAP and POP support soon so that you can synchronize your notes onto your mobile device via the mail client. This should give you an "offline" copy that you can use to read your notes, even while disconnected. Our goal is to support virtually every mobile data device on the planet via a combination of: * email/SMS/MMS notes into your account * view account via mobile web UI * sync data to device via POP or IMAP * installed applications to create new notes (audio, image, ink, text) This doesn't rule out any other applications for mobile devices, but should be a pretty good starting point for most people.
  12. Drew - Thanks for the feedback. It's a bit tough to figure out what the "right thing" to do is here. From an Ever[Nn]ote perspective, it would be a lot easier on us if we only synched to the server after a Note had been locally indexed, but we were a bit worried about how this would feel to the user. It would take a lot longer for their notes to appear on the server. It would also mean that you couldn't load a set of images into your desktop client, hit "sync", and then close up your laptop to get on an airplane without waiting a few minutes for them to index locally. The way we're doing it now is: send up the note (hypertext + images/audio/etc.) as soon as you sync. When image indexing is complete, just send the index data on the next update. I.e. the images are not resent, just the index information about the images. So we send notes up to the server ASAP and then try to keep the traffic as low as possible for incremental updates later. We'd be interested to hear users' opinions on this topic, however. Is it useful to you to see your notes on the server as soon as possible after they are created?
×
×
  • Create New...