Jump to content

why?

Level 2
  • Posts

    81
  • Joined

  • Last visited

About why?

Recent Profile Visitors

4,232 profile views

why?'s Achievements

37

Reputation

  1. Not sure that it's a minority. Evernote users have been unhappy with how Evernote has been handled for a number of years. Just take a look through the forum (and other forums). I'm not willing to pay upfront for promises from a company that has Evernote's history of management. At the moment both Craft and Devonthink offer much better value than Evernote. With no issues on such fundamental functionality as sync. You would have been better to fix the app before raising the prices.
  2. If you're in a mac only environment, then I can recommend Devonthink
  3. This is not quite true. The legacy version was far more feature rich compared to the new app that was released. This has slowly been rectified, but nothing to justify the huge price increase. And for many users the new app created lots of frustration, which for me was the loss of native OS integration. BS themselves have done nothing to justify the price increase. The old owners may not have increased the price, but the new owners increased it with producing any new features since they took over. I'm sorry, but nothing in the old pricing was cheap for what the app did. Especially in the last few years when the new app took a while to gain features it had in the old app. The new pricing puts it way above current competition in pricing.
  4. I've been offered a 50% off the annual personal plan £33.99 for a year. I've never like the comparison to a cup of coffee. That's because Evernote is not going to be the only subscription that people pay for. It's part of a whole load of other subscriptions. Adding all those up would overdose me on coffee. What concerns me is the sudden large price increase for everybody. You don't ask for a whole wad of cash when you've not done anything. Taking over the business and immediately increasing the pricing without producing any new functionality is just a slap in the face for existing customers. That's a really poor relational move with your existing user base and means the owners will have no qualms doing it again in the future. I also seriously doubt the the price increase will stay there. What happens next year and the year after? I also don't like hiding features in extra pricing tiers. Often, necessary functionality is moved to the highest paying tier. Finally, the biggest negative of the whole app is the loss of native apps. On macOS the app does not integrate with anything. Sure you can use the share extension, but you can't integrate into the system, which is necessary for an app that collects information. I can't pull stuff out to my task manager. Or effectively link to different apps I use, it's effectively a silo. For me, this is the end of the road. Consistent poor management has killed the app that used to be the best of its kind. The new owners have not communicated well and gone for the jugular financially, without any evidence of a better app (sync, by the way, is not a new feature and should have been working in the first place).
  5. Except they charge half the amount for their subscription and are more feature rich.
  6. For those of you using Apple, are these price increases reflected in the app store? I've switched to Craft and can't recommend it enough. I'm not missing Evernote at all.
  7. I'm not, the researchers in the article are. They clearly outline the extent to which encrypted PDFs are at risk. They also highlight the criteria putting PDF's with encryption at risk. They also clearly talks about the complexity and difficulty to exploit such PDFs.
  8. This is not a blanket review of PDF 256-AES per se. Apart from the fact the the attacker first needs to get a copy of your PDF from EN, which is a tough enough task. The first attack is only applicable "for partially encrypted documents that include a mix of both encrypted and unencrypted sections, and does not include integrity checking." The second method is more complex "…an attacker can stealthily modify encrypted strings or streams in a PDF file without knowing the corresponding password or decryption key. In most cases, this will not result in meaningful output, but if the attacker, in addition, knows parts of the plaintext, they can easily modify the ciphertext in a way that after the decryption a meaningful plaintext output appears." Eve the researchers themselves say that this would be extremely difficult. These really are not a security issue for the vast majority of the populace. If someone has the knowhow and specifically targets you then there are other options for stealing your data. This is scaremongering because a blanket statement that PDF encryption is not good enough will stop people from using it when in reality they are talking about fringe cases created in a laboritory with hi end tech and staff. Hardly something that will hit main stream hacking. And chances are the loopholes will be closed well before it ever really poses a threat to anyone. This is the problem with the internet and it does depend on your level of paranoia. You could argue that good old common sense says you may be hit with bird ***** as you go about your daily work and therefore sporting an umbrealla at all times is the only sensible thing to do. As has been mentioned in this thread, it's not just about what is possible, but what is probable. Is it possibe that someone could hack your PDF? Yes, is it probable, No. Is it possible that all your hard diskd expire at the same time, Yes. Is it probable, No.
  9. It has been interesting to read this thread dating back to 2014. I don't think agreement is going to be reached on what is safe. I do think there's much scaremongering going on. I read the PDF encryption security may not be safe article, but it requires a particuler set of circumstances and is just not realistic. Having said that, if someone is determined to get your specific data nothing will stop that, even hiding it in a file in a safe in your house is not secure. I tend to live with the general idea that I'm not being specifically targeted. If I were a journalist, I would most likely have a computer not connected to any network. My passwords live in a password manager as does other needed sensitive data. My HDD is encrypted and apple do not have the keys. Most other info goes into EN. I see no point in having many different repositories. I use a specific naming convention so that folders in the main are not required. I've used GPG and it's a pain in the butt. Not only to encrypt but to manage keys and keep them up-to-date and know what was encrypted with which keys. EN encryption is pants and so I don't use it. I also don't encrypt and store in EN. No point in having none searchable data in a searchable repository. I could create an specific notebook and place all encrypted notes in that notebook, but if I used GPG, decrypting on othe devices would also be one major headache. If it needs that much security, then it shouldn't be online. In the end you have to live with your own level of paranoia and act accordingly 😁
  10. I would agree with GrumpyMonkey. EN is way behind in terms of security. For this reason I have now abandoned it, even though I still have a paid subscription. I keep checking back hoping they'll see the light. However, the longer they wait the more people will abandon ship; well, those who care about their data!. Voodoopad 5 is not yet Abandonware. An update was released Dec 2015. I'm hoping they'll release a version six soon. I've been beta testing the new Devonthink Go 2 iOS app and it's fantastic. It securely syncs all your data to ios. You can use their cloud, but I'm avoiding cloud storage without a clear zero-knowledge encryption. If you're new to EN, they I would encourage you to think clearly about what you're using EN for. It's great for many things, but not personal or sensitive data. If you need secure data then GrumpyMonkey has listed some good alternatives.
  11. Sorry for the duplicate content, but this is not my doing. There is something seriously wrong with this forum. Constantly getting errors. I submitted once and an error message appeared. I then pressed back and found the post on twice. Cannot seem to delete the duplicate post either.
  12. But isn't that a slightly different issue? You're talking about Microsoft be duplicitous. Those accusations could be made against every large conglomerate from Apple to EN. They may well offer encryption that they have a back door to. However, should sensitive work data be stolen in such a manner, I would be absolved for having used reasonable precautions in securing my data. 'Reasonable precautions' does not include duplicitous companies, or no one would be able to store their data anywhere. At face value, Onenote can encrypt an entire section. This data is encrypted on their servers and I have the password. If MS has a backdoor, that cannot be catered for. If MS does have a backdoor then they have been deceptive. Their documentation in Onenote states: If MS is duplicitous, then I suspect so are the rest. The PRISM programme was connected with all the big companies. My main concern is with the data on their servers and in Onenote it appears that it is encrypted with my password which is needed to access the data. Anyone hacking their servers still needs that password. This in my book is pretty good security. EN only offers this for text, whereas MS offers this for all information ins the secured section.
  13. But isn't that a slightly different issue? You're talking about Microsoft be duplicitous. Those accusations could be made against every large conglomerate from Apple to EN. They may well offer encryption that they have a back door to. However, should sensitive work data be stolen in such a manner, I would be absolved for having used reasonable precautions in securing my data. 'Reasonable precautions' does not include duplicitous companies, or no one would be able to store their data anywhere. At face value, Onenote can encrypt an entire section. This data is encrypted on their servers and I have the password. If MS has a backdoor, that cannot be catered for. If MS does have a backdoor then they have been deceptive. Their documentation in Onenote states: If MS is duplicitous, then I suspect so are the rest. The PRISM programme was connected with all the big companies. My main concern is with the data on their servers and in Onenote it appears that it is encrypted with my password which is needed to access the data. Anyone hacking their servers still needs that password. This in my book is pretty good security. EN only offers this for text, whereas MS offers this for all information ins the secured section.
×
×
  • Create New...