Jump to content

cwb

Level 5
  • Posts

    800
  • Joined

  • Last visited

  • Days Won

    8

cwb last won the day on March 4 2014

cwb had the most liked content!

About cwb

Recent Profile Visitors

11,969 profile views

cwb's Achievements

225

Reputation

  1. Just a datapoint from my newsfeed today. https://techcrunch.com/2016/08/18/microsoft-helps-mac-users-ditch-evernote-for-onenote-with-new-tool/?ncid=rss Microsoft makes the point the Evernote Premium now costs as much as Office365 Personal. the migration tool for Evernote -> OneNote for Windows (and now Mac) has migrated 71 million Evernote notes. Seems there's some movement there. Movement I'm less than pleased with. The pricing issue doesn't help. The more people migrating for various thread hammered reasons, means the more my pricing is going to go up while I stay.
  2. Oh... and about the OneNote "TNO" encryption... Maybe not so much (other than perhaps you bought a retail copy that you use in your own home): https://technet.microsoft.com/en-us/library/cc179125.aspx If you do allow users to password protect documents, and they later forget or lose the password, you can use the DocRecrypt tool to reset or remove the password. For more information, see the Remove or reset file passwords in Office 2013 article. And the selection of encryption methods can be controlled through group policy. AES and 3DES shouldn't be assumed. They can be configured to be any of: AES, DES, DESX, 3DES, 3DES_112, and RC2 https://technet.microsoft.com/en-us/library/jj923033.aspx Previously, if the original creator of a file password either forgot the password or left the organization, the file was rendered unrecoverable. By using Office 2013 and an escrow key, which is generated from your company or organization’s private key certificate store, an IT admin can “unlock” the file for a user and then either leave the file without password protection, or assign a new password to the file. You, the IT admin, are the keeper of the escrow key which is generated from your company or organization’s private key certificate store. You can silently push the public key information to client computers one time through a registry key setting that you can manually create or you can create it through a Group Policy script. When a user later creates a password-protected Office 2013 Word, Excel, or PowerPoint file, this public key is included in the file header. Later, an IT pro can use the Office DocRecrypt tool to remove the password that is attached to the file, and then, optionally, protect the file by using a new password.And you have to wonder that there wouldn't be an escrow key on Sharepoint Online hosted content.
  3. No, not OneNote. See: https://spekxvision.wordpress.com/2015/04/14/still-no-secure-cloud-sync-for-onenote/ "OneNote 2013 does offer strong encryption, and in fact this is TNO. You can enter a password for a section in any of the Windows/iphone/iPad apps, and the section will be encrypted on the client side. The downside, and it is a big downside, is that you have to do this for each section individually.. not notebook, or section group, but each section. If you have tens or hundreds of sections in your notebook, as I do, that means typing the password for each one when you want to open it! It also means that you can’t search or index that section while it’s locked – it’s only when you open it, that it can be read. This is equivalent to encrypting each file on disk (since OneNote does indeed use a file for each section). So – I tried this for a while, and immediately found it a pain to use.. I have a section for each client, product, project, and doing a ‘search all’ would take ten minutes just to temporarily unlock each one. Ideally, they would allow a password to be bulk-applied to multiple sections, so you can unlock the lot in a single action, but they don’t." What ever OneNote does or doesn't do with encryption isn't greatly different than Evernote does in more Apples to Apples comparisons. Meaning that you aren't just dumping a OneNote file in OneDrive/Skydrive or running it locally. But actually putting it on Sharepoint Online for collaboration, browser access, sync to ipad, etc. Encryption is either unavailable or no different than Evernote's.
  4. Naw, it really isn't any different. Presumably most people are using dropbox or icloud to sync their 1password library. So on the one hand you have a sync service distributing a pre-encrypted blob which the sync service cannot decrypt. And on the other you have LastPass. Also a sync service distributing a pre-encrypted blob which the sync service cannot decrypt. Just like in this thread, where some are asking for TNO pre-encryption for notes which the sync service cannot decrypt. In all cases, even if the service was hacked, that doesn't get you into the encrypted data. Further I would argue that the security oversight, controls, and history are better with Lastpass than icloud and dropbox. If you were not following security news, did you hear from Dropbox when a software update allowed for about an hour, all accounts to be logged in with any password entered? Lastpass errs on the side of caution and transparency, whereas icloud and dropbox are far more opaque. Unlike using Dropbox/icloud to sync/distribute my passwords, with Lastpass we can: restrict which countries can log inrestrict login attempts from TORturn off email verification/bypass for unknown devices and locationspick from 8 different multi-factor options (including up to 5 Yubikeys on one account). scale it up to supporting a whole enterprisekeeping items encrypted and access logged, but being able to share single items, folders or nested folders.being able to keep enterprise and personal sites separate and usable in a single view, but separate-able with a single click. Or letting them use read-only credentials to log in without being able to view them.being able to report on or create automated reminders for weak or duplicated passwords across all lastpass accounts.Being able to view in a report the master password strength and multi-factor use across the enterprise to determine that no one needed to change their passwords based on a maybe that hashes but not encrypted blobs might have been lost, in the last LP notification. Knowing there isn't enough life in the universe to have time to crack the hashes. And that even if they did and had credentials, they still couldn't log in to download a encrypted blob. Because the Lastpass service is tightly integrated with the app, there is great site by site, note by note usage/access logging for verification purposes. Other than a strong password, do you know with reasonable certainty, that no one else has accessed data in your vault, or is not currently attempting to brute force into a copy of your vault? Lastpass too can be used completely offline. Via any of, the stored encrypted blob +plus browser plugin, mobile apps, the windows app LastPass Pocket, Portable thumbdrive instances. There's every reason Evernote could a do a very similar model.
  5. Having sensitive info synced across all devices is kind of what LP is all about... I'm wondering what more one might want from a security model than trust no one encryption with a multitude of multi factor login options. And to add in LP enterprise, the usage logging across the enterprise is great, and much more useful to me than a personal decentralized model like keypass or 1password.
  6. Thanks for the search reminders. I would have thought that 50% of mine would have been web clips. But I guess I'm making more use of IFTT workflows and sends to EN from my feed reeder, than actual web clipper use. But web clipper was 25%. 10% forwarded email. And a whopping 11 notes with encryption. It's frankly just not really worth using, as is. LastPass on the other hand has 800 sets of credentials and secure notes. I am disappointed to hear that it's not a business priority given we're still waiting for the previous CEO's "sexy encryption" mention. But I am thankful for the OAuth, and multi-factor. Access security and transparency are great, and I enjoy using them.
  7. http://web.archive.org/web/20041128035713/http://www.evernote.com/en/
  8. GM you're being fast and loose with the facts and needlessly confusing. JM is correct on the origins of the current product and current principal founders. What you refer to is EverNote, what ultimately turned into a Windows app with a beta in late 2004. Then ultimately, EverNote Plus, as a $50 windows app as late as 2007. The original company started in 2000 "EverNote is a California Corporation with an R&D Center in Moscow, Russia. EverNote has founded by Stepan Pachikov at Feb.29, 2000" It didn't have a functional web page until around 2004 in the time frame of the company merging with Pen and Internet. And for a time Evernote.com redirected to penandinternet.com
  9. I'm glad OneNote continues to Evolve and hope that puts honest pressure on Evernote. I happen to pay less monthly for Sharepoint Online with OneNote than Evernote Premium, but they're still different functions for me. On the sorting thing: OneNote doesn't appear to sort on iOS which is where I need it. For that I still use Cloud Outline with bidirectional syncing to Evernote for those notes that need it.
  10. Nope. I get claustrophobic-ish when I'm without data connectivity so that's where I spend my efforts. But I do also see the disquieting note total differences. Evernote (Windows): 6653 Web: 6571 iphone: 6573 iPad: 6571 All freshly synced. No offline/local notebooks How does one have confidence with that? Noted differences in notebook counts between local and web view: The webview doesn't show joined notebooks note count:That's 74 notes My default notebook: Web: 3698 Local:3702 iphone: 3701 ipad:3700 Trash: Web: 3485 Local: 3498
  11. Yup. When I tell Crashplan to backup a group of folders, it de-duplicates, compresses and encrypts the bits and syncs them up to 3 different locations near and far. If any single bit is detected as different from the source it's repaired, and I'm notified that an error was found and repaired automatically. If it didn't, it wouldn't be trustworthy. A single bit error is the difference between a usable file recovery or not. Trust in recovery in the linchpin to the whole Evernote system.
  12. While I lean to agreeing in the Evernote case, I'll contrast to your DropBox example that having observed our company collaborating with Box Enterprise, and OneDrive for Business syncing with SharepointOnline... Evernote is in good company with the range from the simple "why aren't here and here in sync" (either two side by side devices, or a device vs the cloud), or "why won't this file sync up/down", all the way to complete sync disasters (OneDrive far more so than Box). We regularly have to run a repair which archives the complete local copy and forces a fresh resync, leaving you to find and merge your now archived local revisions. At $3/mo, SharepointOnline and OneDrive at least has a slightly lower admission fee for the misery than Evernote Premium or Business.
  13. I would offer that 3 fingers are pointing back at the former Evangelists. There was also nothing in #21 that required any moderating interjection. You ought not to be harping on "let it pass", if you aren't, yourselves. No one is discussing what we don't like about other users (that would be perhaps a much longer thread). But rather the comments. It's appropriate in the near context of a comment to reflect back and help refine. It's an honest part of IRL conversation, and it's artificial (not to mention counter-productive) to isolate it out of an online one. Call it real-time peer moderating. It's the new "Green"
  14. FWIW, I'm finding my offline notebook attachments fine in Airplane mode. But I have only one offline notebook (of 30 notes most with attachments) of 60 notebooks. As it happens, I have recently exhausted storage space several times in the last week, so if there was some fragility around iOS dropping cached content to make room (as a few of my other apps do) I would think I'd have seen that effect just now. One other iOS setting not mentioned above, that I elect to have on is Settings:General:Background App Refresh:Evernote set to ON
×
×
  • Create New...