Jump to content

Search the Community

Showing results for tags 'security'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • General Discussion
    • Community Announcements
    • Evernote General Discussions
    • Evernote Integrations
    • Evernote Betas
    • Evernote API Discussion
  • FAQ's: Best Answers
    • FAQ's: Best Answers
  • Possible Bugs/Technical Issues
    • General Technical Issues
    • Evernote Business
    • Evernote for Android
    • Evernote for iOS
    • Evernote for Mac
    • Evernote for Windows
    • Web Client
    • Evernote Product Suite
  • Product Feedback/Feature Requests
    • General Feature Requests
    • Evernote Business
    • Evernote for Android
    • Evernote for iOS
    • Evernote for Mac
    • Evernote for Windows
    • Evernote Web Client
    • Evernote Product Suite
  • Evernote Forum Archives
    • Using Evernote
    • General Discussion Archive
    • Product Archives
  • Web Clipper***
  • International Forums
    • Japanese Discussions
    • Brazilian Portuguese Discussions
    • Discussions in Spanish
    • Korean Discussions
    • Traditional Chinese Discussions

Blogs

There are no results to display.

There are no results to display.

Categories

There are no results to display.

There are no results to display.


Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


Subscription

Found 167 results

  1. Hi, Apple Notes has already done this and it's elegant. We need the same thing for Evernote. Thanks,
  2. My wife works and uses an office computer that we don't own. Is it possible to install the clipper on that machine and link it to her personal Evernote account and keep it secure? At work she does much of the same things we do in ministry. As she's looking things up at work, the clipper would be wonderful new reference source. Just want to make sure that no one at work would be able to get into here Evernote account or see what she's saved. Unfortunately, the company she's working for seems less than trustworthy in recent years. Even when she changes companies, security is still prudent. Thanks
  3. I got the same issue as Deworn but his post is from 2014. I have the version 6.5.4.4720 (304720) Public. I don't feel secure. How "encrypted" is my stuff?
  4. Pretty much self-explanatory. Text can be encrypted on a desktop and viewed on mobile but not encrypted on mobile. I know this has been posted many times before but it does not seem to be an "idea" so i thought to make it one.
  5. I like the text encryption feature in Evernote but that is insufficient for a Cloud based service, used across multiple platforms, used by a great many people, especially in these times. I believe that Evernote should provide users with the ability to encrypt entire notes, including images and attachments. Please seriously consider implementing this functionality as soon as possible. To not do so, presents loyal users with a significant risk to information confidentiality and integrity, with potentially serious impact should any such risk actualize. I believe that the lack of this functionality also highlights Evernote and its community as potential soft targets. That said, the alternative for Evernote users, at this time is to simply avoid the use of Evernote for documenting, sharing, managing or other handling of potentially sensitive or critical information (including personal notes, ideas, intellectual property and any personally identifying information - as a start) if that information is in any form other than text. Over time, this gap in Evernote security may erode the need for the service (given alternatives with better security). If EN planning/dev. staff want to discuss this further, please contact me or reply to this comment. Thanks in advance. B.
  6. Hi all, We are getting increasing feedback from Safari Web Clipper users of problems clipping certain sites. One reason in these cases can be caused by how Safari have chosen to enforce Content Security Policy (CSP) headers. Summary of CSP: - It's a 'setting' of sorts, that site publishers can set that limits what bookmarklets and extensions can do on their site. - In Safari this may cause the Web Clipper to not being able to execute any code and thus not being able to start. - More info about CSP is available here: http://www.w3.org/TR/CSP/ Typical signs of a CSP issue: - When clicking the Web Clipper toolbar button absolutely nothing happens. (i.e no Web Clipper UI will load) How to determine if the site is having restrictive CSP settings: - See this Skitched tutorial for a guide. https://www.evernote.com/l/AAwMRDf060tB94tLsqW1TK2dNxvFGBuroh4 What can be done about it? - At this point there is nothing that we can 'fix' in the Web Clipper. We are blocked by Safari from running any code. - At the moment Chrome and other browser haven't implemented CSP the same way so clipping in those browser should work fine if the root cause is CSP.
  7. First time I tried to set up two-factor authentication, on the final step the screen displayed like this - the overlay window was super tiny. I couldn't click or see anything. Reloaded the page to fix, but then the whole process was cancelled and I had to re-enable two-factor authentication. Second time it displayed ok. Screenshot attached. Note sure if this would be browser related or evernote problem. Firefox 51.0.1. Just sharing in case anyone runs into a similar issue.
  8. I have a personal Evernote account that I use for both business and personal information. I have access to it on my work computer, with Windows 7, since I need notes from both areas. I use the desktop app and sign out of Evernote when I leave. However, I worry about the confidentiality of my notes on the local drive and the company's ability to readily access them. Are they encrypted in any way? Can they be? Does the web app keep an image on the local drive? The more I read this post, the more I realize that the computer is theirs and they could do whatever they want. Is getting rid of the desktop app and using the web a solution? Thanks for the help.
  9. I would like to store some secure documents within Evernote, however Evernote for years has lacked full encryption on notes and has constantly ignored the request from many to fully encrypt our data. This should be core to the Evernote service offering. Users should have the ability to control their own encryption keys as well.
  10. Hi everyone, I've just started the process of going paperless, which has included scanning in financial documents such as bank statements into synced notebooks. Having scanned a number of these documents, I've now decided they would be better off – more secure – in local notebooks. If I move a previously synced note to a new, local notebook, does a version of it still live somewhere on the cloud? Or is the cloud version deleted? If the latter, is there an official privacy statement somewhere to say so? I'm sure this question has been asked before, but I couldn't find any answers by searching. Thanks.
  11. I held a recent Evernote workshop and the predominent question was "so how do I easily back-up all the material I've put into Evernote". Good question and I'd love to provide a super easy answer like..... "Evernote has thought of that so here is the easy back-up button" Thanks
  12. Any security difference ? When using Taskclone (Evernote -> Toodledo) it creates the Classic note link but this is less useful than the Public link because, this way, you don’t have the [View in Evernote] option on the web page. Thanks you!
  13. How secure are the notes stored in Evernote? Is there a way to make sure the files stored in the Evernote directory structure on the local hard drive are encrypted? If I store company documents, including peoples SSNs, and personally identifiable information, how secure are they? When a notebook is shared with another Evernote user, does the data pass back and forth as SSH? Thanks
  14. The crux of the issue for me is that quitting is not logging out. This is not what I expect, it's counter-intuitive (and dangerous). The way Evernote seems to work, both on my Mac and iPhone, is that if I just quit Evernote, it’s not protected. Launching the app opens it up logged on, so anyone who gets onto my Mac or my iPhone also gets into my Evernote without having to log on. This is too easy an error to make (from a security point of view) and one which I’ve been making unknowingly for months. So, I think you might want to add an option to your app so that when quitting Evernote one can choose to do so without logging out or with logging out. Those who don’t want to be bothered with this prompt should be able to opt out of it in preferences, but for the rest of us, security-aware, we could have this work so that either every time we quit we also log out, or we get a choice each time we quit Evernote. Please let me know if this option is already available and I just haven’t seen it, or if it can be made available. Thanks, FrogPhotog
  15. What I want is, that I have an option to select, that every time I start EN it ask me for password. But then, while it's on, it doesn't ask for password every time it synch. It was working that way, but now (perhaps after last update - I have 5.5.3.4236 (272236)Public) it doesn't. I know that there is option to sign out but it's not practical. Many times I shut down PC while EN is in system tray. And when I start PC, and then start EN it just opens. Did I miss something?
  16. Many of us use evernote on Pcs that do not belong to them including the local app for windows. To ensure data is protected and it is not possible to read residual data even though the user account is logged out it would be nice to be able to encrypt the data with a unique password while on that local system. Just the cached local copies. This way if say a user no longer has access to that PC for whatever reason they can rest assured their data is safe. Example use cases include using a work PC or a PC belonging to somebody other than yourself. Require the user unlock the data at login each time with a password basically.
  17. As a user who stores a lot of sensitive information in Evernote, I would appreciate the capability for enhanced security beyond what is currently provided. 1) Data encryption at rest. I haven't found any information on this, but it seems to me our personal data is stored on the servers in "plaintext" form, and is only encrypted during transmission to/from the clients and servers. Are there any plans to implement full end-to-end encryption of data in all phases? I understand that Evernote needs the keys in order to support a lot of its useful features. Perhaps there could also be a user-selectable mode where only the user keeps keys locally (much like the in-note text encryption already available), perhaps compromising Evernote features but enhancing security. 2) In-note encryption for all data formats. Right now, we have the ability to encrypt text segments at will using local private keys, which is a welcome feature. I would appreciate this capability to be extended for all data types, e.g. audio, photos, and other file attachments. Are there plans to support this feature? Thanks!
  18. Hi, Are there any plans to add fingerprint security to Evernote for Android, in the same way the iOS version has TouchID support? Really miss it after using iOS for a little while, and it's starting to creep into more Android apps where it's useful (Lastpass, Journal etc). For me, it's the only real gotcha at the moment for Evernote! Cheers, Michael Charlton
  19. I want to make a proposal. I would appreciate, if EN would store the data of citizens of the EU in the EU. I know all the standard bla bla, how safe the data is. In fact it's not. Safe Harbor is over and we have now the Privacy Shield. But this is more or less the same, only with an other name. So as a non US citizen I don't have the control over my data. EN is holding the encryption keys and with the Patriot Act and FISA many people can have access to my data. And En can even be forced to keep the access secret. Some US companies even get money from the NSA for the access to the personal data of the customers. Legal backdoors. I don't know, if EN get also money for this, but after the last price "adjustment" I can imagine, that EN need badly money. Microsoft started to solve this problem by offering cloud services in the EU. This would be a feature that would be worth the price "adjustment".
  20. I have tons of passwords. I like the idea of using Evernote as a sort of password manager: Create a note for each username / password, and other applicable details that you have. Tag it up and leave nice comments to leverage search Highlight > "Encrypt Selected Text" on the portion of the note that contains any sensitive details as plain text. I understand that Evernote content is heavily encrypted so I feel like this is a reasonable approach to password management. However there seems to be (at least what I would consider) a security flaw with the "Note History" feature available on Premium accounts in that any information that was stored as plain-text before having been encrypted is easily viewed in a previous version of the note. Doesn't really protect against shoulder surfing / staying logged in to evernote with an unlocked workstation. After all: Everything is stored as plain-text before it has a chance to be encrypted. So my enhancement requests would be these: Add an option to disable revision history on a per-note and global basis Add an option to delete revision history on a per-note basis Add an option to retain X days of revisions history or Y number of revisions on a per-note and global basis Add an option to re-prompt for password before viewing revision history Add logic that says 'if the text is encrypted on the current version of the note, also encrypt / obfuscate in the history view. I understand this may be tricky from a 'detect what's encrypted now but wasn't before' point of view. An alternative would be to implement "if the current version has ANY encryption, then encrypt the entire previous version with the same hash". This could lead to 'nested' encryptions, but I don't see that as an issue. Add an option to provide a 'global' encryption passphrase (which may or may not be different than the password used to login). Only the hash of that string gets stored (obviously) When a user chooses to "Encrypt Selected Text", they have the option to apply this passphrase rather than typing it in (possibly incorrectly) Similarly, add an option to prompt that the passphrase be entered a second time to verify. This would reduce the risk of a user entering a passphrase incorrectly, then not being able to decrypt their text to enter it correctly. Also: I'd like to understand how encrypted text is handled if/when a premium user goes back to being a basic user. I'm an evernote Premium user. I use it on multiple platforms: OSX App, Ipad, Iphone, Linux (Web)
  21. I am a new user slowly getting hooked on to Evernote. I have been reading about the concerns related to storing secured information on Evernote cloud. I guess the general recommendation is that if you consider some information should be secured, just do not store it in Evernote. Now my question is what documents should be considered secure. 1. Storing passwords in evernote or any cloud service is a terrible idea. I get this. 2. Bank statements - some have said that the account no in bank statements is secure information. Can someone explain why this is secure information? what happens when some hacker gets access to it? 3. Tax returns - Can this be kept in evernote? This contains soc sec no etc. What do you all do? What kind of information that you DO NOT keep in evernote? Where do you store such information? (e.g another cloud service that supports encryption on storage)? How do you integrate that cloud service with your Evernote workflow?
  22. Dear Evernote! I love your service, and am actively promoting it to acquaintances. However, there are two backup-related features I am missing. If you fix these, my Evernote experience would increase significantly. Situation: In becoming a heavy user of Evernote, I am more and more dependent on the safety and security of all my files stored in the service. If I, or other users of shared notebooks, accidentally delete files, I do not want to risk losing them forever. Therefore, I now export my notebooks manually once a week. Still, this kind of backup is cumbersome, and at the mercy of human memory of remembering to do it. Furthermore, all backed up notes from many different notebooks are all squeezed into one backup notebook, making my Evernote backup files messy and unorganized. I therefore have two suggestions for you, which I hope you will consider. Suggestions: 1. Adding an integrated scheduled / automated backup option that would automatically take backup of all, or selected, notebooks daily or weekly. 2. Allowing users to export Evernote notebooks in an organized manner that includes one's initial Evernote structure, i.e. keeping one's distinguished notebooks, with accompanying notes, in the Evernote backup file. Would you consider these suggestions? Best regards, a passionate Evernote user from Norway. Ps! With regards to scheduled backup, I tried third-party app "Evernote Exporter" (http://evernoteexporter.codeplex.com/releases/view/79142), but could not make this work. A solution to suggestion 1 could be similar to this.
  23. I have been using evernote for several years now, and have come to rely on it. Due to the sensitive nature of some of my data, I would like to be able to lock some of my notebooks with a password. Think this would be useful?
  24. Hey all, I'm working for a client who disallows utilization of any service which forces cloud syncing through any server other than their own. I'm an avid Evernote user but without the ability to limit syncing to Evernote's servers I'm forced to find another solution. Is there any discussion ongoing about adding the ability to limit Cloud syncing within the iOS application so I can use my iPad Pro with my Apple Pencil to keep my notes secure within the device while not exposing confidential client information to Evernote's servers? It seems that Evernote would have thought about this by now given how awesome their application would be for enterprise users but thus far I can't find mention of client or customer security concerns within their archives or forums. Am I missing something?
  25. Hello all - first time poster here... I've been banging my head against the wall trying to define a paperless process that is going to hold in the long term and I've been suck in this darn analysis paralysis loop. I'm hoping you smart folks out there can shed some light on Evernote so that I can better make a decision. Several years ago I made a concerted effort to go paperless using Ironic Software's Yep product. My process was to scan in pretty much everything (all receipts, statements, bills, etc) using my ScanSnap S510M, give it a date-based name, put in a folder (same folder for everything) and then use Yep to assign and manage tags. This worked out fairly well until I tried to upgrade to Yep 2. World turned upside-down. The product was complicated and I found its filing system awkward and inflexible. For those of you who don't know, Yep basically allows you to tag files regardless of where they are in your filesystem. At the time I had considered Evernote, but I was too worried about security to embrace it. So, I read David Sparks' book Paperless and started a new process. In this process, I would rename files (mostly automatically using Hazel) and carefully place them into folders and subfolders. This got, shall we say, tedious... I still have nightmares about this. Needless to say, I was unable to sustain my efforts. Since then, I've accumulated boxes of "to be scanned" whilst redefine my processes. I generally think my two biggest mistakes where: (1) not focusing enough on the process and (2) not clearly defining what to keep and ditch. So... My new process will be as automatic as possible. I'm going to have a set of rules for what I scan. I'm also going to use a combination of FileThis.com (an AMAZING service btw) and Hazel to prep my scanned/downloaded pdf files (name them, tag them, etc). What I'm not sure about is how to do the ongoing management of those files. (re)Enter Evernote... My on again off again love affair with Evernote and its sexy features could be a dramatic "one that got away" Lifetime movie. Ok, maybe not. I've dabbled with it for note-taking purposes. I've read almost every article there is about it. I've done everything but put it to the test. Here are my concerns.. I'm hoping you experts can help me address them (or validate them). Evernote isn't for everyone. Security - I'm a little concerned about security at rest on Evernote servers. I know they don't encrypt data on their servers. Easy fix, right? Just make a local notebook for sensitive information (such as taxes, legal stuff, etc). Well, I've read some posts that suggest that Evernote might get rid of local notebooks. Any truth to that? Lock-in - Let's face it, once I get 20,000 pdf files in Evernote, I'm pretty committed. But what if I need to leave Evernote? (Let's just say something changes some day and I no longer want to use it.) What then? I know you can export notes, but what if I just want all my pdf files sent to a directory? I've seen the way that Evernote stores attachments on a Mac and it would take some scripting to get all the files out - not to mention their tags. Trust - I realize this is something that I just need to get over, but I've read that occasionally Evernote, through some bug or strange corner case, has misplaced a note or two. Can I trust that Evernote won't lose notes? I would plan on doing backups, but with 20,000 notes you may never realize you even lost the note. For example, I make lots of physical donations for tax write-offs. At the end of the year, I would just search Evernote for the "charity" tag or the "2015 Tax" tag. If the note isn't there, I'll never know it was lost, backup or no. One thought I had was to add a backup of the file using Hazel. I.e. Before I use Applescript to load the file into Evernote, I could copy the file to a backup location with some OpenMeta tags. If I do this, I could easily search using Finder. Then what would be the point of Evernote? I don't care much about the sharing feature for my paperless files. I do love the email-to-Evernote feature, but I could live with out it. I could even resurrect Yep (now version 3) and use it as a file viewer/tagger since it supports OpenMeta, though I still find Yep unnecessarily complicated. Again, Evernote is pretty sexy... Decisions decisions... ;^)
×
×
  • Create New...