Comments on: How to Secure Evernote on a Shared Computer http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/ Tech for Real People Tue, 07 Feb 2012 21:30:16 +0000 hourly 1 http://wordpress.org/?v= By: Evan Kline http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-17045 Evan Kline Thu, 04 Aug 2011 20:22:52 +0000 http://www.40tech.com/?p=1303#comment-17045 The problem with that for me is that I'm prone to lose thumb drives, and I forget to unmount external USB drives. But for someone who can hang on to a USB drive, that's a good idea. The problem with that for me is that I’m prone to lose thumb drives, and I forget to unmount external USB drives. But for someone who can hang on to a USB drive, that’s a good idea.

]]> By: David http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-16998 David Thu, 04 Aug 2011 00:07:53 +0000 http://www.40tech.com/?p=1303#comment-16998 If you work on a shared computer, just migrate database to a USB drive and your problem solved. If you work on a shared computer, just migrate database to a USB drive and your problem solved.

]]> By: Evan Kline http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11422 Evan Kline Mon, 30 Aug 2010 22:45:01 +0000 http://www.40tech.com/?p=1303#comment-11422 Good points, Mel. If you follow the link at the start of this article to the updated article, it should reduce this concern. Either way, you actually get a "Welcome to Evernote" screen if it doesn't find a database, and you have to manually type in your account info, or create a new account. This contrasts rather sharply with how it normally goes right to a notebook view. I've been using this method for about a year now, and have yet to create a new database by mistake. Regarding #2, yes, the virtual drive stays open and unencrypted if you shut down. Again, though, if you use the procedure in the updated article (linked at the top of this one), then the virtual drive is automatically closed when you exit Evernote. Regarding #3, I can't speak to Bitlocker. I have Home Premium, and I understand you need Ultimate or Enterprise to do that. I could probably try it at work, but since I'm using the updated procedure (mentioned in the updated article) on 2 machines at home, I just used that same procedure on my office PC. Good points on #4- before moving over to an encrypted drive, everyone should make sure they use a tool like AxCrypt to wipe the old database. I'm actually more concerned about what happens to my data when it hits Evernote's servers than here locally. Since my encrypted drive closes automatically when I close Evernote, it is almost always encrypted here. We did another post a while back on ways to encrypt data within Evernote, but that does make Evernote a bit less useful. Good points, Mel. If you follow the link at the start of this article to the updated article, it should reduce this concern. Either way, you actually get a “Welcome to Evernote” screen if it doesn’t find a database, and you have to manually type in your account info, or create a new account. This contrasts rather sharply with how it normally goes right to a notebook view. I’ve been using this method for about a year now, and have yet to create a new database by mistake.

Regarding #2, yes, the virtual drive stays open and unencrypted if you shut down. Again, though, if you use the procedure in the updated article (linked at the top of this one), then the virtual drive is automatically closed when you exit Evernote.

Regarding #3, I can’t speak to Bitlocker. I have Home Premium, and I understand you need Ultimate or Enterprise to do that. I could probably try it at work, but since I’m using the updated procedure (mentioned in the updated article) on 2 machines at home, I just used that same procedure on my office PC.

Good points on #4- before moving over to an encrypted drive, everyone should make sure they use a tool like AxCrypt to wipe the old database.

I’m actually more concerned about what happens to my data when it hits Evernote’s servers than here locally. Since my encrypted drive closes automatically when I close Evernote, it is almost always encrypted here. We did another post a while back on ways to encrypt data within Evernote, but that does make Evernote a bit less useful.

]]> By: Mel http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11404 Mel Mon, 30 Aug 2010 08:20:00 +0000 http://www.40tech.com/?p=1303#comment-11404 Three problems I see with this. 1. If no database is present when Evernote opens it simply creates a new database in the default location and downloads the notes from the server. If you ever do forget to open the virtual drive first, you have an unencrypted database sitting on your drive that you may or may not remember to delete. 2. If you're computer goes into hibernate while the Virtual drive is open isn't your stuff unencrypted until you shut down? A. It will be open when the computer is turned on later (ie. if stolen and the win password is hacked.) B. If the disk is accessed through another OS like a boot disk would that leave the database unencrypted and vulnerable? 3. What is wrong with simply using Win7's Bitlocker for encryption? Does it not allow the Evernote software to access the database file? Oh, and 4: You still need to make sure you securely wipe the old database and any deleted data from the hard drive because it is simple to access normal "deleted" data in Windows. These are just the things off the top of my head but, bottom line, I don't know if I would be storing super classified information in Evernote -- trade secrets, bank info, your schedule for your meeting with the President. :) Three problems I see with this. 1. If no database is present when Evernote opens it simply creates a new database in the default location and downloads the notes from the server. If you ever do forget to open the virtual drive first, you have an unencrypted database sitting on your drive that you may or may not remember to delete.

2. If you’re computer goes into hibernate while the Virtual drive is open isn’t your stuff unencrypted until you shut down? A. It will be open when the computer is turned on later (ie. if stolen and the win password is hacked.) B. If the disk is accessed through another OS like a boot disk would that leave the database unencrypted and vulnerable?

3. What is wrong with simply using Win7′s Bitlocker for encryption? Does it not allow the Evernote software to access the database file?

Oh, and 4: You still need to make sure you securely wipe the old database and any deleted data from the hard drive because it is simple to access normal “deleted” data in Windows.

These are just the things off the top of my head but, bottom line, I don’t know if I would be storing super classified information in Evernote — trade secrets, bank info, your schedule for your meeting with the President. :)

]]> By: Evan Kline http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11199 Evan Kline Fri, 13 Aug 2010 13:40:15 +0000 http://www.40tech.com/?p=1303#comment-11199 I just added to that thread with some thoughts of my own. I don't even need full encryption- just the ability to encrypt the entire content of a note (not just the text), and the ability to password protect Evernote without going through the TrueCrypt method. Also, in case you didn't notice, this post was updated with a bit of an easier method: http://www.40tech.com/2009/12/13/how-to-password-protect-evernote-updated/ I just added to that thread with some thoughts of my own. I don’t even need full encryption- just the ability to encrypt the entire content of a note (not just the text), and the ability to password protect Evernote without going through the TrueCrypt method.

Also, in case you didn’t notice, this post was updated with a bit of an easier method:

http://www.40tech.com/2009/12/13/how-to-password-protect-evernote-updated/

]]> By: Marc http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11195 Marc Fri, 13 Aug 2010 09:49:35 +0000 http://www.40tech.com/?p=1303#comment-11195 Evan, just updated the thread http://forum.evernote.com/phpbb/viewtopic.php?f=30&t=18177&p=74257#p74257 if you guys consider that Evernote should provide a buil-in encryption I would truly ask you to update this thread as well. It is extremely unconfortable to fumble around with additional tools when, to my opinion, the product in itself should have to provide with full encryption. Evan,

just updated the thread

http://forum.evernote.com/phpbb/viewtopic.php?f=30&t=18177&p=74257#p74257

if you guys consider that Evernote should provide a buil-in encryption I would truly ask you to update this thread as well. It is extremely unconfortable to fumble around with additional tools when, to my opinion, the product in itself should have to provide with full encryption.

]]> By: Evan Kline http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11191 Evan Kline Thu, 12 Aug 2010 22:58:14 +0000 http://www.40tech.com/?p=1303#comment-11191 I do the same, Barry. We wrote about a few methods of encryption for Evernote a few months ago: http://www.40tech.com/2010/05/02/3-free-tools-to-encrypt-individual-evernote-notes/ I do the same, Barry. We wrote about a few methods of encryption for Evernote a few months ago:

http://www.40tech.com/2010/05/02/3-free-tools-to-encrypt-individual-evernote-notes/

]]> By: Barry http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11190 Barry Thu, 12 Aug 2010 22:52:29 +0000 http://www.40tech.com/?p=1303#comment-11190 I do use the built-in EN encryption to protect data portions at times, but if I have a large amount of data that I want to be secured & still in EN, there are some additional options available. With the premium version of EN, you can attach files up to 50mb in size. I don't think I have anything near that big attached, but that does gives you the freedom to create & attach encrypted file types such as PDF's, ZIP libraries or even an attached TC container. Those files are not much good for your smart phone or the OCR & indexing already mentioned, but you can just drag & drop those protected files to the desktop to use on another PC. I confess that I still keep the originals stored away safely (just in case), and that I still do not put anything out there that would crush me if it got into the wrong hands. While I certainly appreciate all the features that EN offers by storing data in the cloud, I think that I value the reality of having everything in one place & application just as much. With the tags & notebooks (local & cloud-storage) being utilized, it can also be a compact filing system & I only expect to see it improve as it continues to mature. I do use the built-in EN encryption to protect data portions at times, but if I have a large amount of data that I want to be secured & still in EN, there are some additional options available. With the premium version of EN, you can attach files up to 50mb in size. I don’t think I have anything near that big attached, but that does gives you the freedom to create & attach encrypted file types such as PDF’s, ZIP libraries or even an attached TC container. Those files are not much good for your smart phone or the OCR & indexing already mentioned, but you can just drag & drop those protected files to the desktop to use on another PC. I confess that I still keep the originals stored away safely (just in case), and that I still do not put anything out there that would crush me if it got into the wrong hands.

While I certainly appreciate all the features that EN offers by storing data in the cloud, I think that I value the reality of having everything in one place & application just as much. With the tags & notebooks (local & cloud-storage) being utilized, it can also be a compact filing system & I only expect to see it improve as it continues to mature.

]]> By: Evan Kline http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11189 Evan Kline Thu, 12 Aug 2010 15:40:13 +0000 http://www.40tech.com/?p=1303#comment-11189 I do wish Evernote gave a simple way to encrypt an entire note's contents, including files in the note. We'd lose the ability to have that note be searchable, plus OCR, but if you wanted your credit card statements, for example, to be in Evernote, that would make it much easier. And yea, if you move everything off of the cloud, then you'd just need to see whether Evernote or some other service has the better desktop app for searching and organizing that data. I do wish Evernote gave a simple way to encrypt an entire note’s contents, including files in the note. We’d lose the ability to have that note be searchable, plus OCR, but if you wanted your credit card statements, for example, to be in Evernote, that would make it much easier.

And yea, if you move everything off of the cloud, then you’d just need to see whether Evernote or some other service has the better desktop app for searching and organizing that data.

]]> By: Marc http://www.40tech.com/2009/09/01/4-steps-to-secure-evernote-on-a-shared-computer/comment-page-1/#comment-11187 Marc Thu, 12 Aug 2010 14:03:46 +0000 http://www.40tech.com/?p=1303#comment-11187 Hi Evan, I already asked yesterday http://forum.evernote.com/phpbb/viewtopic.php?f=30&t=18177&p=74164#p74164 let's see whay they say (if they ever say something). I've I move all my notes off the cloud, I could just as well stop using evernote and settle for Google Desktop, right? man, if they added encryption, Evernote would be the killer app.. don't you guys think so? Hi Evan, I already asked yesterday

http://forum.evernote.com/phpbb/viewtopic.php?f=30&t=18177&p=74164#p74164

let’s see whay they say (if they ever say something).

I’ve I move all my notes off the cloud, I could just as well stop using evernote and settle for Google Desktop, right?

man, if they added encryption, Evernote would be the killer app.. don’t you guys think so?

]]>