Being privacy-aware in 2016

Re:Being privacy-aware in 2016 by Loic on Monday June 06, 2016 @07:44AM (#11846003)

I am security conscious but not as conscious as jgc, I am doing the same with the database on the drive and the drive is encrypted. I have a "smaller" password in the head plus a Yubikey password which is appended to my smaller password. For each website I am using a randomly generated password.

What is important is that in my daily life, this is working perfectly well and I do not feel at all the annoyance of the added security against using the same dadada password on all the websites.

I really recommend a head stored + hardware generated password too, this is working wonderfully.

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by jsingleton on Monday June 06, 2016 @08:00AM (#11846089)

Sounds like a good system. Having something easy that you will actually use is the most important thing.

There is no one-size-fits-all solution and it should clearly depend on the threat model. I can imagine why someone who could be expected to have the keys to CloudFlare's infrastructure might want to take extra care.

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by jgrahamc on Monday June 06, 2016 @08:38AM (#11846292)

Actually, I don't have the keys to CloudFlare's infrastructure. I don't have access to our production systems at all.

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by jsingleton on Tuesday June 07, 2016 @05:21AM (#11853296)

I thought this might be the case, but it doesn't stop people from believing you may be a high value target. So the good security practices are very prudent.

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by distances on Monday June 06, 2016 @07:48AM (#11846025)

I suppose I'm even less security conscious, as I'm storing my file in ownCloud and sync it also to my Android. I assume this use case prevents using a Yubikey password for enhanced security?

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by willemmali on Monday June 06, 2016 @07:56AM (#11846066)

You can always put your files in OwnCloud in a TrueCrypt container, and anything that's unlocked by a password can use a Yubikey password with head-stored additions.

I'm not aware of ready-made solutions to locally decrypt cloud-stored data on mobile phones though, I don't think you can mount TrueCrypt volumes on your phone. Anyone know of a way to do this?

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by tiatia on Monday June 06, 2016 @08:37AM (#11846290)

Hetzner (Germany) has quite cheap storage. https://www.hetzner.de/de/hosting/storagebox/bx30

Based on the protocols they offer it is easy to mount encrypted. LUKS is available for Android (rooted) https://play.google.com/store/apps/details?id=com.nemesis2.l...

[ Parent | on HN ]

Re:Being privacy-aware in 2016 by ParaLaffer on Monday June 06, 2016 @09:18AM (#11846521)

Does OwnCloud do the block-sync like Dropbox for TrueCrypt containers, or does it need to reupload the entire container if the container is modified?

[ Parent | on HN ]