News for hackers. Stuff that matters.
Re:Evernote hacked by jms703 on Saturday March 02, 2013 @11:22AM (#5309922)
I don't understand why they don't offer encryption.
Re:Evernote hacked by UnoriginalGuy on Saturday March 02, 2013 @11:27AM (#5309942)
Encryption on /what/? Point to point or content encryption? Also if your password has been compromised and that same password is used to encrypt your data then what exactly would encryption do?
Re:Evernote hacked by quinndupont on Saturday March 02, 2013 @12:26PM (#5310205)
Data encryption with a private key that the user holds. Evernote, like Dropbox, etc. have your crypto keys, and thus will always be subject to hacking and such. If I, and only I, had the keys it would be up to me to keep them safe, and my data would not succumb to a hack of their database, etc.
Re:Evernote hacked by UnoriginalGuy on Saturday March 02, 2013 @01:13PM (#5310369)
But password resets would quite literally be impossible.
Re:Evernote hacked by jms703 on Saturday March 02, 2013 @12:05PM (#5310121)
Encryption on the notes. Who would ever promote using the evernote login to encrypt?!
Re:Evernote hacked by martinkallstrom on Saturday March 02, 2013 @11:57AM (#5310088)
Passwords are typically not used for encryption, since you don't want to re-encrypt data when user changes the password.
Re:Evernote hacked by lawnchair_larry on Saturday March 02, 2013 @12:03PM (#5310112)
Yes they are, just in a more complicated way. You don't have to re-encrypt if the user changes their password. FDE would be pretty useless if so.
Re:Evernote hacked by jimktrains2 on Saturday March 02, 2013 @12:13PM (#5310156)
You can encrypt notes.
Re:Evernote hacked by whitenoise on Saturday March 02, 2013 @01:11PM (#5310360)
How do you encrypt a complete note? AFAIK the official Evernote client only allows encrypting text content within a note.
Re:Evernote hacked by jimktrains2 on Saturday March 02, 2013 @02:57PM (#5310776)
Yes, as far as I know that's all you can do. I wish you could do pictures as well:-\