Re:Ask HN: How do I secure a personal journal?
by bohol on Saturday January 31, 2015 @10:11AM
(#8976875)
The bigger problem is being infected by a trojan. You have all the time in the world to get infected, but would only take a single time when your files are unencrypted to expose them.
Re:Ask HN: How do I secure a personal journal?
by tl on Saturday January 31, 2015 @10:32AM
(#8976943)
An even bigger problem is Dropbox being the trojan, which is why I disagree with the "ecrypt-fs + dropbox" solution. We live in a world where Internet searches like "dropbox condoleezza rice" and "dropbox prism" are incredibly unflattering.
When you want to write or read the journal, provide the passphrase and mount it. When you don't, unmount it. You can do this automatically on boot if you're willing to accept the possibility of being tackled by an FBI agent then having your work journal for Silk Road read out in open court.
A second option: use full-disk encryption (same "vulnerable to a football tackle" problem). For backups, just use Tarsnap.