The Tao of Mac - Latest Comments in The Tao of Mac - On Evernote, and Security

Re: The Tao of Mac - On Evernote, and Security

Ed — Mon, 05 May 2008 22:02:56 -0000

I agree about the security criticisms of evernote. Just imagine if it were secure and supported PDF capture, paired with my shiny new fujitsu scansnap s300m, I could have a secured document repository anywhere on the planet.

Unfortunately it's not truly secure and does not support PDF's. Even as a local app, the lack of pdf support is a dealkiller for me.

Re: The Tao of Mac - On Evernote, and Security

taoofmac — Thu, 01 May 2008 05:14:02 -0000

Well yeah, but it's kind of an obvious solution. I've been using those
since 2000 or something, and they're getting faster and cheaper all
the time...

Re: The Tao of Mac - On Evernote, and Security

David Magda — Wed, 30 Apr 2008 20:34:59 -0000

That "some reason" that data is sent in the clear is because encryption would kill the CPU on their servers if they got a modicum of traffic.

That is, unless they had crypto accelerators:

http://www.google.com/searc...

or had a server with a CPU with built-in crypto:

http://www.sun.com/processo...

Re: The Tao of Mac - On Evernote, and Security

Dave Engberg — Tue, 29 Apr 2008 20:01:18 -0000

Strictly speaking, so does Evernote Beta if you just change the URLs, but I understand what you're saying.

Thanks

Re: The Tao of Mac - On Evernote, and Security

taoofmac — Tue, 29 Apr 2008 19:37:03 -0000

Your points are valid except for it not being a big deal. Consumers
should demand better information about security and be more aware of
what cleartext communication entails.

Re: The Tao of Mac - On Evernote, and Security

rcarmo — Tue, 29 Apr 2008 19:35:03 -0000

That is good to know. Bear in mind, however, that free Gmail also
supports full SSL encryption of the entire session. It's not the
default, but it's there.

Re: The Tao of Mac - On Evernote, and Security

Dave Engberg — Tue, 29 Apr 2008 19:11:13 -0000

Rui -

Thanks for the detailed analysis. You're absolutely correct the that the current free beta uses SSL for authentication and plaintext HTTP for subsequent operations. This is similar to how free services like gmail behave.

In the near future, we will offer a Premium version of the service for a few dollars a month that will offer greatly increased storage, priority image processing, and SSL for all communications.

Thanks

Re: The Tao of Mac - On Evernote, and Security

Flavio — Tue, 29 Apr 2008 19:08:10 -0000

Hey Rui! Long time reader from Brazil.

I've been beta testing Evernote for a while now. I really don't remember they promising any kind of ultra security feature. Therefore, this unsecured connection, is no big deal.

And, come on, if you really want to store something private on-line, you shouldn't choose a beta application and even refrain from storing this kind of information on-line.

Anyway. This finding show us a good opportunity for people behind Evernote. They can create a subscription model for those willing an extra level of security on their accounts.

Abração,
Flavio

Re: The Tao of Mac - On Evernote, and Security

taoofmac — Tue, 29 Apr 2008 18:30:03 -0000

It's the Cocoa Packet Analyzer. It's now linked in from the post.

Re: The Tao of Mac - On Evernote, and Security

Miguel Carmo — Tue, 29 Apr 2008 18:15:09 -0000

Hi Rui,

could you please identify the packet sniffer in the image ?
Thank you.