From: Wes Groleau on
On 05-30-2010 04:37, David Ryeburn wrote:
> This doesn't surprise me. However if you could use a Mac or PC belonging to
> a friend who trusts you enough to let you install TrueCrypt, then you'd be

If he's tgraveling and loses everything (see first paragraph of O.P.)
then such a friend might not be available.

> If you put unencrypted versions of your files inside the Public folder

If the person that stole the computer leaves it online and if web
sharing is enabled and (anything else?)

> search, unlikely though that may be, is to encrypt the files in such a way
> that you can decrypt them in your head. I wouldn't use ROT13, but something
> not much more complicated than that would keep anyone or anything stumbling

I'd like to meet the person who can decrypt a scan of a passport
in his/her head.

--
Wes Groleau

New “Telenovelas” Web Page
http://Ideas.Lang-Learn.us/russell?itemid=1032
From: David Ryeburn on
In article <htubq8$f97$1(a)news.eternal-september.org>,
Wes Groleau <Groleau+news(a)FreeShell.org> wrote:

> On 05-30-2010 04:37, David Ryeburn wrote:
> > This doesn't surprise me. However if you could use a Mac or PC belonging to
> > a friend who trusts you enough to let you install TrueCrypt, then you'd be
>
> If he's tgraveling and loses everything (see first paragraph of O.P.)
> then such a friend might not be available.
>
> > If you put unencrypted versions of your files inside the Public folder
>
> If the person that stole the computer leaves it online and if web
> sharing is enabled and (anything else?)


Stole *what* computer?

Maybe you're talking about a different "Dropbox" from what I am talking
about. The one I mean is available through www.dropbox.com. The unencrypted
files when placed inside the Public folder using Dropbox are then (in
addition to being on one's own home computer) on whatever computer the
Dropbox people are making available for this service, ready for anyone in
the world to copy, provided they can find their way to them. In order to do
so they have to find the file. One of my files has the URL

<http://dl.dropbox.com/u/abcdefg/FileName>

where "abcdefg" is a seven-digit base-10 number and "FileName" is the name
of the file. If you guess the wrong value of "abcdefg" you at most gain
access to someone else's Dropbox file. If you guess the wrong value of
"FileName" you either get nothing at all or the wrong file, the latter only
if a file with your guessed name exists. If you omit "FileName" you get an
error message, rather than access to my (or someone else's) entire Public
folder. Yes, this is not optimum security but I think the chances of
anything useful being found are slim.

Ten million isn't all that large and is no protection against brute force.
The number of choices for "FileName" is huge. One should not use short,
obvious choices.

David

--
David Ryeburn
david_ryeburn(a)telus.netz
To send e-mail, use "net" instead of "netz".
From: Richard Maine on
David Ryeburn <david_ryeburn(a)telus.netz> wrote:

> <http://dl.dropbox.com/u/abcdefg/FileName>
....
> Ten million isn't all that large and is no protection against brute force...

But as you are using unsecured http, much easier than brute force is to
just sniff your connection if you ever access the file. Your connection
will have the url in the clear on it, as well as the contents of the
file itself.

--
Richard Maine | Good judgment comes from experience;
email: last name at domain . net | experience comes from bad judgment.
domain: summertriangle | -- Mark Twain
From: Wes Groleau on
On 05-30-2010 17:37, David Ryeburn wrote:
> Maybe you're talking about a different "Dropbox" from what I am talking
> about. The one I mean is available through www.dropbox.com. The unencrypted

Sorry. I had never heard about that. When you said
"Public folder inside your Dropbox" what came to my mind
was the "Dropbox inside your Public Folder" that each
OS X user has on the Mac.

--
Wes Groleau

Some schools are cutting back on homework …
http://Ideas.Lang-Learn.us/russell?itemid=1508
From: =?ISO-8859-1?Q?Kir=E1ly?= on
BreadWithSpam(a)fractious.net wrote:
> You still need the key if hte document is encrypted.
>
> Once it's been opened, with the key, some of the non-Adobe apps
> will let you re-save it without restrictions or encryption.

Thanks very much for that. I looked around and you are right. The PDF
password defeaters can defeat user operation passwords - i.e. remove the
printing or re-saving restrictions. But they can't defeat the main
password required to actually open the file.

This really is the best solution. I can encrypt the docs on my Mac, and
decrypt them on Windows PC in any internet cafe or public library,,
without having to install additional software in the PC. Just what I
needed!

--
K.

Lang may your lum reek.
First  |  Prev  | 
Pages: 1 2 3 4 5 6
Prev: iTunes - iPhoto conflict
Next: iphoto second library