4 ms·
I am security conscious but not as conscious as jgc, I am doing the same with the database on the drive and the drive is encrypted. I have a "smaller" password
by Loic 10y ago
I am security conscious but not as conscious as jgc, I am doing the same with the database on the drive and the drive is encrypted. I have a "smaller" password in the head plus a Yubikey password which is appended to my smaller password. For each website I am using a randomly generated password.
What is important is that in my daily life, this is working perfectly well and I do not feel at all the annoyance of the added security against using the same dadada password on all the websites.
I really recommend a head stored + hardware generated password too, this is working wonderfully.
- distances 10y agoI suppose I'm even less security conscious, as I'm storing my file in ownCloud and sync it also to my Android. I assume this use case prevents using a Yubikey password for enhanced security?
- willemmali 10y agoYou can always put your files in OwnCloud in a TrueCrypt container, and anything that's unlocked by a password can use a Yubikey password with head-stored additions. I'm not aware of ready-made solutions to locally decrypt cloud-stored data on mobile phones though, I don't think you can mount TrueCrypt volumes on your phone. Anyone know of a way to do this?
- tiatia 10y agoHetzner (Germany) has quite cheap storage. https://www.hetzner.de/de/hosting/storagebox/bx30 https://www.hetzner.de/de/hosting/storagebox/bx30 Based on the protocols they offer it is easy to mount encrypted. LUKS is available for Android (rooted) https://play.google.com/store/apps/details?id=com.nemesis2.luksmanager&hl=en https://play.google.com/store/apps/details?id=com.nemesis2.l...
- waldfee 10y agoI have used EDS Lite in the past. the lite version does not allow to mount the container though. https://play.google.com/store/apps/details?id=com.sovworks.edslite&hl=en https://play.google.com/store/apps/details?id=com.sovworks.e...
- ParaLaffer 10y agoDoes OwnCloud do the block-sync like Dropbox for TrueCrypt containers, or does it need to reupload the entire container if the container is modified?
- jsingleton 10y agoSounds like a good system. Having something easy that you will actually use is the most important thing. There is no one-size-fits-all solution and it should clearly depend on the threat model. I can imagine why someone who could be expected to have the keys to CloudFlare's infrastructure might want to take extra care.
- jgrahamc 10y agoActually, I don't have the keys to CloudFlare's infrastructure. I don't have access to our production systems at all.
- jsingleton 10y agoI thought this might be the case, but it doesn't stop people from believing you may be a high value target. So the good security practices are very prudent.