3 ms·
The challenge, for me, with a service like this is security. To effectively search all of my personal information, this service will need creds to see all of my
by raesene9 8y ago
The challenge, for me, with a service like this is security. To effectively search all of my personal information, this service will need creds to see all of my personal data.
That makes this service a tempting target for attackers.
From an initial read through the ToS and Privacy Policy I don't get the impression that they're going for a zero-knowledge model where data is processed on a client, so that means that their server-side apps will need to access/process my personal data as part of provision of the service.
Now I have no reason to doubt their committment to security, however I also don't have a great deal of information that would allow me to say "yep this looks like somewhere I want to trust with all my personal details"
One recommendation I would make to the team, is provide a bit more information about the steps you're taking to secure data processed on this service and also talk about the third party assurance that you're getting over those controls.
Also (personal peeve perhaps) but that bit on the front page about "industry standard encryption" isn't really useful. TLS won't save me if the web app. has SQL Injection :)
- kevin_b_er 8y agoAlso makes a tempting target for the sales and marketing dept within the company or whomever buys them out.
- amelius 8y agoThe only reason something like this runs on the cloud is because it serves their business model. If you want to access your data from multiple devices at multiple locations, just set up a NAS with a decent search engine on it.
- walterbell 8y agoAny recommendations on a NAS with integrated search? One of the challenges with a NAS is remote access from mobile devices.
- johntash 8y agoFreeNAS + NextCloud + some sort of vpn should be a good start. Nextcloud also has plugins for OCR to search inside pdfs/etc.
- Kostchei 8y agoReal zero knowledge would involve you controlling the private keys and either a "lose it and you really lost it" or shamir-escrow model. Then you wouldn't have to rely on their security at all, just your control of the private key and airgapping of the escrow.
- sdenton4 8y ago...though the user experience of 'lose it and you've really lost it' has been shown not to work out so well... [citation: who-knows-how-many-millions of forever lost bitcoin.]
- justtopost 8y agoI still find that possibility better than most others. However emergency recovery codes seem to be an accaptable tradeoff on both sides.