6 ms·

I'm kind of annoyed they didn't send an email, just flagged my password. So I couldn't use the iphone/mac apps and had to login via the web interface to reset.

I'm kind of annoyed they didn't send an email, just flagged my password. So I couldn't use the iphone/mac apps and had to login via the web interface to reset. Which I didn't know because they didn't send an email, just got an invalid password error. Their lack of encryption and lack of 2 factor auth just became a much bigger issue for me...

rdl 14y ago
Seriously, who doesn't do 2fa for something like this in 2013? Or 2012, or even 2011?
- kmfrk 14y ago
  Apple, Microsoft, Yahoo (at least non-US), etc. ... I'm not sure if there are any bookmark services that actually support this, though it'd be a decent selling point. It was a big deal, when Google finally assed themselves to implement it for Gmail, but companies have been embarrassingly slow in following their example. Especially when they provide e-mail services. Twitter hired TFA specialists a few months back, but they are taking their sweet time about implementing the system. I've wondered for a long time why social networks aren't on top of implementing this. It's the SSL discussion all over again.
  - rdl 14y ago
    Google Chrome does bookmark sync using user-provided passphrase, so I'd consider that bookmark service with client side crypto and 2fa. Crappy consumer services not supporting 2fa is somewhat understandable. No one uses Apple or Yahoo web services for business. People do seem to use Evernote in business contexts. Google Apps for your Domain is a fairly legitimate business option, as is Google Docs.
    - kmfrk 14y ago
      Right, forgot Chrome. I only thought of Opera, when it comes to browser-backed bookmark sync - at least on paper, since it doesn't work at all for me.
  - deleted 14y ago
    [deleted]
- nilsbunger 14y ago
  Rackspace doesn't support 2fa in 2013. Or multiple users on an account, for that matter... (much to my shock and dismay)
  - rdl 14y ago
    It's kind of funny that a lot of services which have decent general security have lax internal/admin user or account-management. The weakest link at every hosting provider seems to be the customer admin panel/provisioning interface. This is one thing AWS does relatively well vs. other providers (now); IAM is pretty featureful, but few people actually use it to even 5% of what it can do.
- lawnchair_larry 14y ago
  Everyone?
LeeHunter 14y ago
I have a lot of respect for the Evernote team. They've done a great job of improving the product over the last couple of years but it's puzzling that they've recently rolled out a version of Evernote targeted at business without addressing 2fa. It's a very serious gap in their offering.
- ishansharma 14y ago
  And add poor performance of their app on iPad. They are present everywhere but except Windows client, all other apps feel very very slow!
jimktrains2 14y ago
What lack of encryption?
- Ensorceled 14y ago
  Oh, sorry. I was under the impression that Evenote stored my files in plain text. Do you have information on what encrypted storage format the are using?
  - jimktrains2 14y ago
    Oh, I thought you were referring to their storing of passwords or in transit. I don't think they can store notes in an encrypted format because they do ocr on images, which is actually one of the selling points for me. I just with their built-in text encryption was better.
deleted 14y ago
[deleted]

rdl 14y ago

Seriously, who doesn't do 2fa for something like this in 2013? Or 2012, or even 2011?

kmfrk 14y ago
Apple, Microsoft, Yahoo (at least non-US), etc. ... I'm not sure if there are any bookmark services that actually support this, though it'd be a decent selling point. It was a big deal, when Google finally assed themselves to implement it for Gmail, but companies have been embarrassingly slow in following their example. Especially when they provide e-mail services. Twitter hired TFA specialists a few months back, but they are taking their sweet time about implementing the system. I've wondered for a long time why social networks aren't on top of implementing this. It's the SSL discussion all over again.
- rdl 14y ago
  Google Chrome does bookmark sync using user-provided passphrase, so I'd consider that bookmark service with client side crypto and 2fa. Crappy consumer services not supporting 2fa is somewhat understandable. No one uses Apple or Yahoo web services for business. People do seem to use Evernote in business contexts. Google Apps for your Domain is a fairly legitimate business option, as is Google Docs.
  - kmfrk 14y ago
    Right, forgot Chrome. I only thought of Opera, when it comes to browser-backed bookmark sync - at least on paper, since it doesn't work at all for me.
- deleted 14y ago
  [deleted]
nilsbunger 14y ago
Rackspace doesn't support 2fa in 2013. Or multiple users on an account, for that matter... (much to my shock and dismay)
- rdl 14y ago
  It's kind of funny that a lot of services which have decent general security have lax internal/admin user or account-management. The weakest link at every hosting provider seems to be the customer admin panel/provisioning interface. This is one thing AWS does relatively well vs. other providers (now); IAM is pretty featureful, but few people actually use it to even 5% of what it can do.
lawnchair_larry 14y ago
Everyone?

LeeHunter 14y ago

I have a lot of respect for the Evernote team. They've done a great job of improving the product over the last couple of years but it's puzzling that they've recently rolled out a version of Evernote targeted at business without addressing 2fa. It's a very serious gap in their offering.

ishansharma 14y ago
And add poor performance of their app on iPad. They are present everywhere but except Windows client, all other apps feel very very slow!

jimktrains2 14y ago

What lack of encryption?

Ensorceled 14y ago
Oh, sorry. I was under the impression that Evenote stored my files in plain text. Do you have information on what encrypted storage format the are using?
- jimktrains2 14y ago
  Oh, I thought you were referring to their storing of passwords or in transit. I don't think they can store notes in an encrypted format because they do ocr on images, which is actually one of the selling points for me. I just with their built-in text encryption was better.

deleted 14y ago

[deleted]