4 ms·
Even if it's encrypted?
by andrey-p 12y ago
Even if it's encrypted?
- SideburnsOfDoom 12y agohttp://www.theguardian.com/technology/2014/jul/17/edward-snowden-dropbox-privacy-spideroak http://www.theguardian.com/technology/2014/jul/17/edward-sno... https://www.techdirt.com/articles/20130620/15390323549/nsa-has-convinced-fisa-court-that-if-your-data-is-encrypted-you-might-be-terrorist-so-itll-hang-onto-your-data.shtml https://www.techdirt.com/articles/20130620/15390323549/nsa-h...
- jtheory 12y agoThe KeePass database is strongly-encrypted before you put it up on Dropbox, so you're not relying on Dropbox's own encryption (I wouldn't either).
- SideburnsOfDoom 12y agoI refer you to the techdirt article linked above. If you upload a KeePass file to dropbox now, you may be vulnerable to a way of cracking keepass files available at some future date.
- BorgHunter 12y agoThis shouldn't matter here, if you regularly rotate passwords and KeePass itself is regularly updated to fix security vulnerabilities.
- jtheory 12y agoYup; but I'd say you're letting the perfect be the enemy of the pretty damned good. KeePass' encryption is quite solid -- if it starts to show some cracks in the face of quantum computers or whatnot somewhere in the future, I can always upgrade and change my passwords so the old database isn't valuable any more. That'd be a PITA, but I don't expect this to happen -- nor for the govt to come up with a huge vulnerability that no one else sees -- so that's the kind of bet I'm comfortable taking.