On Dec 23, 2008, at 11:12 AM, Tom Coradeschi wrote:

>> Ok... So *by default* the data is encrypted with
>> THEIR key.  So it is only secure *IF* *every* one
>> of their employees is to be trusted AND they
>> don't screw up and release their private key.
>> Likewise, if you chose your own key, it is still
>> only secure IF they don't screw up and let your
>> data be grabbed by someone willing to spend the
>> computer power to brute force it.
>
> Brute force cracking for 256-bit AES is non-trivial. And someone
> wants to spend those kind of resources decrypting pictures of my kids
> and a bunch of excel spreadsheets depicting the pitiful state of my
> bank account?

Tom raises an important point. There's data that's not particularly  
confidential yet is irreplaceable (baby pictures) versus data that IS  
confidential (business plans, account login info, etc). Store the  
confidential data on the site as an encrypted disk image, and voila'  
the bad guys have a hard time getting in.

On the gripping hand, there's data that needs to be shared, which is  
not a use mentioned here so far, but is a very common use of these  
services.

For example, one of our professors is collaborating with two other  
people in different parts of the country; we could give them accounts  
on our file servers and they could set up a vpn connection and they  
could log in and get to everything, or they could just get a free  
XDrive account, which has more than enough space for the Word files  
they're sharing. Since it's password protected, only they have access  
to it, an academic book on border health care issues is not all that  
big a target for industrial espionage, yet they need to make sure the  
files aren't lost and they all have access.

However, a single backup is never really a good idea. Back up those  
baby pictures on multiple CD's/DVD's and put them off somewhere cool  
and dry (like a safe deposit box...check your bank, most offer  
environmentally stable storage), and in multiple locations, AND have  
your time machine AND an offsite online backup.

Belts and suspenders. (and duct tape) means you'll never have to tell  
your kid "Sorry, all those baby pictures? Gone forever."


-- 
Bruce Johnson
University of Arizona
College of Pharmacy
Information Technology Group

Institutions do not have opinions, merely customs



--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to Low End Mac's iMac 
List, a group for those using G3, G4, G5, and Intel Core iMacs as well as Apple 
eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/imaclist?hl=en
Low End Mac RSS feed at feed://lowendmac.com/feed.xml
-~----------~----~----~----~------~----~------~--~---

Reply via email to