Amazon (AWS) security is very good but certainly not perfect. Amazon does
not widely publicize their security architecture but to the best of my
knowledge their storage is not encrypted.
One of the most compelling security features of MLO is the lack of a web
user interface. If you can log in to some web UI and view your transactions
then a sufficiently skilled hacker can pretend to be you and steal the
data. If the data is encrypted then you must need to supplybvthe key if you
were to access the data, which provides the hacker an opportunity to steal
it. With no web UI the hacker would have to log in to the AWS servers and
attack their storage integrity. Amazon's protection of storage integrity,
which is pretty well protected.
The people with the best chance of compromising your data would be Amazon
insiders. If the data we're encrypted in a method where Amazon had the key,
then the hacker (Amazon insider) would just have to steal the key from
Amazon. To address this vulnerability, you would have to use end-to-end
encryption, which is complex and expensive and fraught with regulatory
issues and trade restrictions.
Another significant security factor is that it's hard to make money off of
stolen to-do lists, there's not much of a market for finding out what you
need from the grocery store.
Andrey has expressed a concern about the cost and regulation, and has asked
if any comparable apps use encrypted storage, so far nobody has named one.
-Dwight
--- Forwarded message ---
From: Jeff Smith [email protected]
Date: February 13, 2020 13:27:36
Subject: Re: [MLO] Re: Is MLO Cloud data encrypted?
To: [email protected]
I notice they are using Amazon services for the data. It is protected
however much those companies protect your data.
see fine print at end of
https://www.mylifeorganized.net/cloud.shtml
On Wed, Feb 12, 2020 at 11:36 PM Alexander Wicher <[email protected]> wrote:
Now... ist The question answered how mlo protects data@rest in the cloud?
.a
--
You received this message because you are subscribed to the Google Groups
"MyLifeOrganized" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/mylifeorganized/664c8dd1-efeb-4d1c-82de-b7b4e1d7ecb1%40googlegroups.com.
--
"It is not what I believe that will make-or-break; It is what I'm doing
about it." --Jefferson Smith
--
You received this message because you are subscribed to the Google Groups
"MyLifeOrganized" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/mylifeorganized/CAA1bVFkXiv2W4HswGOcNr%3Dw6o08MTDhJFVAM4kZi%3DdHDAz6-_g%40mail.gmail.com.
On February 13, 2020 13:27:36 Jeff Smith <[email protected]> wrote:
I notice they are using Amazon services for the data. It is protected
however much those companies protect your data.
see fine print at end of
https://www.mylifeorganized.net/cloud.shtml
On Wed, Feb 12, 2020 at 11:36 PM Alexander Wicher <[email protected]> wrote:
Now... ist The question answered how mlo protects data@rest in the cloud?
.a
--
You received this message because you are subscribed to the Google Groups
"MyLifeOrganized" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/mylifeorganized/664c8dd1-efeb-4d1c-82de-b7b4e1d7ecb1%40googlegroups.com.
--
"It is not what I believe that will make-or-break; It is what I'm doing
about it." --Jefferson Smith
--
You received this message because you are subscribed to the Google Groups
"MyLifeOrganized" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/mylifeorganized/CAA1bVFkXiv2W4HswGOcNr%3Dw6o08MTDhJFVAM4kZi%3DdHDAz6-_g%40mail.gmail.com.
--
You received this message because you are subscribed to the Google Groups
"MyLifeOrganized" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/mylifeorganized/1705e34b730.27a6.e3899142e96de3f9352600768bcafaf9%40dwightarthur.us.
