[No Thirst Software] Re: Password protected documents are insecure

2009-06-15 Thread Mike

Thanks!
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups No 
Thirst Software User Forum group.
To post to this group, send email to no-thirst-software@googlegroups.com
To unsubscribe from this group, send email to 
no-thirst-software+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/no-thirst-software?hl=en
-~--~~~~--~~--~--~---



[No Thirst Software] Re: Password protected documents are insecure

2009-06-15 Thread Lance

On Jun 13, 1:25 am, David david.k@gmail.com wrote:
 I'd rather Mr. Hoctor concentrate on functionality and I'll just
 enable FileVault if I want the level of security for which I think you
 are asking.  Or TrueCrypt/PGP if I'm more serious.  If I misunderstand
 your point, I apologize.


I agree, there are already industry-standard solutions for encrypting
important data that people can use if they desire. Implementing this
sort of functionality in MoneyWell would be redundant and likely
inferior IMO. I'd rather Kevin spend his time working on features that
don't have workarounds/alternatives.

The request for clarifying the add password panel isn't a bad idea,
though. Of course you'll probably find that most applications that
offer password protection implement a similar scheme. I've seen
quite a few people that though blacking out all the cells in their
Excel document and applying a worksheet lock made it secure :)

-Lance


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups No 
Thirst Software User Forum group.
To post to this group, send email to no-thirst-software@googlegroups.com
To unsubscribe from this group, send email to 
no-thirst-software+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/no-thirst-software?hl=en
-~--~~~~--~~--~--~---



[No Thirst Software] Re: Password protected documents are insecure

2009-06-14 Thread Mike

I see two issues here:

1) false sense of security. I'd assume if I protect the file with a
password the data is secured, which is not the case. So please make it
clear (by a prompt and within the help/faq) that the password does not
encrypt the data.

2) sharing files via the Web - i.e. I might wanna put my file on an
iDisk, which (unfortunately) does not encrypt while syncing but
because of #1 I might assume my data is encrypted and safe, which is
not the case.

Mike
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups No 
Thirst Software User Forum group.
To post to this group, send email to no-thirst-software@googlegroups.com
To unsubscribe from this group, send email to 
no-thirst-software+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/no-thirst-software?hl=en
-~--~~~~--~~--~--~---



[No Thirst Software] Re: Password protected documents are insecure

2009-06-14 Thread Kevin Hoctor

On Jun 14, 2009, at 4:52 AM, Mike wrote:

 I see two issues here:

 1) false sense of security. I'd assume if I protect the file with a
 password the data is secured, which is not the case. So please make it
 clear (by a prompt and within the help/faq) that the password does not
 encrypt the data.

Mike,

Sure, I'll make sure the Assign Password panel is more explicit about  
this in future releases.

 2) sharing files via the Web - i.e. I might wanna put my file on an
 iDisk, which (unfortunately) does not encrypt while syncing but
 because of #1 I might assume my data is encrypted and safe, which is
 not the case.


Understood. If I can find a way to encrypt the database without  
affecting performance significantly, I will.

Peace,

Kevin Hoctor
ke...@nothirst.com
No Thirst Software LLC
http://nothirst.com
http://kevinhoctor.blogspot.com


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups No 
Thirst Software User Forum group.
To post to this group, send email to no-thirst-software@googlegroups.com
To unsubscribe from this group, send email to 
no-thirst-software+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/no-thirst-software?hl=en
-~--~~~~--~~--~--~---



[No Thirst Software] Re: Password protected documents are insecure

2009-06-11 Thread nihonjinrxs

I believe there is a more pressing issue here, which is that you're
putting your financial information into this software and there is no
mention of security, encryption, or password protection of any kind on
the website.  Bank accounts, credit cards, etc. account information is
going to be in these files.  Don't you think it's a good idea for that
data to be protected?  This program is a good idea, but I'm not
willing to put that data at risk, so I won't use it -- and I certainly
won't pay for it -- until there's some protection built in.

- Ryan

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups No 
Thirst Software User Forum group.
To post to this group, send email to no-thirst-software@googlegroups.com
To unsubscribe from this group, send email to 
no-thirst-software+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/no-thirst-software?hl=en
-~--~~~~--~~--~--~---



[No Thirst Software] Re: Password protected documents are insecure

2009-06-11 Thread Kevin Hoctor

On Jun 11, 2009, at 5:19 PM, nihonjinrxs wrote:

 I believe there is a more pressing issue here, which is that you're
 putting your financial information into this software and there is no
 mention of security, encryption, or password protection of any kind on
 the website.  Bank accounts, credit cards, etc. account information is
 going to be in these files.  Don't you think it's a good idea for that
 data to be protected?  This program is a good idea, but I'm not
 willing to put that data at risk, so I won't use it -- and I certainly
 won't pay for it -- until there's some protection built in.


Hi Ryan,

Your data is on your local computer. You can password protect and even  
use encrypted volumes if you'd like but encrypting a database causes a  
performance hit and isn't natively supported in Core Data at this time.

I am a bit surprised that this is an issue. Unless your computer is  
physically accessed by someone else, your data should be very safe.  
Help me understand why you feel the need to encrypt individual local  
data files.

Peace,

Kevin Hoctor
ke...@nothirst.com
No Thirst Software LLC
http://nothirst.com
http://kevinhoctor.blogspot.com


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups No 
Thirst Software User Forum group.
To post to this group, send email to no-thirst-software@googlegroups.com
To unsubscribe from this group, send email to 
no-thirst-software+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/no-thirst-software?hl=en
-~--~~~~--~~--~--~---



[No Thirst Software] Re: Password protected documents are insecure

2009-05-29 Thread Lance

On May 29, 3:57 am, Mike m...@mbaierl.com wrote:
 I just noticed that the MoneyWell documents can be password protected
 - but they are not encrypted at all. So in the end the data can still
 be read by anyone.


If you want your MoneyWell file to be truly encrypted you could create
a encrypted disk image in Mac OSX and move your MoneyWell file there.

-Lance
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups No 
Thirst Software User Forum group.
To post to this group, send email to no-thirst-software@googlegroups.com
To unsubscribe from this group, send email to 
no-thirst-software+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/no-thirst-software?hl=en
-~--~~~~--~~--~--~---