Comments on: Help – Keeping private information private.

By: Jim

Jim — Thu, 26 Jan 2006 17:50:59 +0000

Sorry michael, let me try this editing again…hey, it’s all your fault for screwing it up the first time…

By: Cat post - Think you know everything? - Jim Boykin’s Internet Marketing Blog

Thu, 26 Jan 2006 17:46:45 +0000

[...] oh…and I’m still waiting for more responses to my post on "Help – Keeping private information private." document.write(“Add to Del.icio.us”) | Digg it | Add to Slashdot | Add to Y! [...]

By: Nick Wilsdon

Nick Wilsdon — Thu, 26 Jan 2006 16:23:00 +0000

OK OK if you’re going to start pushing us into commenting Jim

I’ve always been fairly paranoid about this kind of thing and found a few tools/approaches useful. Most server admins know about Personal Vault – it’s a great little app at $15 that you can pile your passwords/usernames into. Well worth the price. For encrypting documents on your server or pc then I would also recommend buying the Kryptel suite

The problem with Kryptel is that you have to keep encrypting/decrypting – although it is just a right-mouse click action. It’s not suitable for files that will have more than one person accessing them at a time.

We’ve got a fair few people here now so we’ve moved to a local setup of MS Server, domain based access and permissions on folders (server holds the Outlook .pst files). I’m sure we could have done this with *nix/samba but sometimes you have to delegate

By: Michael Teper

Michael Teper — Wed, 25 Jan 2006 23:02:59 +0000

You did a sloppy job editing me, see first sentense.

But since you’re not above deleting and this comment is heading for the can, I’ll add this here: I wont claim to be a security expert but I have a fair bit of quality experience building high profile web sites. If you want to chat about web security and various options, give me a holler.

By: Michael Teper

Michael Teper — Wed, 25 Jan 2006 22:39:22 +0000

The more you have (in terms of budget), the more you can spend on securing data. At the very least, unless you are sure you have pretty high class infrastructure, you should avoid storing anything sensitive. When it comes to user passwords, for example, you can’t avoid storing them, but you can use one-way encryption with salt so that all you can do is compare against a supplied password, but you can’t retrieve the original. And so on…

By: Jim

Jim — Wed, 25 Jan 2006 19:30:59 +0000

Michael,
I don’t know…what’s the options?

By: Michael Teper

Michael Teper — Wed, 25 Jan 2006 19:25:48 +0000

What’s the budget?

By: Stephen Vardy

Stephen Vardy — Wed, 25 Jan 2006 18:59:41 +0000

I am very interested in the responses too.

We use Eudora and have a filter set on all out goings to forward a copy to a gmail account.
Our host server sends a copy of all incomings to the same gmail too.

Gives us a very portable complete back-up elsewhere which we can also read on the road.