Mendota
Downloads: 0
Posts: 3
Smile Score: -3 
About Me
I am a Free member
Visit Stats
Last Visit: 4 years ago
Member Since: 05 Feb 2008
Profile Views: 97
I am a Free member Visit Stats
Last Visit: 4 years ago
Member Since: 05 Feb 2008
Profile Views: 97
Mendota's Posts
Average Rating from Mendota:
Copyright © 2012 MacUpdate LLC
- -
-2
Yep
This software claims to make important documents such as financial documents or medical records "more accessible." Unfortunately, this is true in more ways that the developers probably had in mind. The mini-images that Yep creates for your PDF files are all stored in the open in an unencrypted Library folder. How convenient for anyone who gains unintended access to your computer!
There are multiple ways the developers could address this problem, such as incorporating password protection to the cache folder, or allowing the user to setup a cache folder within an encrypted vault to pertain to the files within that vault.
I emailed the developers twice and never received a reply.
So while this is a nice program for browsing PDFs of articles, it seems like a poor choice for handling sensitive personal files. Eagle Filer or Records Master might be better in that respect, although they don't have quite as slick previewing and tagging, yet.
-1
-3
So here's a case scenario. I have a financial document stored as a PDF for a short interval. Yep caches the document. I then later delete (let's even say secure delete/shred) the financial document pdf.
As far as I, the naive user, know, it's all good.. But as I just tested myself, Yep does not delete the corresponding cache file (unless it happens with a time delay i haven't hit yet). So in reality, my sensitive info is still in the open. Now most users probably don't know or care about the cache file, but that's the whole point. They don't realize they are potentially at risk.
Safari saves URLs but not the actual content of PDF images, if it would save say "http://myonlinebank.com" but not your actual bank statement, account #, etc. There's a world of difference.
So my original question stands- would it be feasible to either offer the option to encrypt the cache file or to specify a separate location of the user's choice, such as within an encrypted vault?
Thanks.