
Yep | Feb 6 2008 |
What if say you decide to encrypt a PDF document after Yep has cached it? Your document is now "secure" but the original, unprotected cache file doesn't update and is still accessible in the cache folder. I don't think this is a trivial issue because the program as billed as a solution for medical, financial documents, etc. that you presumably want to keep private. I agree the search capabilities are awesome, the interface is innovative, and the tags are great. But I wouldn't use it for it's stated purpose at this time. For browsing regular PDFs, sure, why not. (Version 1.7.3) | |
| [ Reply ] | |

Yep | Feb 6 2008 |
MENDOTA Hi Tom. Thanks for the reply. So here's a case scenario. I have a financial document stored as a PDF for a short interval. Yep caches the document. I then later delete (let's even say secure delete/shred) the financial document pdf. As far as I, the naive user, know, it's all good.. But as I just tested myself, Yep does not delete the corresponding cache file (unless it happens with a time delay i haven't hit yet). So in reality, my sensitive info is still in the open. Now most users probably don't know or care about the cache file, but that's the whole point. They don't realize they are potentially at risk. Safari saves URLs but not the actual content of PDF images, if it would save say "http://myonlinebank.com" but not your actual bank statement, account #, etc. There's a world of difference. So my original question stands- would it be feasible to either offer the option to encrypt the cache file or to specify a separate location of the user's choice, such as within an encrypted vault? | |
| [ Reply ] | |

Yep | Feb 2 2008 |
MENDOTA Yep, This won't keep your private files private. This software claims to make important documents such as financial documents or medical records "more accessible." Unfortunately, this is true in more ways that the developers probably had in mind. The mini-images that Yep creates for your PDF files are all stored in the open in an unencrypted Library folder. How convenient for anyone who gains unintended access to your computer! There are multiple ways the developers could address this problem, such as incorporating password protection to the cache folder, or allowing the user to setup a cache folder within an encrypted vault to pertain to the files within that vault. I emailed the developers twice and never received a reply. So while this is a nice program for browsing PDFs of articles, it seems like a poor choice for handling sensitive personal files. Eagle Filer or Records Master might be better in that respect, although they don't have quite as slick previewing and tagging, yet. (Version 1.7.2) | |
| [ 3 Replies - Reply ] | |
Replies:

Yep | Feb 5 2008 |
TOMANDERSEN Tom, The developer here. The thumbnails of the PDFs are stored in the same volume as the PDFs themselves, so if you can see the thumbnails, you can also see the PDFs. This is not really a security issue any more than the fact that all of your email is also stored in your home account, etc. For instance Safari has a cache of all internet sites that you have recently visited in that same folder. If anyone has more questions on this, please contact us via the contact page on our web site. (Version 1.7.3) | |

Yep | Feb 6 2008 |
MENDOTA Hi Tom. Thanks for the reply. So here's a case scenario. I have a financial document stored as a PDF for a short interval. Yep caches the document. I then later delete (let's even say secure delete/shred) the financial document pdf. As far as I, the naive user, know, it's all good.. But as I just tested myself, Yep does not delete the corresponding cache file (unless it happens with a time delay i haven't hit yet). So in reality, my sensitive info is still in the open. Now most users probably don't know or care about the cache file, but that's the whole point. They don't realize they are potentially at risk. Safari saves URLs but not the actual content of PDF images, if it would save say "http://myonlinebank.com" but not your actual bank statement, account #, etc. There's a world of difference. So my original question stands- would it be feasible to either offer the option to encrypt the cache file or to specify a separate location of the user's choice, such as within an encrypted vault? | |

Yep | Feb 6 2008 |
TEXLOGIC "The mini-images that Yep creates for your PDF files are all stored in the open in an unencrypted Library folder. How convenient for anyone who gains unintended access to your computer!" Unintended access?! Good grief, don't you know enough about your own computer to keep that from happening? Securing your own computer is YOUR job not the job of application developers. (Version 1.7.3) | |
|