Results 1 to 9 of 9

Thread: Best application to secure information and make remotely available?

  1. #1

    Default Best application to secure information and make remotely available?

    I want to have some respository where I can store passwords, account info and other information and have it be remotely available (I'll host it on my own server). I have the following restrictions:

    1. Needs to have remote-connection capability (so I can use it from a laptop externally, desktops internally, etc)

    2. Only needs to work with linux but definitely from openSUSE (at least as client)

    3. Remote connection must be secure and not unlock info on server and send unencrypted to remote

    4. Open Source only

    5. Must be capable of working both in GUI and non-GUI environment

    6. Want to store more info than just passwords

    Are there good solutions?

  2. #2
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Best application to secure information and make remotely available?

    On 2013-04-30 22:26, 6tr6tr wrote:

    > Are there good solutions?


    Do ssh into server, then open text file previously encripted with PGP.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.1 x86_64 "Asparagus" at Telcontar)

  3. #3

    Default Re: Best application to secure information and make remotely available?

    Quote Originally Posted by robin_listas View Post
    On 2013-04-30 22:26, 6tr6tr wrote:

    > Are there good solutions?


    Do ssh into server, then open text file previously encripted with PGP.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.1 x86_64 "Asparagus" at Telcontar)
    Thanks. How do I encrypt/decrypt the text file? Is this built in to KDE/openSUSE? To linux?

  4. #4

    Default Re: Best application to secure information and make remotely available?

    Quote Originally Posted by robin_listas View Post
    On 2013-04-30 22:26, 6tr6tr wrote:

    > Are there good solutions?


    Do ssh into server, then open text file previously encripted with PGP.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.1 x86_64 "Asparagus" at Telcontar)
    I'm not sure this is a good solution. If I want to edit anything in the file (from a remote computer), I'd have download it, decrypt, edit, re-encrypt and replace. That's not the best solution.

  5. #5
    Join Date
    Aug 2010
    Location
    Chicago suburbs
    Posts
    12,639
    Blog Entries
    3

    Default Re: Best application to secure information and make remotely available?

    Quote Originally Posted by 6tr6tr View Post
    I want to have some respository where I can store passwords, account info and other information and have it be remotely available (I'll host it on my own server).
    Setup an ecryptfs private directory.

    Using ecryptfs with opensuse 12.3
    openSUSE Leap 15.1; KDE Plasma 5;
    testing Leap 15.2Alpha

  6. #6
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Best application to secure information and make remotely available?

    On 2013-05-01 00:26, 6tr6tr wrote:

    > I'm not sure this is a good solution. If I want to edit anything in the
    > file (from a remote computer), I'd have download it, decrypt, edit,
    > re-encrypt and replace. That's not the best solution.


    Not necessarily. You can use text based tools to work inside the ssh
    shell, without downloading any file. You can also use graphical tools,
    but these need more bandwidth.

    Kleopatra, for instance, is a nice KDE GUI can encrypt/decrypt files,
    handle keys, etc. I have never used it over a remote session, because
    normally it assumes you have an "agent" to cache passwords, something
    you wold have on a full session.

    Seahorse is the equivalent in Gnome. It handles the keys, but not
    encryption/decryption of files.


    I'm not saying that this is the easiest method; but I do say that it is
    the one with safer encryption.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.1 x86_64 "Asparagus" at Telcontar)

  7. #7
    Join Date
    Jun 2008
    Location
    Earth - Denmark
    Posts
    10,730

    Default Re: Best application to secure information and make remotely available?

    On 05/01/2013 12:26 AM, 6tr6tr wrote:
    > I'd have download it, decrypt, edit,
    > re-encrypt and replace. That's not the best solution.


    as convenience increases, security decreases--only you can decide how
    much security you want and therefore how much convenience you are
    willing to give up..

    another way to say that: so far, one can't have computing both easy
    _and_ secure at the same time.

    hasn't MS been proving that over and over (and over) since 1975?

    --
    dd

  8. #8

    Default Re: Best application to secure information and make remotely available?

    Quote Originally Posted by DenverD View Post
    On 05/01/2013 12:26 AM, 6tr6tr wrote:
    > I'd have download it, decrypt, edit,
    > re-encrypt and replace. That's not the best solution.


    as convenience increases, security decreases--only you can decide how
    much security you want and therefore how much convenience you are
    willing to give up..

    another way to say that: so far, one can't have computing both easy
    _and_ secure at the same time.

    hasn't MS been proving that over and over (and over) since 1975?

    --
    dd
    That's not the issue here. The inconvenience actually leaves a bigger risk for insecurity and errors/problems. Imagine:

    1. User on remote computer downloads "sometext.asc"
    2. User decrypts the text (which causes it to create a new "sometext" document)
    3. User changes the text and re-encrypts
    4. User accidentally uploads the decrypted version to the server (this is a risk)
    OR
    3. User accidentally re-encrypts with the wrong key, and after uploading has locked everyone else out of the document
    OR
    4. A race condition starts when users "A" and "B" have downloaded the document separately (at the same time), added new data to it separately and save it back to the server (one after the other, the second overwrites the first's changes)

    That's NOT a good security system.

  9. #9
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Best application to secure information and make remotely available?

    On 2013-05-01 22:06, 6tr6tr wrote:

    > That's not the issue here. The inconvenience actually leaves a bigger
    > risk for insecurity and errors/problems. Imagine:
    >
    > 1. User on remote computer downloads "sometext.asc"


    Download is not strictly necessary, you can work on the remote file
    directly. If you do, then the client machine must be secured.

    Then, I mentioned a GUI that automates part of the process, mistakes are
    not that easy, then.


    > 3. User accidentally re-encrypts with the wrong key, and after
    > uploading has locked everyone else out of the document


    For that he needs have several keys prepared.
    You may combine with a versioning system (cvs, svn) and thus protect
    about wrong changes.

    > OR
    > 4. A race condition starts when users "A" and "B" have downloaded the
    > document separately (at the same time), added new data to it separately
    > and save it back to the server (one after the other, the second
    > overwrites the first's changes)


    That's not something you asked for in your OP, you never said "two
    users" :-)

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.1 x86_64 "Asparagus" at Telcontar)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •