undefined | Better HN

0 pointsJoshTriplett10y ago0 comments

> For most users, this protects them to a useful level. Most users don't think losing a password is a big deal and would be very upset to learn their data is lost because they forgot. That's an anti-feature.

"Would you like to store a backup for your drive encryption password on Microsoft OneDrive? If you choose not to do so, and you forget your password, all of your data will be lost. [Yes/No]"

And none of that warrants a ToS that says they can use that backup for anything other than helping you recover your data.

> Also, if they use OneDrive to back stuff up (like they should!), the security damage is already done as most juicy files will be unencrypted in MS's hosting and still subject to warrants.

Hence why client-side-encrypted backups are a good idea.

0 comments

6 comments · 1 top-level

mejari10y ago· 5 in thread

>"Would you like to store a backup for your drive encryption password on Microsoft OneDrive? If you choose not to do so, and you forget your password, all of your data will be lost. [Yes/No]"

You know when most people care about whether or not they can recover their data? It's not when someone asks them a Yes/No question, it's when they can't recover their data. And responding with "Well, remember 2 years ago when you clicked 'No'?" Doesn't really help.

PhantomGremlin10y ago

Would you like to store a backup

You're quite right in your response to the GP.

It's dangerous to ask Joe Sixpack a question like this and accept a simple y/n answer. When people are installing software they are rushing thru w/o thinking.

What the software could do is put something like this on the screen:

   DO NOT STORE A BACKUP OF MY PASSWORD

and force the user to opt-out by literally typing all those characters exactly like that:

   DO NOT STORE A BACKUP OF MY PASSWORD

At least that way it isn't an unthinking, rote response. Maybe also force them to type

   I UNDERSTAND ALL MY DATA WILL BE LOST

Anyway, that would probably only help about half of them. The other half won't care until, as you point out, they can't access their data.

simoncion10y ago

Then, don't make it a [Yes/No] question, make it an [Okay] with a barely noticeable "Change Advanced Settings" link; much like the dialog that the TFA complains about.

MBCook10y ago

Why show the non-prompt? The users who don't want it can turn it off later, as is the case now.

2 more replies

JoshTriplettOP10y ago

Which is a great reason why we should be seeking better authentication systems than memorizing random passwords. Or providing people with another means of backup; for instance, provide options to both "back up via print" and "back up to USB device", in both cases providing something you could then store in a secure location.

jeeva10y ago

Which the Bitlocker stuff already does, when you run it manually. I suspect not with devices that come pre-encrypted - Surfaces, etc.

I was going to say that the most likely thing folk have done is try to back up their key on the drive they encrypt - but last time I tried that due to not being on a network, I think the Bitlocker wizard refused to let me.

j / k navigate · click thread line to collapse