Document Storage/Meeting Notes 2017-11-13 - Revision history

MarcPare: /* Future Venues */

2017-11-15T11:24:18Z

Future Venues

BobJonkman: /* Future Topics */ Change wording for Encryption

2017-11-15T09:44:21Z

Future Topics: Change wording for Encryption

BobJonkman: /* Encrypted File Storage */ Add FreeOTFE

2017-11-14T08:56:32Z

Encrypted File Storage: Add FreeOTFE

BobJonkman: Format headers

2017-11-14T08:54:40Z

Format headers

BobJonkman: More content

2017-11-14T08:51:46Z

BobJonkman: Link

2017-11-14T07:13:44Z

Link

BobJonkman: Added Meeting Notes

2017-11-14T07:11:48Z

Added Meeting Notes

BobJonkman: /* Future Topics = */ Fix heading

2017-11-13T07:16:36Z

Future Topics =: Fix heading

BobJonkman: Add discussion topics

2017-11-13T07:03:11Z

Add discussion topics

BobJonkman: Add resource links

2017-09-03T18:08:03Z

Add resource links

New page

{{:Document Storage}}

==== Resources ====
[http://www.techsoupcanada.ca/en/directory/346 File Storage | TechSoup Canada]

[https://nextcloud.com/ Nextcloud] or [https://owncloud.org/ ownCloud]

==== Meeting Notes ====
===== Subtopic =====
* Point
* Point
** Sub-Point

===== Subtopic =====
* Point
* Point
** Sub-Point

[[Category:KWNPSA Meeting Notes]]

@@ Line 18: / Line 18: @@
 * We were contacted by Reg from [https://www.1kingnorth.ca/ One King North] {{map|url=https://osm.org/go/ZXnboydI--?m=}}, a coworking space
 ** Reg indicated that "Also it's complimentary, so you don't have to pay for using our space to hold meetups"
-** Marc followed up, was quoted £150 for using the space
+** Marc followed up with Reg and has yet to hear back from him
-*** Apparently, Reg was unclear in his communication
+*** Apparently, Reg was unclear in his communication, probability of having access to this venue space does not look promising
@@ Line 29: / Line 29: @@
 *** Bob's notes indicate there are also meeting room fees, insurance costs, and participants under 18 years old are not allowed.
 ** [https://www.descendantsbeer.com/ Descendants Beer & Beverage Co.] apparently has meeting facilities. Kirk will investigate. {{map|url=https://osm.org/go/ZXnwdGkY--?m=}}
 ==== Meeting Notes ====

@@ Line 139: / Line 139: @@
 ==== Future Topics ====
 * [[Document Management]]: There are specialized software tools to manage your documents, provide version control, allow staff to checkout documents for exclusive access, and to provide indexing and search tools. What do you use?
-* [[Encrypted File Systems]]: How do they work? Demonstration/Workshop on creating encrypted file containers.
+* [[Encryption]] How do encrypted file systems work? Demonstration/Workshop on creating encrypted file containers.
 * Microsoft Evening (do they still provide sponsorship? Marc will check with Eli)

@@ Line 85: / Line 85: @@
 ** eg. [[Wikipedia:LUKS|LUKS]]
 *** See [http://bob.jonkman.ca/blogs/2017/10/09/how-to-create-an-encrypted-drive-in-a-file-container/ How To Create an Encrypted Drive in a File Container] by Bob Jonkman
-** eg. [https://github.com/t-d-k/LibreCrypt LibreCrypt] provides OTFE (On-The-Fly-Encryption) for Windows that's LUKS compatible
+** eg. FreeOTFE (obsolete) or [https://github.com/t-d-k/LibreCrypt LibreCrypt] provides OTFE (On-The-Fly-Encryption) for Windows that's LUKS compatible
 * For any corporate encryption, Additional Decryption Keys are needed
 ** Any user-encrypted files or containers can be decrypted by the organization's ADK; ensures data is not lost when user forgets password or leaves the organization
@@ Line 96: / Line 96: @@
 ** Encrypted backups can become un-restorable with minor errors
 *** Bob recommends making unencrypted backups, then saving them in an encrypted container; even better to keep unencrypted backups physically secure
 ===== Sharing Files =====

@@ Line 73: / Line 73: @@
-* Encrypted cloud storage
+===== Encrypted File Storage =====
-** Use VPNs to keep remote sites within your own network
+* Use VPNs to keep remote sites within your own network
-** Encrypted tunnels, eg. Secure Shell ([[Wikipedia:SSHFS|sshfs]])
+* Encrypted tunnels, eg. Secure Shell ([[Wikipedia:SSHFS|sshfs]])
-** Encrypted file systems
+* Encrypted file systems
-*** eg. [https://nextcloud.com/ Nextcloud], [https://owncloud.org/ ownCloud]
+** eg. [https://nextcloud.com/ Nextcloud], [https://owncloud.org/ ownCloud]
-*** Must ensure that encrypted file system is not mounted on remote, unsecured server
+** Must ensure that encrypted file system is not mounted on remote, unsecured server
-** Encrypted containers
+* Encrypted containers
-*** eg. TrueCrypt (now obsolete, use [https://www.veracrypt.fr/en/Home.html VeraCrypt] instead)
+** eg. TrueCrypt (now obsolete, use [https://www.veracrypt.fr/en/Home.html VeraCrypt] instead)
-*** eg. [https://www.ciphershed.org/ CipherShed]
+** eg. [https://www.ciphershed.org/ CipherShed]
-**** TrueCrypt, VeraCrypt, CipherShed are all cross-platform (Windows, MacOS, GNU/Linux)
+*** TrueCrypt, VeraCrypt, CipherShed are all cross-platform (Windows, MacOS, GNU/Linux)
-*** eg. [[Wikipedia:LUKS|LUKS]]
+** eg. [[Wikipedia:LUKS|LUKS]]
-**** See [http://bob.jonkman.ca/blogs/2017/10/09/how-to-create-an-encrypted-drive-in-a-file-container/ How To Create an Encrypted Drive in a File Container] by Bob Jonkman
+*** See [http://bob.jonkman.ca/blogs/2017/10/09/how-to-create-an-encrypted-drive-in-a-file-container/ How To Create an Encrypted Drive in a File Container] by Bob Jonkman
-*** eg. [https://github.com/t-d-k/LibreCrypt LibreCrypt] provides OTFE (On-The-Fly-Encryption) for Windows that's LUKS compatible
+** eg. [https://github.com/t-d-k/LibreCrypt LibreCrypt] provides OTFE (On-The-Fly-Encryption) for Windows that's LUKS compatible
-** For any corporate encryption, Additional Decryption Keys are needed
+* For any corporate encryption, Additional Decryption Keys are needed
-*** Any user-encrypted files or containers can be decrypted by the organization's ADK; ensures data is not lost when user forgets password or leaves the organization
+** Any user-encrypted files or containers can be decrypted by the organization's ADK; ensures data is not lost when user forgets password or leaves the organization
-** Office 365 encryption
+* Office 365 encryption
-*** The culture for Microsoft products is less concerned with encryption (poor adoption of encrypted technologies?)
+** The culture for Microsoft products is less concerned with encryption (poor adoption of encrypted technologies?)
@@ Line 98: / Line 98: @@
-* Sharing Files
+===== Sharing Files =====
-** File permissions
+* File permissions
-*** Staff doesn't know how to use filesystem permissions, makes all files globally read/writeable
+** Staff doesn't know how to use filesystem permissions, makes all files globally read/writeable
-** Use a Document Management System to assign authorization to documents
+* Use a Document Management System to assign authorization to documents
-*** Access control with a DMS can be more finely tuned
+** Access control with a DMS can be more finely tuned
-*** DMS also provides benefits such as metadata and search/indexing
+** DMS also provides benefits such as metadata and search/indexing
-*** but it needs the skills of a librarian to properly catalogue documents
+** but it needs the skills of a librarian to properly catalogue documents
-*** and a DMS adds another layer of abstraction; more work for the SysAdmin, more to go wrong
+** and a DMS adds another layer of abstraction; more work for the SysAdmin, more to go wrong
-** Physical file systems (file cabinets, folders) were treated better by staff than digital file systems
+* Physical file systems (file cabinets, folders) were treated better by staff than digital file systems
-** Using Roaming Profiles for shared file access
+* Using Roaming Profiles for shared file access
-*** SysAdmin can force desktop computers to put "My Documents", "My Pictures" &c. on the server for shared and secure storage
+** SysAdmin can force desktop computers to put "My Documents", "My Pictures" &c. on the server for shared and secure storage
-**** Doesn't work for Windows' "My Desktop"; that folder appears to have special privileges, but we don't know how
+*** Doesn't work for Windows' "My Desktop"; that folder appears to have special privileges, but we don't know how
-**** Can "My Desktop" or "My Documents" be made read-only to force staff to use server storage? Doubtful
+*** Can "My Desktop" or "My Documents" be made read-only to force staff to use server storage? Doubtful
-*** Thin clients don't store data locally
+** Thin clients don't store data locally
-*** Use the Browser Local Storage? (please, no)
+** Use the Browser Local Storage? (please, no)
-*** "Libraries" feature in Windows can combine several folders (from different sources) into one
+** "Libraries" feature in Windows can combine several folders (from different sources) into one
-** Commercial applications for managing roaming profiles: Micro Focus ZENworks (formerly NAL, Novell Application Launcer); Intel LANdesk Manager, Computer Associates
+* Commercial applications for managing roaming profiles: Micro Focus ZENworks (formerly NAL, Novell Application Launcer); Intel LANdesk Manager, Computer Associates
-** Staff gets easily confused with shared filesystems
+* Staff gets easily confused with shared filesystems
-*** Folder tree changes, filename and foldername changes
+** Folder tree changes, filename and foldername changes
-* Storing Binary Files
+===== Storing Binary Files =====
-** Music Files, photos, video, CAD drawings, &c.
+* Music Files, photos, video, CAD drawings, &c.
-** Using Google Drive is not efficient for binary files, better to keep on local (non-cloud) storage
+* Using Google Drive is not efficient for binary files, better to keep on local (non-cloud) storage
 ** Post-production for music can't be done online
-** Cloud services need cloud-based client software to manage binary files
+* Cloud services need cloud-based client software to manage binary files
-*** Google Docs does not have a good music client to manage music file for an orchestra
+** Google Docs does not have a good music client to manage music file for an orchestra
-*** But Google Docs has good photo apps
+** But Google Docs has good photo apps
-* USB Sticks or Thumbdrives
+===== USB Sticks or Thumbdrives =====
-** How to prevent the use of USB drives?
+* How to prevent the use of USB drives?
-*** Physically hotglue the USB ports on organizations' computers
+** Physically hotglue the USB ports on organizations' computers
-*** Pop up a warning to the user when USB device is inserted
+** Pop up a warning to the user when USB device is inserted
-*** Lock the computer when a USB device is inserted
+** Lock the computer when a USB device is inserted
-** Worried about "Parking Lot USBs" (USB drives found in the parking lot, may contain malicious payload)
+* Worried about "Parking Lot USBs" (USB drives found in the parking lot, may contain malicious payload)
-*** Physical attacks through high-voltage discharges (see https://usbkill.com/ )
+** Physical attacks through high-voltage discharges (see https://usbkill.com/ )
-*** The only protection against physical attacks is physical protection
+** The only protection against physical attacks is physical protection

@@ Line 39: / Line 39: @@
 ** Microsoft will move documents to Canadian servers on request
 *** but this may take up to seven years
@@ Line 49: / Line 64: @@
-* [https://gsuite.google.com/features/ Google G Suite] (Google Docs)
+* Security risks
 ==== Future Topics ====
 * [[Document Management]]: There are specialized software tools to manage your documents, provide version control, allow staff to checkout documents for exclusive access, and to provide indexing and search tools. What do you use?
 [[Category:KWNPSA Meeting Notes]]

@@ Line 34: / Line 34: @@
 ===== Cloud Storage =====
-* Microsoft Office 365
+* [https://www.office.com/ Microsoft Office 365]
 ** Lots of KWNPSA members use Office 365
 ** Default installation moves documents to US servers

← Older revision		Revision as of 07:16, 13 November 2017
Line 22:		Line 22:


−	==== Future Topics =====	+	==== Future Topics ====
	* [[Document Management]]: There are specialized software tools to manage your documents, provide version control, allow staff to checkout documents for exclusive access, and to provide indexing and search tools. What do you use?		* [[Document Management]]: There are specialized software tools to manage your documents, provide version control, allow staff to checkout documents for exclusive access, and to provide indexing and search tools. What do you use?

@@ Line 2: / Line 2: @@
 ==== Resources ====
-[http://www.techsoupcanada.ca/en/directory/346 File Storage | TechSoup Canada]
+[https://www.techsoupcanada.ca/en/directory/419 File Storage | TechSoup Canada]
 [https://nextcloud.com/ Nextcloud] or [https://owncloud.org/ ownCloud]
 ==== Meeting Notes ====
-===== Subtopic =====
+===== Local Storage =====
 * Point
 * Point
 ** Sub-Point
-===== Subtopic =====
+===== Cloud Storage =====
 * Point
 * Point
 ** Sub-Point
 [[Category:KWNPSA Meeting Notes]]