Microsoft Announces OneDrive Personal Vault For Sensitive Files (venturebeat.com) 69
Microsoft today announced OneDrive Personal Vault, a new security layer for protecting sensitive and important files. The feature is rolling out "soon" to the web, Android, iOS, and Windows 10 in Australia, New Zealand, and Canada. From a report: Furthermore, the company is increasing OneDrive's cheapest storage plan from 50GB to 100GB at no additional cost. Office 365 subscribers are also getting new storage options. Personal Vault is a protected area in OneDrive that you can only access with the Microsoft Authenticator app or a second step of identity verification (fingerprint, face, PIN, or a code sent to you via email or SMS). Microsoft envisions OneDrive users saving travel, identification, vehicle, home, and insurance documents in their Personal Vault. You can use the OneDrive mobile app to scan documents, take pictures, or shoot video directly into your Personal Vault, keeping such items out of less secure areas like your camera roll.
Sure, MS (Score:5, Insightful)
Re: (Score:1)
Really,
Private
Secure
Cloud
Three guesses which one does not belong.
Re: (Score:2)
If you retain control of the encryption keys, which is not the case here, you can have private secure cloud.
Re: (Score:1)
Encryption requires faith. If it's not on the network, it's not harshing my mellow.
Re: (Score:2)
If you retain control of the encryption keys, which is not the case here, you can have private secure cloud.
I have some beachfront property in Kansas to sell you, or if you don't like that, an investment opportunity that will earn you 150 percent return per month.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
I realize we're reading a third-party article, which in itself potentially introduces a layer of blurriness or even misinterpretation. However the article doesn't say anything about encryption prior to transport. It doesn't include any proclamation from Microsoft stating the company won't have access to your files on their servers. And, even though it mentions the local copy will be on a "bitlocker-encrypted area of your local hard drive", that doesn't mean the bitlocker keys are only stored locally on your
Re: (Score:1)
Re: (Score:2)
If this additional layer adds encryption onto your files, it sounds like it will be immediately better than Google Drive and Dropbox, both of which (to the best of my knowledge) do not encrypt your data - I believe it's encrypted at rest on their side, but it's totally visible to them.
This /could/ work something like SpiderOak - which encrypts client-side before uploading. But it might just be an additional 2FA step before you can access certain files on the web/client - which probably gives a nice comforta
Re: (Score:2)
Pretty much my first, second and third thought and my final verdict. MS is doubly untrustworthy: First, they have zero honor and will try to look at everything. And second, they have proven gross incompetence in designing and implementing security.
Re: (Score:2)
Sharing is caring. /s ;)
It should literally be illegal... (Score:1)
It should literally be illegal to make these bullshit claims about security and privacy that simply have no connection whatsoever with reality. The masses out there DO NOT have the ability to make ANY judgement as to whether it's sensible/true or not. Why does this world keep allowing every form of evil to go on and grow even more powerful, while at the same time holding back and harassing and killing any trace of goodness?
files will be scanned for marketing needs (Score:2)
files will be scanned for marketing needs
Re: (Score:1)
Re: (Score:1)
Why does this world keep allowing every form of evil to go on and grow even more powerful...
Because it's convenient and profitable. What are you looking for?
Users already thought they were getting that (Score:2)
Three Files (Score:2)
If you are using OneDrive’s free or standalone plan, Personal Vault only lets you “store up to three files,”
I guess if I can store a VHD there it might be useful...
Are people really that retarded? (Score:5, Insightful)
Cloud = internet = public
When someone offers you a secure cloud solution, they might as well offer you a secure camping tent. The only way to store files securely on the internet is to encrypt them yourself before you upload them.
Re: (Score:1)
Re: (Score:2)
It is easy to verify their claims of security and secrecy: just upload some child pornography to it; if the police comes to your door, it is not secure.
the title says it all (Score:3)
it's like they're daring us to make fun of them
Have they solved the big problems yet? (Score:2)
OneDrive still likes to use 100% CPU on one core. And its priority is set too high: changes it a file are blocked when it's syncing, which can be really irritating. OneDrive should start syncing after I'm done with a file, not claim higher priority than me.
You keep your pr0n there! (Score:2)
Google pay attention (Score:1)
Mega.nz (Score:2)
What is the difference?
Why of course (Score:2)
Re: (Score:2)
Keeping a copy of your passport and ID somewhere on the internet can be very useful, if you're the type of person who uses a passport. Having a copy can greatly expedite getting a replacement if yours happens to be lost or stolen. And keeping a paper copy isn't much help if your whole bag is stolen. Instead, when you need a copy, just go to the local internet cafe and print one out.
I store mine as an encrypted PDF.
Re: (Score:2)
Both of those are physical things that can be lost or stolen. The phone, for one, is almost more likely to be stolen than the passport. And it's generally harder to print something out from a phone than from a terminal at an internet cafe, and even if you're especially good at printing from your phone, you still need the printer, hence you still need to go to the internet cafe. There's also the question of whether your phone supports encrypted PDFs (you do want your passport info to be secure, don't you?).
Microsoft today announced OneDrive Personal Vault (Score:2)
Re: (Score:2)
maybe this will be the safest place to store all those naughty pictures that you should not send from your phone! Boob shots, dick picts and other things that you want to send when your drunk in the pub or leaving the strip club???
Probably, as long you just have them and don't send them. If you send them, you have to trust the recipient not to share - and also that the recipient follows good security practices.
The most important thing you can do to avoid leaks with you as the source would be to enable Multi factor authentication [wikipedia.org], in addition to using a good password [1password.com]. Avoid using SMS as the 2FA or giving real answers to security questions. This will make getting into your account quite a bit harder, and your personal nudes should be
Sure saves time (Score:2)
Now hackers, and the government don't need to waste time decoding your cat videos and go directly to the important stuff.
Now if they will say post a bond against this ever being hacked, maybe that would get interesting.
Storing sensitive data with MS? (Score:2)
Saves you the effort to publish them yourself. If anything, I'd store the shit there that I want to "leak".
Sounds like the equivalent.... (Score:1)
...of transferring your life's savings to your drug-addict cousin for safe keeping.