UncleJoe
Well-known member
No offense, but the fact that you are using this on the job - using client screen captures is a little scary.
The practice is frightening, simply based on the fact that the IT industry doesn't have anything to really provide in lieu of OneNote, that can do the same thing.
It's comparable to hearing a doctor tell me that their PHI is located in their consumer grade Dropbox. Yikes!
You're a seasoned professional, so you know what you can and can't save offsite. HIPAA and PCI compliance issues could abound in someone less cognizant, as I'm sure you could imagine.
Clever? Yes. Scary, yep, just a little.
Jason
Jason I share your concerns and appreciate the input. I encrypt onenote and store the data on a private encrypted cloud, owned and controlled only by me, accessible only via an encrypted VPN, not a Microsoft One Drive. The level of encryption I use is the strongest available.
Is any data really safe??? Really. I am confident that my data is as safe as is practical. My daily work laptop is encrypted and can not be booted without a password to encrypt it. You can not boot to the bios without a password and you can not boot to a usb drive and requires the laptop requires fingerprint authentication. All of this can be hacked and are really just speed bumps for a good hacker. Should a hacker gain physical access to my hard drive he still has to deal with the encryption and that much more difficult. Decrypting a hard drive is something that even good hackers struggle with. I do not encrypt my drives with Bit Locker or some lite weight encryption tool. I use an industrial strength encryption tool.
I use screen captures for network documentation because one picture is worth a thousand words. I also believe that in dealing with IT support staff pictures are better than paragraphs. A screen capture of the configuration for a pair of ASA 5520's configured for policy based routing fail-over is more concise and easier for a lower level tech to understand than the 5 paragraphs it takes to explain it. Of course I can and do give the client the running config but that is greek to many IT staffers and with ASDM they get lost in the massive GUI interface but given a few pictures they can get and understanding of what was done.
The only safe data is that data which is not connected to the internet and the pc is locked in a vault and even then if someone wants it they can get it.
You are quite correct that if someone were working on very sensitive data and using OneNote and the Microsoft cloud to store and share the notebooks that would be a security risk. As someone who taught Cisco Security for 5 years I feel as comfortable as one can get with my level of security.
Please don't think I was offended by your comment. I just wanted to clarify. My comment for people using OneNote was not detailed on security because this is a garage forum not an IT forum. One Note is also great in the garage because you can have a notebook for each project and come back to it years later and see the photo or notes of why you did what you did.