Recent posts

#91
Espionage 3 / Re: Confused about Espionage, ...
Last post by zsolt - February 14, 2017, 10:51:04 PM
3. I'm reffering to "Undercover says they won't work with FV on, and recommend Espionage. But the documentation for Espionage makes it seem very complicated, including the warning about 'knowing what you are doing.'" is this Undercover documentation or Espionage documentation? Share with me the section which is unclear.

4. With Espionage you cannot protect Files, just folders, so yes, all you want to protect has to be in a folder. However, I do not recommend to protect the "Main" folder, i.e. Documents, Pictures, Music, Movies etc....the folders which are directly under your home folder, as they have special permissions and the encryption might fail, I recommend protecting one or more subfolders of those folders.

5. Yes, you have to unlock the folder before launching mail, because we cannot intercept the application launch like we could in earlier versions of OS X, you can setup a folder action though, where unlocking the folder will launch Mail, it is a bit opposite approach, but it works well. But I'm not sure if you understood what I said before. Do you know which folders do you have to protect to protect Mail?

Remote session would definitely be better then this, as we will be writing for a long time, and at one point you will get frustrated as we will not make progress :-)

I'm usually available in afternoon/evening hours of GMT+1 time zone, mail me directly at taoeffect@macmesupport.com

Cheers
Zsolt
#92
Espionage 3 / Re: Confused about Espionage, ...
Last post by sawxray - February 14, 2017, 03:40:45 PM
Thank you for the detailed explanation. A few follow-on questions:

3. I am not sure what you are referring to.

4. If I have documents in the Documents folder, not in subfolders, can I encrypt them? In other words, does this mean that every document must be in a folder?

5. Sorry, I still don't understand. Are we saying that I have to unlock all Mail folders before I use Mail at any time?

I am OK with a remote session, but thought I would continue the conversation here, to help others who might be new like me.

Thanks!
#93
Espionage 3 / Re: Confused about Espionage, ...
Last post by zsolt - February 14, 2017, 10:16:54 AM
1. yes, filevault or Espionage, same thing, if something goes wrong, you loose, although, if you use Espionage you can do backups, the files will be protected on the backup disk too, so you can restore. Filevault is either all or nothing and to the best of my knowledge, the backup is unencrypted

2. protecting an application is protecting application's data. With Espionage 2 we were picking the right data for you, with Espionage 3 this is not possible any more so you have to pick it on your own. Which folders do you need to encrypt and how will that affect the application is all on you. I can give you some hints regarding Mail but again, this was not verified with every update of Mail or OS X. I will write a few more words at the end of this post

3. Can you share with me this documentation which seems to be very complicated?

4. If you want to protect your entire user folder then Espionage cannot do this, in Espionage you have to protect each folder separately, and these must be subfolders of default user folders (like Documents, Pictures, Movies etc.)

5. Regarding mail: as I said in my previous post, encrypting application data means that when you launch the application and the folder is locked, each application will handle this differently, trying to recover from this situation. If you launch Mail with folder locked, it will see that the mails are missing and will try to download them new from the defined internet accounts. The trouble is that it will succeed, because the internet account info is not stored within Mail, but within system preferences and those you cannot lock because OS X would not be able to function.
The Mail, however, has the option to move the mails locally, basically you remove them from the IMAP server and store them only locally. In this case, Mail cannot download them new, because they are not on the server any more, and locally they would be encrypted. So you can create a Mail rule, or do this by hand periodically, and move all confidential mails into local folder.

If you have further questions, I suggest that we make a remote session and I can explain you all in details.
#94
Espionage 3 / Re: Can't see contents of decr...
Last post by tatami - February 14, 2017, 07:13:42 AM
So the two folders I want to copy between are photography and archive. In the Finder I can see the contents of photography on my iMac. In the Finder, I can see the contents of archive on my MacBook. But if I log in to my MacBook Air from my iMac, I can see the folder photography but it appears to be empty. I'm logging into my MacBook as myself, i.e. registered user/owner not as guest. Thanks.
#95
Espionage 3 / Re: Can't see contents of decr...
Last post by zsolt - February 14, 2017, 06:55:06 AM
 Which folder is shared in that structure?  How do you connect,  as registered user or as guest
#96
Espionage 3 / Re: Can't see contents of decr...
Last post by tatami - February 14, 2017, 06:37:06 AM
Thanks, Zsolt. Both machines are running macOS 10.12.3.

On the iMac, the encrypted folder is called photography and the folder structure looks like this: /Users/philip/photography

On the MacBook, the encrypted folder is called archive and the folder structure looks like this: /Users/philip/archive

Does that give you the information you need?

Best wishes

Philip
#97
Espionage 3 / Re: Can't see contents of decr...
Last post by zsolt - February 14, 2017, 06:10:04 AM
The information put into the cloud is just an encrypted disk image, the data cannot be read in any way on the cloud server.

Give me the exact versions of the OS X on the two clients you use, and some folder structure example, so that I can try to reproduce it as you see it.

Rgds
Zsolt
#98
Espionage 3 / Re: Confused about Espionage, ...
Last post by sawxray - February 13, 2017, 11:00:58 PM
Thank you for the response. I have been trying to digest it, and I'm afraid I need more clarification. I will try to respond to each of the sections you described:

It doesn't make a difference if I encrypt with FileVault or Espionage. If either fails, I lose data, correct? I am assuming that is a very rare issue with either, so it is not an issue to help me differentiate between them.

Regarding application protection, I still don't understand the difference between encrypting your data, and encrypting an application, or an application's data. The data is either encrypted, or it isn't. For my use, I am not going to pick and choose which app to encrypt, I just want to encrypt my data.

If I encrypt all my data, Mail's data will be encrypted, correct? Is there something unique about Mail that prevents this?

The bigger issue is how to use this with Undercover. Undercover says they won't work with FV on, and recommend Espionage. But the documentation for Espionage makes it seem very complicated, including the warning about 'knowing what you are doing.'

I would like to encrypt my data. I would like to use Undercover to protect myself if my machine is stolen. How can I best achieve these goals? Do I need to scrap FileVault? And is Espionage a good replacement, or do I need to go folder by folder if I use Espionage.

Thanks in advance.
#99
Espionage 3 / Re: Can't see contents of decr...
Last post by tatami - February 13, 2017, 02:12:17 AM
Zsolt, thank you for getting back to me on this. No, I haven't upgraded either Mac to Sierra recently. I upgraded both soon after Sierra was released. Since then I've just been doing point updates as they're released.

By decrypting I do indeed mean unlocking the protected folders.

I'm afraid that synchronising via the cloud is not an option I want to pursue. The information in the Espionage folders is sensitive and I don't want to put it on anyone else's servers. Is there another workaround?

Best wishes

Philip
#100
Espionage 3 / Re: Can't see contents of decr...
Last post by zsolt - February 12, 2017, 10:56:01 PM
Hello, I just tested it and I do not even see the protected/mountpoint folder itself.
Did you upgrade one of the Macs to Sierra recently? Considering Sierra has problems with protected folders on external disk I would not be surprised that the same applies to the network shares.

I remember that we were testing a while ago Espionage handling protected folders on remote network shares and that it worked to some extent but not reliably.

By "decrypting" folders on both Mac, I suppose you mean "unlocking" the protected folder, correct?

If you have dropbox, or if you use iCloud drive (although I prefer the dropbox) you could synchronise automatically, would you be interested in that as a solution?

Rgds
Zsolt