Evernote Hacked

I got an email warning me to reset my Evernote password. My Evernote account was deactivated in November, 2011. Guess I should de-activate it some more :>)

Your password could have been stolen. If you are still using it on other accounts it would be wise to change it.

dobs108

I rely on Evernote for a lot of things.

I also received their e-mail this morning.

Unlike other companies who have been hacked recently, Evernote at least practiced good security with their passwords -- all passwords were salted and hashed, which makes breaking even one computationally *very* expensive, and because of the salting, the work that goes into breaking one can't be used in breaking another. This is an important part of making the process of breaking passwords computationally *very* expensive.

(This is in stark contrast to Sony, and others, who didn't even bother to encrypt passwords on some of the systems they had hacked, let alone use best practices such as salting and hashing.)

Yet Evernote issued a system-wide password reset as a precautionary measure.

Yes, someone got user names and e-mail addresses -- that's undoubtedly going to increase spam, and possibly be used for spear-phishing, but I don't feel that the passwords are at risk.

From all I've seen, Evernote acted promptly on this.

The fact that they were ABLE to quickly do a system-wide password reset lets you know they had plans in place for situations such as this; that's more good news as far as I'm concerned.

And yes, don't use the same password in multiple places on the Net.

I use a different password for every account, for that exact reason, that one might be hacked. I have a convoluted system for remembering the passwords and a backup system. I think I'm covered. Thanks for being concerned.

That's a good point. I guess I'll spend the morning making changes.

What is Evernote. I have a Nexus 7 on order and while looking for information on how to use it I came across someone saying to put Evernote on it.
What is this?
Thanks from an old dummy

I search a lot for a password wallet program - wanted something that did not store passwords online and was free -settled on "Phrozen Password Wallet": http://download.cnet.com/Phrozen-Password-Wallet/3000-18501_...

Seems to work well.

EverNote is a notepad app that allows you to write notes, make lists and do all sorts of stuff, on your computer, on your smartphone, on your spouse's smartphone and on your tablet. They are all linked together. So you can, for example, make a grocery list on your computer, and it will show up on your smartphone and your spouse's smartphone. As you check off your purchases, the items on your spouse's EverNote app get checked off. (You are using your data for this). Changes you make to your notes get changed on every device that accesses that EverNote account. While EverNote is highly rated and has a high number of users, I found it a bit too complex for me, and don't need to access notes from multiple devices. So I now use ColorNote on my smartphone. HTH

In one sense, Evernote is the antithesis of social media; it's a place for you to organize and keep stuff just for you.

Yes, you can share things -- but you have to take steps to share, and select who you share with, so not only is Evernote good for organizing things, it also supports group efforts.

I keep notebooks on the different projects I'm working on, adding and updating notes, sharing them between notebooks, gathering a bunch of material from one notebook and forming a new notebook just for that stuff.

Some of the Evernote add-ons are really useful. I like Skitch (both on the iPhone and iPad); I use it for annotating other documents, such as images and PDFs. (You can see some of those annotated images on my twitter feed; look for k6rtm)

Another big point of Evernote is that it isn't just an app, it's an ecosystem -- I do something on one device, my iPad for example, and the change automagically appears in Evernote on my iPhone and on my MacbookPro and MacPro desktop the next time I use Evernote.

Oh, it has some warts, but as you can probably tell, I like it.

You might find this interesting.

https://windowssecrets.com/langalist-plus/pros-and-cons-of-a...

I ran across the info about the theft on another web site, but they never did email me to reset my password. They do have my email, no idea why I didn't get told.

Evernote sounds like a great program. It sounds like somethin I would like.
Thanks for all your information.

Take a look at LastPass,KeePass, Password Safe.

http://en.wikipedia.org/wiki/LastPass

http://en.wikipedia.org/wiki/KeePass

http://en.wikipedia.org/wiki/Password_Safe

Perfect solutions? No, but worth investigating anyway IMHO.

I barely use it but did not get this email about the breach. Maybe they will send it later. Or mine was not affected.

AnyPass is also a good one.

http://www.anypassword.com/

CHANGE IT

But if your device fails or is stolen, your password wallet goes with it. Does it have provision to make backups of your password file? Storing your password database locally is more secure than storing it on a service, but only if your home intrusion protection is really good.

Using a cloud-based password database system exposes you to hackers getting into their server, but does have the advantage of automatic backups and automatic syncing your password changes between your systems. You just have to hope that their system/server security is really robust and - most likely - more robust than your own home system intrusion protection.

Is this program similar to OneNote? is it free?

Yes, a basic account is free. It's available for Mac, Windows, iOS, Android, Blackberry, Windows Phone, and WebOS devices. Really amazing. I can take notes and store/recall records from any device and within minutes it's available on any other device I own.

Even cooler is the ability to dictate using speech to text on my phone. Then later, sit down to a device with a real keyboard and pretty it up. Save it after editing and the file gets updated back to all my other devices.