I think this is VERY important. Passwords are a MUST for truly sharing anything privately. A link can be shared with others against your wishes and damage done before you can delete the file. This is a SERIOUS privacy and security issue.
Another - WHY is the SSL (https) not the DEFAULT log-in? Having to click to "Secure Log-In" shows security is not taken seriously. The real question is not just why isn't SSL the default --- but why have an INSECURE (http) option AT ALL??
Categories: Pogoplug Classic
Can I do this with the Pogoplug? I feel safer having family login using a password versus just sending a link, but I see no reference to this anywhere...
View unverified member's comment - posted by pensfan
I'd like to add my support for getting security enhancements for shared items.
The link that gets sent to the people on the shared list has no authentication.
Some Pogoplug owners may assume that only the people whose email addresses are listed in the "People this folder is shared with" are the only people who will have access to the files. However if the email with the shared link is forwarded by anyone on that list then the files are visible to those recipients as well. In fact, I forwarded the email to one of my other accounts not listed on the shared list and was able to view / download the files.
Basic security could be easy as having the Pogoplug owner define a password that he/she shares with people verbally or through a separate email, although it would be preferred to force users to create accounts based on their email address to truly verify the intended recipients have access to the files.
I could not agree more! Is there no encryption being done with Desktop Application when signing in? For me this is a deal breaker.
Hi, I just ordered a Pogoplug today. After ordering I just realized that there is no password protection for users whom you give access. Is Pogoplug going to update the software to provide for this? I know I could create encrypted files, but that sort of defeats the purpose of cloud computing.
On my.pogoplug.com go to settings > security settings and then check the checkbox for 'require sign-in to view email shares'
This option requires shared users to enter a password before being able to access the shared folder.
Hi there,
I am a digital designer. People buy downloadable product from me. I was wondering if I can use pogoplug securely to distribute the files. In other words, someone buys a kit from me, I give them passworded access to a file... how long will they have access to the file, is the time period changeable, will it work only for them or for someone else too, etc. Can someone hack into all the rest of my files?
Thanks,
V
@Vivayne - an interesting idea! First off, we did not design this feature for secure distribution of software. That said, by requiring a user to sign in to see that file, you can make it so that they have to use their email address and a password that they choose in order to access the file.
They will have access to that file in perpetuity, unless you remove them from the share.
There is no validation of where that customer came from, or limit on the number of times they could download the file, etc - anyone who knows that users' email/password would be able to get hold of the file.
There is no way for someone to get to the rest of your files from a single file share.
Hope that answers your questions!
I use Pogoplug for a couple of months and I am very pleased with it. I don`t have password-protected folders because I think it is not necessary, as long as you know with whom you share your files. I don't know about other users, but I use Data Center Security and I am not afraid of viruses or hacker attacks. I shared some data with 5 colleagues from my workplace and till now any of us did not have any problems with downloading or accessing the files.
It has been two years since this password thread began. Are the software developers at PogoPlug moving forward with some sort of password protection for shared files?
Physlab

RSS


