Calibre as Document Management System

[ownedbycats]

Originally Posted by Quoth

Not as bad as the company that put all passwords in an Excel Spreadsheet and then stored that on their online MS Cloud account thing that all members of staff could access.

oh good god...

[theducks]

Originally Posted by ownedbycats

oh good god...

Yep!
It is amazing how little folk think about security. I've seen a few OMG before cloud accounts were available to make it even more idiotic.

The whole company above knew about this and did NOTHING ?

FWIW I do not allow banking (apps) and other high value accounts (You can't even buy from Amazon on my phone) , to be done from any of my portable devices, just because those are the easiest for a 3rd party to get a hold of.

[msel]

Originally Posted by ownedbycats

I... would not advise storing passwords as plain-text (even in an SQLite database), if that's what you mean.

If you're keeping a KeePass (or other offline password manager) file in the Calibre library, not so bad.

I'm the only one who works on this computer - no other has an access - so I have no problem with it saving passwords. For me it is an backup if I loose my passwords in a password manager (i uses built-in ones of browser with master password).

[ownedbycats]

I've had banking sites force users to have short passwords with no special characters.

[DNSB]

Originally Posted by ownedbycats

I've had banking sites force users to have short passwords with no special characters.

One with a 4 letter name?

[ownedbycats]

I think I know which one you're talking about, yes.

From what I understand a lot of banks have some pretty antiquated mainframes. Even if the frontend lets you put in something longer, is possible it gets truncated (you can put in 'correcth' instead of the full 'correcthorsebatterystaple' and still gain access).

[tetristres]

Originally Posted by Quoth

Calibre is totally brilliant as a library and tool chest for eBooks, but a real document management system is rather different, though like Calibre it has a GUI, a files system you shouldn't access directly (with computer generated and scanned paper documents) and a database. It also likely adds barcodes or QR codes to stuff emailed or printed so if it comes back with writing on it the scanning automatically tracks it.
It will be multi-user with variable privileges (Calibre is single user), it will track changes and have the different versions (electronic or scanned) available with who changed what.
It might have approvals too.

It's just for personal use. So I don't need advances features.

[tetristres]

Originally Posted by Quoth

Calibre is totally brilliant as a library and tool chest for eBooks, but a real document management system is rather different, though like Calibre it has a GUI, a files system you shouldn't access directly (with computer generated and scanned paper documents) and a database. It also likely adds barcodes or QR codes to stuff emailed or printed so if it comes back with writing on it the scanning automatically tracks it.
It will be multi-user with variable privileges (Calibre is single user), it will track changes and have the different versions (electronic or scanned) available with who changed what.
It might have approvals too.

It is a personal document management system, I don't need advanced features.

[tetristres]

Originally Posted by BetterRed

Eh, FTS does index DOCX files, viz:

Attachment 200960

I don't recall doing anything to make it index them.

BR

It could be that you also have the same book in a format that is indexed. If you convert the DOCX files to PDF (for example) these PDFs files are indexed. It's a partial solution. But you have to regularly re-convert the DOCX files to PDF if they are changing frequently

[ownedbycats]

Originally Posted by tetristres

It could be that you also have the same book in a format that is indexed. If you convert the DOCX files to PDF (for example) these PDFs files are indexed. It's a partial solution. But you have to regularly re-convert the DOCX files to PDF if they are changing frequently

Look closer at the screenshot.

[Quoth]

Originally Posted by msel

I'm the only one who works on this computer - no other has an access - so I have no problem with it saving passwords. For me it is an backup if I loose my passwords in a password manager (i uses built-in ones of browser with master password).

If it ever has a browser that allows 3rd party javascript, then anyone one may read the stuff, no matter what sort of firewall / router you have.

Also watch out for the evil maid / cleaner That's how Syrian airdefence was breached. A root kit installed when the general was staying at a London hotel.

See also Stuxnet and the amazing disintegrating Iranian centrifuges. Initial vector was malware in javascript.

BBC & CNN sites have served adverts that had malware. Hence many people use NoScript, Umatrix or UBlockOrigin and only enable enough scripts for the website to work.

[Quoth]

Originally Posted by ownedbycats

oh good god...

Someday I may write the book of my spell in IT & security (initially physical security systems after I left the BBC). Oh, and computer training

Also change the codes on door entry systems and never have them in magnitude order. The buttons wear.
I "guessed" a password too of the boss in the infamous office. Six keys were more worn on the keyboard they threw out when they got laptops, because he mostly just browsed stuff!

[ownedbycats]

Originally Posted by Quoth

BBC & CNN sites have served adverts that had malware. Hence many people use NoScript, Umatrix or UBlockOrigin and only enable enough scripts for the website to work.

Forbes forces readers to turn off ad blockers, promptly serves malware

What happened to Forbes isn't unique; The New York Times, The Huffington Post, and a number of other high-profile sites have been hit by similar attacks over the years. What sets Forbes apart, however, is that the site is actively attempting to block people from using ad-blocking software, even though we have an increasing amount of evidence that suggests such software can meaningfully protect users.

Originally Posted by Quoth

I "guessed" a password too of the boss in the infamous office. Six keys were more worn on the keyboard they threw out when they got laptops, because he mostly just browsed stuff!

In the 1983 movie WarGames, the protagonist (a high school student) deliberately gets into trouble so he can get sent to the principal's office and find the password (on a sticky note attached to the desk!) needed to change his grades.

[Quoth]

Is that the one where the computer or the kid decides the only way to "win" is not to play?
The Nuclear deterrent concept genuinely has the initialism MAD. For Mutually Assured Destruction.

Feels longer ago than 1983!

General to newly launched AI system; "Will there be war or peace?"
- "Yes"
"Yes, what!" stormed the General.

-"Yes, Sir!" replied the AI

Also just read about weather is bad in the cloud:
https://www.theregister.com/2023/04/...e_access_keys/

[ownedbycats]

Originally Posted by Quoth

Is that the one where the computer or the kid decides the only way to "win" is not to play?
The Nuclear deterrent concept genuinely has the initialism MAD. For Mutually Assured Destruction.

Yup! (Except it was actually the supercomputer/AI that decided that, I think.)