[Libs-Or] Tuesday Topic: Privacy and security as it relates to online file-sharing and cloud storage services

Tue Jan 12 08:03:53 PST 2016

[https://lh6.googleusercontent.com/8VX4Sz7kOcwJP7isKPUfiJx1PVeK4xI32ZHXJ-qR3NiDdTotAU1-FEzqplVQhMRDFDQcP7X6vcVPcRYPlQrrCodGu3WonSHOEN4hCnFDeH-aIQTPnSv_ALVCGniz9S-of8TgXwTV]
Tuesday Topic

Welcome to Tuesday Topics, a monthly series covering topics with intellectual freedom implications for libraries of all types.  Each message is prepared by a member of OLA's Intellectual Freedom Committee. Questions can be directed to the IF Committee member who sent the message or to one of the co-chairs of the IFC<http://www.olaweb.org/index.php?option=com_content&view=article&id=523:intellectual-freedom-about-us&catid=20:site-content>.

Intellectual freedom and protecting patron privacy are core values of librarians. How do we maintain these values when we use consumer online file-sharing and cloud storage services (Google Drive, DropBox, iCloud) to do our work and our patrons use them in our libraries? Know the risks, the benefits, library staff needs, patron needs, and service options so you can make an informed decision that's right for your library.

Questions to ask when selecting an online file-sharing service to protect privacy and maintain security:

*         Are documents encrypted in transit, but decrypted when they arrive/while they are stored?

*         Are they up to industry standards?

*         Do the terms and conditions meet your security and privacy needs?

*         Have they ever had a security breach?

*         How soon could you access the back-up if there was problem?

*         Is client-side encryption possible so you have the option to keep your stored documents encrypted?

*         Is there a way to prevent staff from leaking data or taking it with them when they leave?

*         What additional security and privacy tools are available for you to personalize to better meet your needs?

*         What is their disaster recovery policy?

*         What kind of authentication do they use?

Where to find answers to some of these questions for three of the most common online file-sharing services:

DropBox

Google Drive

iCloud

Are documents encrypted in transit, but decrypted when they arrive/while they are stored?

What does DropBox do to protect my stuff?<https://www.dropbox.com/security#protection>

Google now encrypts cloud storage by default<http://www.cnet.com/news/google-now-encrypts-cloud-storage-by-default/>

iCloud security and privacy overview<https://support.apple.com/en-us/HT202303>

Is client-side encryption possible so you have the option to keep your stored documents encrypted?

Encrypt your files in your Dropbox<https://www.boxcryptor.com/en/dropbox>

Two free ways to encrypt Google Drive files<http://www.cnet.com/how-to/two-free-ways-to-encrypt-google-drive-files/>

iCloud encryption for your iPhone, iPad, and Mac<https://www.boxcryptor.com/en/icloud>

What additional security and privacy tools are available for you to personalize to better meet your needs?

Security and privacy<https://www.dropbox.com/help/topics/security_and_privacy>

Know your Google security and privacy tools<https://www.google.com/goodtoknow/online-safety/security-tools/>

We've given you tools to manage your privacy<https://www.apple.com/privacy/manage-your-privacy/>

What are their terms and conditions?

DropBox Terms of Service<https://www.dropbox.com/terms>

Google Drive Terms of Service<https://support.google.com/drive/answer/2450387?hl=en>

iCloud Terms and Conditions<http://www.apple.com/legal/internet-services/icloud/en/terms.html>

What is their privacy policy?

DropBox Privacy Policy<https://www.dropbox.com/terms#privacy>

Welcome to the Google Privacy Policy<http://www.google.com/policies/privacy/>

Apple's commitment to your privacy<https://www.apple.com/privacy/>

What kind of authentication do they use?

How do I enable two-step verification on my account?<https://www.dropbox.com/help/363?path=security_and_privacy>

With 2-Step Verification, you'll protect your account with both your password and your phone<https://www.google.com/landing/2step/>

iCloud: two-step verification<https://support.apple.com/kb/PH14668?locale=en_US>

Some articles to read:

*         Farkas, Meredith. "More important than ever: privacy in the internet age<http://go.galegroup.com/ps/i.do?id=GALE%7CA435356213&v=2.1&u=sale38182&it=r&p=AONE&sw=w&asid=f53272158e1225c636c2bb711d8938d7>." American Libraries Nov.-Dec. 2015: 31. Academic OneFile. Web. 29 Dec. 2015.

*         Millard, Elizabeth. "Locking down the cloud: as cloud computing and storage catches on in higher education, data privacy best practices are emerging<http://go.galegroup.com/ps/i.do?id=GALE%7CA418465598&v=2.1&u=sale38182&it=r&p=AONE&sw=w&asid=12bdfed4cfb84f5f25e5626e6a64d75f>." University Business June 2015: 55+. Academic OneFile. Web. 29 Dec. 2015.

*         Sigley, Chris. "Time to drop Dropbox: why businesses need to abandon consumer cloud services<http://go.galegroup.com/ps/i.do?id=GALE%7CA407814134&v=2.1&u=sale38182&it=r&p=ITOF&sw=w&asid=3c9632f4c676ae5953e09d1fb8b84472>." Software World Mar. 2015: 4+. General OneFile. Web. 29 Dec. 2015.

*         Winder, Davey. "How secure are Dropbox, Microsoft OnDrive, Google Drive, and Apple iCloud?<http://www.alphr.com/dropbox/1000326/how-secure-are-dropbox-microsoft-onedrive-google-drive-and-apple-icloud>" Alphr July 31, 2015. Web. 29 Dec. 2015.

If you're interested in sharing information and discussing more about intellectual freedom issues, please join the OLA Intellectual Freedom Committee's listserv<http://listsmart.osl.state.or.us/mailman/listinfo/ola-ifc>.

Thanks,
Katie

Katie Anderson, Youth Services Consultant
Library Support and Development Services<http://www.oregon.gov/osl/LD/pages/index.aspx>
Oregon State Library, 250 Winter St. NE, Salem, OR 97301
katie.anderson at state.or.us<mailto:katie.anderson at state.or.us>, 503-378-2528
[cid:image004.png at 01D0358C.4523C4D0]<https://www.facebook.com/ORLibSupport>  [http://www.thewwwblog.com/images/blogger-logo.jpg] <http://osl-lis.blogspot.com/>   [http://www.aethlonmedical.com/assets/001/5130.png] <https://twitter.com/orlibsupport>   [Picture] <http://www.oregon.gov/OSL/LD/Pages/index.aspx>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/libs-or/attachments/20160112/c1ade85c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 923 bytes
Desc: image001.png
URL: <https://omls.oregon.gov/pipermail/libs-or/attachments/20160112/c1ade85c/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 859 bytes
Desc: image002.jpg
URL: <https://omls.oregon.gov/pipermail/libs-or/attachments/20160112/c1ade85c/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.gif
Type: image/gif
Size: 794 bytes
Desc: image003.gif
URL: <https://omls.oregon.gov/pipermail/libs-or/attachments/20160112/c1ade85c/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 2098 bytes
Desc: image004.jpg
URL: <https://omls.oregon.gov/pipermail/libs-or/attachments/20160112/c1ade85c/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 7293 bytes
Desc: image005.png
URL: <https://omls.oregon.gov/pipermail/libs-or/attachments/20160112/c1ade85c/attachment-0001.png>