Due to Covid-19 one of our big customers is going to waive coming to our plant physically for a quality audit. Instead they are going to visit via web conference. That's all fine and dandy. But they are also going to want to spend time reviewing our quality documents and various procedures. I don't have a quick, easy way to allow them access to our internal file server. So I see that there are plenty of ways to share a doc via Googles or Lord Microsoft.
But we are a small, paranoid company stuck behind the times with an old IT dude (me) and we do not want to impulsively jump into publishing something only to find that we can't control who sees it and block downloads.
What can you teach me o wise, murder hornet-free hive?
Hmm, technically any website is "downloaded" to the local system. That's just how it works.
You could encrypt the file and provide them the key so only they can decrypt and view it.
Steve_Jones said:
https://venturebeat.com/2015/07/14/you-can-now-disable-downloading-printing-and-copying-for-any-file-stored-in-google-drive/
No, you can't. You can make it harder, but once the information is displayed on the screen of the person viewing it you have no way to control what he does with it. Screen shot software or even a cell phone camera pointed at the screen are only the most obvious ways that are impossible to defend against.
This is not a problem with a technical solution. If it's really important to share information but also keep it confidential, that's what contracts and non-disclosure agreements are for.
codrus (Forum Supporter) said:
Steve_Jones said:
https://venturebeat.com/2015/07/14/you-can-now-disable-downloading-printing-and-copying-for-any-file-stored-in-google-drive/
No, you can't. You can make it harder, but once the information is displayed on the screen of the person viewing it you have no way to control what he does with it. Screen shot software or even a cell phone camera pointed at the screen are only the most obvious ways that are impossible to defend against.
This is not a problem with a technical solution. If it's really important to share information but also keep it confidential, that's what contracts and non-disclosure agreements are for.
You can't stop anyone from taking a screenshot or photo of a screen. You can block them from downloading it and/or printing it, which is what he asked.
Yeah what you're asking for can't really be done, it's the DRM problem. The closest technical solution is encrypting the file and providing a key, or you could use NDAs etc.
GameboyRMH said:
Yeah what you're asking for can't really be done, it's the DRM problem. The closest technical solution is encrypting the file and providing a key, or you could use NDAs etc.
But they can still make a screen shot.......
Can you put a time limit on a file ? Good for 48 hours and then the link deletes from your server , Tell them its for security ..
What does the guy from the "big customer" normally do ? does he take a hard copy back to his company after a physical inspection ?
I mean I know we can't control them taking a screen shot or simply using the web browser to print what they are seeing. I just want to block the average computer novice from doing the obvious stuff. So if there's a setting in Google drive that will block a download that's probably GTG for what I can do in 24 hrs.
"Analog hole" is probably my favorite term in security/DRM.
I think this would be better served with a legal solution instead of a technical one.
californiamilleghia said:
GameboyRMH said:
Yeah what you're asking for can't really be done, it's the DRM problem. The closest technical solution is encrypting the file and providing a key, or you could use NDAs etc.
But they can still make a screen shot.......
Can you put a time limit on a file ? Good for 48 hours and then the link deletes from your server , Tell them its for security ..
What does the guy from the "big customer" normally do ? does he take a hard copy back to his company after a physical inspection ?
Guy from big customer normally asks to review "policy XYZ" and we print a physical copy, hand it to him/her and they read it on the spot and either accept or suggest changes.
NDA's are already in place but that doesn't stop an oopsy from occurring and NDA's are only for lawyers to have fun years after the fact - not a tactical solution. (again not that what I'm asking for is much of a tactical fix either.)
