[dokuwiki] Re: Dokuwiki as electronic Labnotebook
- From: "Jerry Schwartz" <jerry@xxxxxxxxx>
- To: <dokuwiki@xxxxxxxxxxxxx>
- Date: Fri, 25 Mar 2011 09:45:34 -0400
>-----Original Message-----
>From: dokuwiki-bounce@xxxxxxxxxxxxx [mailto:dokuwiki-bounce@xxxxxxxxxxxxx] On
>Behalf Of Michael Kirchner
>Sent: Friday, March 25, 2011 7:25 AM
>To: dokuwiki@xxxxxxxxxxxxx
>Subject: [dokuwiki] Dokuwiki as electronic Labnotebook
>
>Hi,
>
>I am trying to use dokuwiki as a electronic laboratory notebook. One
>important requirement is that changes are traceable.
>
>While this seems to work fine within dokuwiki, I fear someone asking me
>"But if someone changes the textfiles directly without using the
>webinterface ..."
>
>What should I answer? Is there a risk? Would a manual edit show traces
>in "older versions"? Is there even a plugin to secure pages against
>manual edits?
>
[JS] I don't know that there's //any// standard file storage that provides
that kind of security. I've done plenty of binary editing of files (for
completely legitimate purposes, of course), and even storage metadata.
Changing a file without leaving fingerprints is easy, if you have total
control over the system.
You can use encryption or checksums to make it hard to modify a file without
it being obvious that it's been tampered with, but if the algorithm is known
someone could replace the file with an equally legitimately-looking but
completely different file.
Isn't the real reason for tamper-proofing lab notes to make sure that you,
yourself, don't go back and falsify your records?
A security expert will tell you that you can't make a system tamper-proof
unless you secure physical, as well as electronic, access. The bottom line is
that you can't protect your files against the person who has the keys. In this
case, that would be you.
Regards,
Jerry Schwartz
Global Information Incorporated
195 Farmington Ave.
Farmington, CT 06032
860.674.8796 / FAX: 860.674.8341
E-mail: jerry@xxxxxxxxx
Web site: www.the-infoshop.com
>PS I saw cryptsign, but this does not quite do what I need. (In the
>ickewiki demo I could even change the page without the signature being
>marked as ivalid.)
>
>
>Regards,
>Michael
>--
>DokuWiki mailing list - more info at
>http://www.dokuwiki.org/mailinglist
--
DokuWiki mailing list - more info at
http://www.dokuwiki.org/mailinglist
Other related posts:
