Copying and Pasting in myDRE: Easy or Safe?

Copying and Pasting in myDRE: Easy or Safe?

Introduction

In myDRE, you can't copy and paste information between your computer and a Virtual Machine (VM). This for example means that you can't copy and paste your code from your local desktop to your VM and vice versa. It might seem like a big hassle, especially when you want to move information quickly. But there's a good reason for this rule.

Why Can't We Just Copy and Paste?

This no-copy/paste rule comes from anDREa's Security Manifesto. In simple terms, it's all about keeping things safe. Copying and pasting might seem simple, but it can be risky. It can accidentally let bad stuff like viruses in or let important information out.

A Note on Conscious Decision-Making

For users who still feel the need to enable real-time copy-paste functionality, there are alternatives rather than enabling the copy-paste feature for VMs. Enabling this feature would by default allow everyone in the Workspace the same capability, and this might lead to security problems. It's essential to understand that the alternatives come with inherent risks, however it requires you to consciously decide to do so by opening up certain domains. This way, you can make an informed the decision and accept the risks. 

Exploring Alternatives: Gist and Sharepoint

Even though you can't copy and paste directly, there are more secure alternatives to share:
  1. Using Gist: This is a place where you can share small bits of text or codes. It's good for when you need to share just a little bit of info. You can learn how to use it here: Creating Gists or go to https://gist.github.com/starred. To make this work, you will need to allowlist gist.github.com.
Secret gists aren't private. If you send the URL of a secret gist to another enterprise member, they'll be able to see it. However, if any other enterprise member discovers the URL, they'll also be able to see your gist.
If you need to keep your code away from prying eyes, you may want to Create a Private Repository instead.
  1. Using Sharepoint: This is another way for sharing information within your organization, offering a seamless and secure experience for transferring documents and files. 

Conclusion: Safety in Informed Choices

While the current setup in myDRE might seem restrictive, it's a thoughtfully implemented measure aimed at maintaining the highest security standards. By looking at the other options available and really thinking about what it means to turn on direct copy-paste, users can make smart choices that balance what's easy for them and the big picture of keeping our digital work area safe.
    • Related Articles

    • myDRE Workspaces DO NOT use Microsoft Teams, OneDrive, or Sharepoint to store or process your data

      Read more here: myDRE Workspaces DO NOT use Microsoft Teams, OneDrive, or Sharepoint to store or process your data
    • Roles in myDRE workspace

      Roles are defined per workspace. A myDRE user can have different roles in different workspaces they are part of. Each workspace member can have one of these specified roles within that workspace: Accountable The Accountable is the responsible person ...
    • Can myDRE be used outside the EER / USA / etc?

      myDRE can be used outside the EER / USA / etc If your organization allows remote access (e.g. working from home) then there is no reason why myDRE cannot be used regardless of the geographic area you are in. Bypassing geo-restrictions is easy by ...
    • What is new on mydre.org?

      Last updated 20-04-2021 New features have been added or improved.  View the announcement at: Improved & New Features. Last updated 30-03-2021 New features have been implemented after the migration from researchenvironment.org to mydre.org. Therefore, ...
    • Generalize a VM

      Use this process only if you want to create a template for your own Workspace. If you want to create a template for the whole organisation, please contact your local ST member. Introduction Installing the same software on your VM can be tedious and ...