Live data from Hacker News

Mendeley encrypts users' database after Zotero provides an importer

zotero.org

21–30 of 122 posts

Re: Mendeley encrypts users' database after Zotero provides an importer

#21

Reading through that, it seems like Mendeley uses SQLite for it's local database. There aren't that many SQLite encryption libraries around (generalising), so it's probably using either SQLCipher or SEE. https://www.zetetic.net/sqlcipher https://www.sqlite.org/see/doc/trunk/www/index.wiki There's a reasonable chance the page size and passphrase is stored or cached on the machine. If someone (not me) takes the time an…

Yeah, this sounds like an interesting reverse engineering challenge, do you need any special accounts to use Mendeley or can it be freely installed by anyone? It'd likely just be a hard-coded key, you wouldn't want to restrict people from copying their own databases around... probably.

Re: Mendeley encrypts users' database after Zotero provides an importer

#22
post #6

Zotero has improved a lot, while Mendeley has repeatedly regressed. Mendeley used to be quite a good program, but recently you can not export annotated PDFs meaningfully. For example, sending a folder of annotated PDFs to a co-author during a literature review is impossible. This is obviously the case since Elsevier does not want you to trade research papers, whether you have lawfull access or not. The updates that t…

> I had used Mendeley for years to annotate and categorize literature. I was now in need to send my categorized PDFs to a central repository for my co-authors to evaluate and add to. After some update, without me noticing it, it was no longer possible to export folders of PDFs or PDFs in general! This is exactly why you should not depend on proprietary software for anything even remotely important. This is not the fi…

The adage is certainly true: "with proprietary software, the user doesn't control the program, the program controls the users".

Re: Mendeley encrypts users' database after Zotero provides an importer

#23

Luckily, my Linux desktop was still running an old version of Mendeley so I was able to make the switch. My reason for wanting to switch was that Zotero has Google Docs integration. After making the switch, I was pleased to pay a modest amount for storage of my PDFs, which makes me feel like a customer instead of a product.

If your institution does offer f1000 subscription, I suggest you take a look at f1000 workspace.

Hmm, I thought this would be a lesson to illustrate what happens when you depend on proprietary software...

Re: Mendeley encrypts users' database after Zotero provides an importer

#24
post #15

If I'm understanding things correctly from the reading (which, let's be honest, that's an assumption on its own), the tl;dr seems to be that Mendeley heard about an open source product working on a set of importers that would, potentially, result in Mendeley customers migrating to this free alternative[0]. To provide cover for this change, they invoked user security. And hey, user security is a pretty good reason to…

...I was going to edit my original comment, but it seemed more appropriate to just follow up with a reply...

I was unaware that this was an Elsevier product (another comment pointed that out).

I do not use Elsevier products (directly, anyway, maybe I do indirectly but I doubt it). I have, however, followed the various controversies surrounding the company for the past several years. Those who are with me will not be surprised that Mendeley added this sort of "feature".

Elsevier is not in the business of providing a helpful, useful, research library and tooling. Their business model is to be the only source of that information. This has been done using a combination of legal, contractual and technical means. I won't get into the whole ethical/legal argument about whether or not they should be allowed to do some of the legal/contractual things that they do to "pseudo-control" that data[0].

This smells like a feature borne out of corporate culture. Their business really is about exerting control over their customers, so it's natural (to them) that tool their customers rely on would similarly contain features related to keeping customers in the walled garden[1].

[0] Especially research done via grants paid for with public funds) -- I suspect I'd enter an echo chamber pretty quickly (and even if not, I'd be unlikely to persuade someone in a medium-length comment.

[1] There's some clever pun here about paper walls and research papers but it's too early to be that clever.

Re: Mendeley encrypts users' database after Zotero provides an importer

#25
post #14

For those wondering, here's what I gathered as some context. Zotero = Your personal research assistant. Zotero is a free, easy-to-use tool to help you collect, organize, cite, and share research. https://www.zotero.org/ Mendeley = Reference Management Software, produced by Elsevier who also happens to be the publisher of many peer-reviewed journals. Elsevier come under fire for it's high costs and gateway actions to…

Mendeley was originally a startup. Precisely why people even started embracing it (though I didn't, something always felt fishy for me) and then they got acquired by Elseiver.

I have nothing but good things to say about about Papers for Mac though.

Re: Mendeley encrypts users' database after Zotero provides an importer

#26
post #6

Zotero has improved a lot, while Mendeley has repeatedly regressed. Mendeley used to be quite a good program, but recently you can not export annotated PDFs meaningfully. For example, sending a folder of annotated PDFs to a co-author during a literature review is impossible. This is obviously the case since Elsevier does not want you to trade research papers, whether you have lawfull access or not. The updates that t…

Personal experience: I made the switch soon after starting my PhD and never looked back. Also, their Connector plugin for Firefox is a life saver. 90% of the time I only have to lookup the title of a paper on DBLP, then export it as BibTeX and pronto, the reference is now in my library with most of the relevant metadata. Much better than Mendeley's quite opinionated plugin (which also won't work unless you log into Elsevier's servers)

Re: Mendeley encrypts users' database after Zotero provides an importer

#27

Luckily, my Linux desktop was still running an old version of Mendeley so I was able to make the switch. My reason for wanting to switch was that Zotero has Google Docs integration. After making the switch, I was pleased to pay a modest amount for storage of my PDFs, which makes me feel like a customer instead of a product.

If your institution does offer f1000 subscription, I suggest you take a look at f1000 workspace.

This is literally the worst thing you can do. Even a tenured professor doesn't seem to stay in the same institution for their lifetime nowadays so why would you go to a service that even you personally cannot pay for yourself (reasonably)?

Re: Mendeley encrypts users' database after Zotero provides an importer

#29
post #19

For anyone who is interested in the different options for reference management, I've been sporadically maintaining a webpage about the various options since 2015: https://maxmasnick.com/projects/reference-managers/ I re-un-recommended Mendeley back in June 2018 when this news first broke. (I was initially too sketched out by Elsevier to recommend Mendeley, and this just confirms these suspicions.) tl;dr Zotero is a p…

Which one gives the best seamless mobile integration experience? Papers for iOS wasn't bad (if you let it finish syncing with Dropbox ) but curious about this!

Re: Mendeley encrypts users' database after Zotero provides an importer

#30

Luckily, my Linux desktop was still running an old version of Mendeley so I was able to make the switch. My reason for wanting to switch was that Zotero has Google Docs integration. After making the switch, I was pleased to pay a modest amount for storage of my PDFs, which makes me feel like a customer instead of a product.

If your institution does offer f1000 subscription, I suggest you take a look at f1000 workspace.

I gave this a try, but sadly it came up short. For writing a single paper of MSc Thesis, it might work. However it just doesn't seem suited for handling a large number of references for a variety of projects, which get called on frequently as standard references in papers, reference material, and much more.

If it helps I have just under 2000 papers in my Zotero. It isn't massive by research standards, but it is substantial.

Post reply on HN