Kim Dotcom's Mega plan

Forums › Cloud, SaaS › Kim Dotcom's Mega plan

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23

579 posts

Ultimate Geek

Reply # 747988 20-Jan-2013 22:17
gareth41: PottsyNZ: Watching the livestream...jebus..hardout...go Tiki Tane! stream seems to have gone dead, can anyone else access it? I had it going before then it cut out during music after the questions/answers. It's ended already. Me: My TechSite - NZ TechBlog A bit about Me My Twitter My Geekzone blog

sonyxperiageek

579 posts

Ultimate Geek

Reply # 747989 20-Jan-2013 22:19
Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow.. Me: My TechSite - NZ TechBlog A bit about Me My Twitter My Geekzone blog

gareth41

398 posts

Ultimate Geek

Reply # 747997 20-Jan-2013 22:30
sonyxperiageek: Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow.. I was able to upload a 120mb mp3 straight away. hopefully its a genuine fault that other files dont upload or have trouble?

caldazar

385 posts

Ultimate Geek

Reply # 748011 20-Jan-2013 23:10
dkedr: For those asking how the encryption is done, I found this https://mega.co.nz/#developers In addition to the symmetric key, each user account has a 2048 bit RSA key pair to securely receive data. Its private component is stored encrypted with the user's symmetric master key. And Each user account uses a symmetric master key to ECB-encrypt all keys of the nodes it keeps in its own trees. This master key is stored on MEGA's servers, encrypted with a hash derived from the user's login password. I'm not an expert in this area.... but if they are storing the key pairs and using the master account hash (generated from the user's password) then in theory, can't they gain access to the files? I guess... if Mega discard the hash at the end of each authenticated session (so only use it for authentication), then they can't gain access. Or am I incorrect / misguided in my interpretation? If I'm wrong, some of my comments below might also be wrong ;-) I guess for the intended purpose, it seems it is designed so that people can upload encrypted files and download again (in a convenient manner). They can expect that their data can't be looked at by others and it's not searchable/accessible, so a legal authority would have to go to further lengths to get access to the data. E.g. most likely a search warrant against a specific individual to even get access to a particular account's encrypted files. (Where as in the past.. they could search Megaupload just like anyone else)... If Mega is not keeping the original password hash on file, then the end user would have to cough up their password (or brute force would be required...). Perhaps with the right search warrant/court order (tin-foil hat), Mega could be asked to store the hash for a user account on next login?. (I'm not a lawyer... so I don't know if that could ever happen). Maybe a service like this has a place. Even as a tool to more securely send files to a colleague, client, friend. I guess time will tell. Obviously, you wouldn't likely see it being used to store secret government files, hospital patient data etc... Well.. I hope not anyway... but perhaps nothing would truly surprise me... ;-)

Linuxluver

2486 posts

Uber Geek

Trusted

Subscriber

Reply # 748015 20-Jan-2013 23:35
I joined. Noting the free accounts have a 50KB/sec upload limit. The Pro 1 accounts are €9.90 / month. Not too bad for what you get (500GB of space and 1 TB of data transfer/month) If you're not curious, your brain is already dying...if not dead. My blogs: Eyes Wide Open /Android Luver / 3D Luver / Truth Seeker Handhelds: LG Optimus 3D Max / LG Optimus 3D / HTC Sensation / VFNZ 845 / Samsung Galaxy Tab / Lenovo IdeaPad K1 32GB / iPod Touch PCs: Home made Linux boxen from parts mainly from PB Tech.

Ragnor

6889 posts

Uber Geek

Trusted

Subscriber

Reply # 748025 21-Jan-2013 00:25
Talkiet: I hear what you're saying but I don't believe it applies to duplicates within your own uploads. For deduplication to make sense it needs to be across all users (or all users housed at a node or whatever) Whatever the situation, that quoted condition very very clearly says to me that they have the ability to determine if 2 files uploaded by different users are the same. Now I would imagine there's a clever way to do this by comparing hashes, but I'd like a real explanation of how this happens. Cheers - N If the encryption is done client side before upload it should not be possible to do file de-duplication on the server end. The same file from two different users after encryption should be different and shouldn't hash to the same thing. Most likely they are doing the dodgy Dropbox style "opps we actually store the keys and decrypt to do de-file duplication server side"... which is great until there is an security breach (like when Dropbox got hacked last year) Personally I wouldn't trust this service for anything important yet until we know more about how it works.

Linuxluver

2486 posts

Uber Geek

Trusted

Subscriber

Reply # 748029 21-Jan-2013 00:42
Ragnor: Personally I wouldn't trust this service for anything important yet until we know more about how it works. You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. If you're not curious, your brain is already dying...if not dead. My blogs: Eyes Wide Open /Android Luver / 3D Luver / Truth Seeker Handhelds: LG Optimus 3D Max / LG Optimus 3D / HTC Sensation / VFNZ 845 / Samsung Galaxy Tab / Lenovo IdeaPad K1 32GB / iPod Touch PCs: Home made Linux boxen from parts mainly from PB Tech.

insane

1270 posts

Uber Geek

Trusted

Reply # 748039 21-Jan-2013 06:54
Linuxluver: Ragnor: Personally I wouldn't trust this service for anything important yet until we know more about how it works. You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. It's no longer hosted in the US... As far as deduplication goes, I'm pretty sure both Mozy and Crashplan use client side dedupe over secure tunnels, which is now fairly common in the backup space so I wouldn't expect this to be any different. On our Enterprise Backup platform at work we get roughly 20:1 dedupe ratios, so they'd be looking for some disk savings too. In other news their site seems to be dead / overloaded

xlinknz

414 posts

Ultimate Geek

Reply # 748066 21-Jan-2013 08:59
Linuxluver: I joined. Noting the free accounts have a 50KB/sec upload limit. Where did you read that ?

gzt

3196 posts

Uber Geek

Subscriber

Reply # 748070 21-Jan-2013 09:09
In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.

networkn

4730 posts

Uber Geek

Trusted

Subscriber

Reply # 748072 21-Jan-2013 09:18
Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)

myopinion

523 posts

Ultimate Geek

Subscriber

Reply # 748075 21-Jan-2013 09:19
I cant access it this morning can anyone else?

gundar

114 posts

Master Geek

Trusted

Subscriber

Reply # 748076 21-Jan-2013 09:24
Nah. Never had a reply to registration email or interest email, ever. Since Friday, the site has not been able to load at all, no front page, just times out. Tested with IE, FF, Ch on Slingshot, Voda and 2deg. It's pretty dissappointing so far for me.

xlinknz

414 posts

Ultimate Geek

Reply # 748091 21-Jan-2013 09:53
gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here. networkn: Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :) Before I register can anyone confirm whether they get more than 50KBs upload with a free account

zhuyan

96 posts

Master Geek

Reply # 748096 21-Jan-2013 10:07
gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here. If you tick the "fixed", you are able to change 50KBS to any other figure you want

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23