Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23


1198 posts

Uber Geek
+1 received by user: 73


  Reply # 747988 20-Jan-2013 22:17 Send private message

gareth41:
PottsyNZ: Watching the livestream...jebus..hardout...go Tiki Tane!


stream seems to have gone dead, can anyone else access it?  I had it going before then it cut out during music after the questions/answers.


It's ended already.






1198 posts

Uber Geek
+1 received by user: 73


  Reply # 747989 20-Jan-2013 22:19 Send private message

Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..




466 posts

Ultimate Geek
+1 received by user: 3


  Reply # 747997 20-Jan-2013 22:30 Send private message

sonyxperiageek: Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..


I was able to upload a 120mb mp3 straight away.

hopefully its a genuine fault that other files dont upload or have trouble?

388 posts

Ultimate Geek


  Reply # 748011 20-Jan-2013 23:10 Send private message

dkedr: For those asking how the encryption is done, I found this https://mega.co.nz/#developers

In addition to the symmetric key, each user account has a 2048 bit RSA key pair to securely receive data. Its private component is stored encrypted with the user's symmetric master key.


And

Each user account uses a symmetric master key to ECB-encrypt all keys of the nodes it keeps in its own trees. This master key is stored on MEGA's servers, encrypted with a hash derived from the user's login password.


I'm not an expert in this area.... but if they are storing the key pairs and using the master account hash (generated from the user's password) then in theory, can't they gain access to the files? I guess... if Mega discard the hash at the end of each authenticated session (so only use it for authentication), then they can't gain access.

Or am I incorrect / misguided in my interpretation? If I'm wrong, some of my comments below might also be wrong ;-)

I guess for the intended purpose, it seems it is designed so that people can upload encrypted files and download again (in a convenient manner). They can expect that their data can't be looked at by others and it's not  searchable/accessible, so a legal authority would have to go to further lengths to get access to the data. E.g. most likely a search warrant against a specific individual to even get access to a particular account's encrypted files. (Where as in the past.. they could search Megaupload just like anyone else)...

If Mega is not keeping the original password hash on file, then the end user would have to cough up their password (or brute force would be required...). Perhaps with the right search warrant/court order (tin-foil hat), Mega could be asked to store the hash for a user account on next login?. (I'm not a lawyer... so I don't know if that could ever happen).

Maybe a service like this has a place. Even as a tool to more securely send files to a colleague, client, friend. I guess time will tell. Obviously, you wouldn't likely see it being used to store secret government files, hospital patient data etc... Well.. I hope not anyway... but perhaps nothing would truly surprise me... ;-)



2620 posts

Uber Geek
+1 received by user: 56

Trusted
Subscriber

  Reply # 748015 20-Jan-2013 23:35 Send private message

I joined. 

Noting the free accounts have a 50KB/sec upload limit. 

The Pro 1 accounts are €9.90 / month. Not too bad for what you get (500GB of space and 1 TB of data transfer/month) 




____________________________________________________
If you're not curious, your brain is already dying...if not dead.



7678 posts

Uber Geek
+1 received by user: 265

Trusted
Subscriber

  Reply # 748025 21-Jan-2013 00:25 Send private message

Talkiet: 

I hear what you're saying but I don't believe it applies to duplicates within your own uploads. For deduplication to make sense it needs to be across all users (or all users housed at a node or whatever)

Whatever the situation, that quoted condition very very clearly says to me that they have the ability to determine if 2 files uploaded by different users are the same. Now I would imagine there's a clever way to do this by comparing hashes, but I'd like a real explanation of how this happens.

Cheers - N



If the encryption is done client side before upload it should not be possible to do file de-duplication on the server end. The same file from two different users after encryption should be different and shouldn't hash to the same thing.

Most likely they are doing the dodgy Dropbox style "opps we actually store the keys and decrypt to do de-file duplication server side"... which is great until there is an security breach (like when Dropbox got hacked last year)

Personally I wouldn't trust this service for anything important yet until we know more about how it works.






2620 posts

Uber Geek
+1 received by user: 56

Trusted
Subscriber

  Reply # 748029 21-Jan-2013 00:42 Send private message

Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.



You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. 




____________________________________________________
If you're not curious, your brain is already dying...if not dead.



1950 posts

Uber Geek
+1 received by user: 239

Trusted
Subscriber

  Reply # 748039 21-Jan-2013 06:54 Send private message

Linuxluver:
Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.



You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. 


It's no longer hosted in the US...

As far as deduplication goes, I'm pretty sure both Mozy and Crashplan use client side dedupe over secure tunnels, which is now fairly common in the backup space so I wouldn't expect this to be any different.

On our Enterprise Backup platform at work we get roughly 20:1 dedupe ratios, so they'd be looking for some disk savings too.

In other news their site seems to be dead / overloaded

451 posts

Ultimate Geek
+1 received by user: 2


  Reply # 748066 21-Jan-2013 08:59 Send private message

Linuxluver: I joined. 

Noting the free accounts have a 50KB/sec upload limit. 

 


Where did you read that ?

gzt

4331 posts

Uber Geek
+1 received by user: 196

Subscriber

  Reply # 748070 21-Jan-2013 09:09 Send private message

In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.

6968 posts

Uber Geek
+1 received by user: 746

Trusted
Subscriber

  Reply # 748072 21-Jan-2013 09:18 Send private message

Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)

641 posts

Ultimate Geek
+1 received by user: 19

Subscriber

  Reply # 748075 21-Jan-2013 09:19 Send private message

I cant access it this morning can anyone else?

402 posts

Ultimate Geek
+1 received by user: 61

Trusted
Subscriber

  Reply # 748076 21-Jan-2013 09:24 Send private message

Nah. Never had a reply to registration email or interest email, ever. Since Friday, the site has not been able to load at all, no front page, just times out. Tested with IE, FF, Ch on Slingshot, Voda and 2deg.

It's pretty dissappointing so far for me.

451 posts

Ultimate Geek
+1 received by user: 2


  Reply # 748091 21-Jan-2013 09:53 Send private message

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.


networkn: Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)


Before I register can anyone confirm whether they get more than 50KBs upload with a free account

128 posts

Master Geek
+1 received by user: 6


  Reply # 748096 21-Jan-2013 10:07 Send private message

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.


If you tick the "fixed", you are able to change 50KBS to any other figure you want 

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23
View this topic in a long page with up to 500 replies per page Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Orcon Global Mode launched
Created by freitasm, last reply by Snackos on 27-Aug-2014 20:42 (88 replies)
Pages... 4 5 6


Advice on Residential Fence replacement and neighbour
Created by networkn, last reply by nickrout on 27-Aug-2014 19:45 (26 replies)
Pages... 2


What would show if the net went down?
Created by gnfb, last reply by oxnsox on 27-Aug-2014 19:49 (23 replies)
Pages... 2


Moving to Auckland - advise & recommendation
Created by nakedmolerat, last reply by nakedmolerat on 26-Aug-2014 22:48 (47 replies)
Pages... 2 3 4


Vodafone TV multicast settings on pfSense?
Created by kenkeniff, last reply by kenkeniff on 27-Aug-2014 10:32 (182 replies)
Pages... 11 12 13


XtraHost - Closing
Created by achieveit, last reply by quickymart on 27-Aug-2014 18:57 (19 replies)
Pages... 2


Slingshots Front Up! Are applauding or sceptical?
Created by gnfb, last reply by gnfb on 26-Aug-2014 21:49 (19 replies)
Pages... 2


Another Gaming computer help question
Created by Lyderies, last reply by timmmay on 26-Aug-2014 18:06 (38 replies)
Pages... 2 3



Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.