Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Buying anything on Amazon? Please use the Geekzone Amazon aff link.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23


1378 posts

Uber Geek
+1 received by user: 97

Trusted

  Reply # 747988 20-Jan-2013 22:17 Send private message

gareth41:
PottsyNZ: Watching the livestream...jebus..hardout...go Tiki Tane!


stream seems to have gone dead, can anyone else access it?  I had it going before then it cut out during music after the questions/answers.


It's ended already.






1378 posts

Uber Geek
+1 received by user: 97

Trusted

  Reply # 747989 20-Jan-2013 22:19 Send private message

Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..




478 posts

Ultimate Geek
+1 received by user: 5


  Reply # 747997 20-Jan-2013 22:30 Send private message

sonyxperiageek: Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..


I was able to upload a 120mb mp3 straight away.

hopefully its a genuine fault that other files dont upload or have trouble?

388 posts

Ultimate Geek


  Reply # 748011 20-Jan-2013 23:10 Send private message

dkedr: For those asking how the encryption is done, I found this https://mega.co.nz/#developers

In addition to the symmetric key, each user account has a 2048 bit RSA key pair to securely receive data. Its private component is stored encrypted with the user's symmetric master key.


And

Each user account uses a symmetric master key to ECB-encrypt all keys of the nodes it keeps in its own trees. This master key is stored on MEGA's servers, encrypted with a hash derived from the user's login password.


I'm not an expert in this area.... but if they are storing the key pairs and using the master account hash (generated from the user's password) then in theory, can't they gain access to the files? I guess... if Mega discard the hash at the end of each authenticated session (so only use it for authentication), then they can't gain access.

Or am I incorrect / misguided in my interpretation? If I'm wrong, some of my comments below might also be wrong ;-)

I guess for the intended purpose, it seems it is designed so that people can upload encrypted files and download again (in a convenient manner). They can expect that their data can't be looked at by others and it's not  searchable/accessible, so a legal authority would have to go to further lengths to get access to the data. E.g. most likely a search warrant against a specific individual to even get access to a particular account's encrypted files. (Where as in the past.. they could search Megaupload just like anyone else)...

If Mega is not keeping the original password hash on file, then the end user would have to cough up their password (or brute force would be required...). Perhaps with the right search warrant/court order (tin-foil hat), Mega could be asked to store the hash for a user account on next login?. (I'm not a lawyer... so I don't know if that could ever happen).

Maybe a service like this has a place. Even as a tool to more securely send files to a colleague, client, friend. I guess time will tell. Obviously, you wouldn't likely see it being used to store secret government files, hospital patient data etc... Well.. I hope not anyway... but perhaps nothing would truly surprise me... ;-)



2637 posts

Uber Geek
+1 received by user: 67

Trusted
Subscriber

  Reply # 748015 20-Jan-2013 23:35 Send private message

I joined. 

Noting the free accounts have a 50KB/sec upload limit. 

The Pro 1 accounts are €9.90 / month. Not too bad for what you get (500GB of space and 1 TB of data transfer/month) 




____________________________________________________
If you're not curious, your brain is already dying...if not dead.



7805 posts

Uber Geek
+1 received by user: 335

Trusted
Subscriber

  Reply # 748025 21-Jan-2013 00:25 Send private message

Talkiet: 

I hear what you're saying but I don't believe it applies to duplicates within your own uploads. For deduplication to make sense it needs to be across all users (or all users housed at a node or whatever)

Whatever the situation, that quoted condition very very clearly says to me that they have the ability to determine if 2 files uploaded by different users are the same. Now I would imagine there's a clever way to do this by comparing hashes, but I'd like a real explanation of how this happens.

Cheers - N



If the encryption is done client side before upload it should not be possible to do file de-duplication on the server end. The same file from two different users after encryption should be different and shouldn't hash to the same thing.

Most likely they are doing the dodgy Dropbox style "opps we actually store the keys and decrypt to do de-file duplication server side"... which is great until there is an security breach (like when Dropbox got hacked last year)

Personally I wouldn't trust this service for anything important yet until we know more about how it works.






2637 posts

Uber Geek
+1 received by user: 67

Trusted
Subscriber

  Reply # 748029 21-Jan-2013 00:42 Send private message

Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.



You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. 




____________________________________________________
If you're not curious, your brain is already dying...if not dead.



2073 posts

Uber Geek
+1 received by user: 292

Trusted
Subscriber

  Reply # 748039 21-Jan-2013 06:54 Send private message

Linuxluver:
Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.



You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. 


It's no longer hosted in the US...

As far as deduplication goes, I'm pretty sure both Mozy and Crashplan use client side dedupe over secure tunnels, which is now fairly common in the backup space so I wouldn't expect this to be any different.

On our Enterprise Backup platform at work we get roughly 20:1 dedupe ratios, so they'd be looking for some disk savings too.

In other news their site seems to be dead / overloaded

502 posts

Ultimate Geek
+1 received by user: 5


  Reply # 748066 21-Jan-2013 08:59 Send private message

Linuxluver: I joined. 

Noting the free accounts have a 50KB/sec upload limit. 

 


Where did you read that ?

gzt

4841 posts

Uber Geek
+1 received by user: 296

Subscriber

  Reply # 748070 21-Jan-2013 09:09 Send private message

In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.

7740 posts

Uber Geek
+1 received by user: 1083

Trusted
Subscriber

  Reply # 748072 21-Jan-2013 09:18 Send private message

Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)

685 posts

Ultimate Geek
+1 received by user: 27

Subscriber

  Reply # 748075 21-Jan-2013 09:19 Send private message

I cant access it this morning can anyone else?

442 posts

Ultimate Geek
+1 received by user: 68

Trusted
Subscriber

  Reply # 748076 21-Jan-2013 09:24 Send private message

Nah. Never had a reply to registration email or interest email, ever. Since Friday, the site has not been able to load at all, no front page, just times out. Tested with IE, FF, Ch on Slingshot, Voda and 2deg.

It's pretty dissappointing so far for me.

502 posts

Ultimate Geek
+1 received by user: 5


  Reply # 748091 21-Jan-2013 09:53 Send private message

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.


networkn: Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)


Before I register can anyone confirm whether they get more than 50KBs upload with a free account

130 posts

Master Geek
+1 received by user: 6


  Reply # 748096 21-Jan-2013 10:07 Send private message

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.


If you tick the "fixed", you are able to change 50KBS to any other figure you want 

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23
View this topic in a long page with up to 500 replies per page Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





Trending now »

Hot discussions in our forums right now:

Bad lower back.
Created by TimA, last reply by TimA on 27-Jan-2015 21:22 (39 replies)
Pages... 2 3


AdBlockers on Geekzone
Created by freitasm, last reply by freitasm on 27-Jan-2015 21:04 (43 replies)
Pages... 2 3


Windows 10 News - 22 Jan
Created by Regs, last reply by tdgeek on 27-Jan-2015 19:52 (116 replies)
Pages... 6 7 8


Police Speed Campaign - Summer 2014/2015
Created by nzkiwiman, last reply by Bung on 27-Jan-2015 18:28 (96 replies)
Pages... 5 6 7


Spark customers get Lightbox free for 12 months
Created by freitasm, last reply by ARK on 27-Jan-2015 16:35 (137 replies)
Pages... 8 9 10


How (not) to run a hotel
Created by MikeAqua, last reply by BTR on 26-Jan-2015 16:06 (68 replies)
Pages... 3 4 5


Police above the law ?
Created by heylinb4nz, last reply by MikeAqua on 26-Jan-2015 14:27 (116 replies)
Pages... 6 7 8


Top Gear Series 22
Created by WyleECoyoteNZ, last reply by Stan on 27-Jan-2015 19:42 (15 replies)


Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.