Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23


2150 posts

Uber Geek
+1 received by user: 238

Trusted

  Reply # 747988 20-Jan-2013 22:17
Send private message

gareth41:
PottsyNZ: Watching the livestream...jebus..hardout...go Tiki Tane!


stream seems to have gone dead, can anyone else access it?  I had it going before then it cut out during music after the questions/answers.


It's ended already.






2150 posts

Uber Geek
+1 received by user: 238

Trusted

  Reply # 747989 20-Jan-2013 22:19
Send private message

Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..




 
 
 
 


596 posts

Ultimate Geek
+1 received by user: 25

Subscriber

  Reply # 747997 20-Jan-2013 22:30
Send private message

sonyxperiageek: Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..


I was able to upload a 120mb mp3 straight away.

hopefully its a genuine fault that other files dont upload or have trouble?

422 posts

Ultimate Geek
+1 received by user: 3


  Reply # 748011 20-Jan-2013 23:10
Send private message

dkedr: For those asking how the encryption is done, I found this https://mega.co.nz/#developers

In addition to the symmetric key, each user account has a 2048 bit RSA key pair to securely receive data. Its private component is stored encrypted with the user's symmetric master key.


And

Each user account uses a symmetric master key to ECB-encrypt all keys of the nodes it keeps in its own trees. This master key is stored on MEGA's servers, encrypted with a hash derived from the user's login password.


I'm not an expert in this area.... but if they are storing the key pairs and using the master account hash (generated from the user's password) then in theory, can't they gain access to the files? I guess... if Mega discard the hash at the end of each authenticated session (so only use it for authentication), then they can't gain access.

Or am I incorrect / misguided in my interpretation? If I'm wrong, some of my comments below might also be wrong ;-)

I guess for the intended purpose, it seems it is designed so that people can upload encrypted files and download again (in a convenient manner). They can expect that their data can't be looked at by others and it's not  searchable/accessible, so a legal authority would have to go to further lengths to get access to the data. E.g. most likely a search warrant against a specific individual to even get access to a particular account's encrypted files. (Where as in the past.. they could search Megaupload just like anyone else)...

If Mega is not keeping the original password hash on file, then the end user would have to cough up their password (or brute force would be required...). Perhaps with the right search warrant/court order (tin-foil hat), Mega could be asked to store the hash for a user account on next login?. (I'm not a lawyer... so I don't know if that could ever happen).

Maybe a service like this has a place. Even as a tool to more securely send files to a colleague, client, friend. I guess time will tell. Obviously, you wouldn't likely see it being used to store secret government files, hospital patient data etc... Well.. I hope not anyway... but perhaps nothing would truly surprise me... ;-)



4668 posts

Uber Geek
+1 received by user: 857

Trusted
Subscriber

  Reply # 748015 20-Jan-2013 23:35
Send private message

I joined. 

Noting the free accounts have a 50KB/sec upload limit. 

The Pro 1 accounts are €9.90 / month. Not too bad for what you get (500GB of space and 1 TB of data transfer/month) 




____________________________________________________
I'm on a high fibre diet. 

 

High fibre diet


8019 posts

Uber Geek
+1 received by user: 385

Trusted
Subscriber

  Reply # 748025 21-Jan-2013 00:25
Send private message

Talkiet: 

I hear what you're saying but I don't believe it applies to duplicates within your own uploads. For deduplication to make sense it needs to be across all users (or all users housed at a node or whatever)

Whatever the situation, that quoted condition very very clearly says to me that they have the ability to determine if 2 files uploaded by different users are the same. Now I would imagine there's a clever way to do this by comparing hashes, but I'd like a real explanation of how this happens.

Cheers - N



If the encryption is done client side before upload it should not be possible to do file de-duplication on the server end. The same file from two different users after encryption should be different and shouldn't hash to the same thing.

Most likely they are doing the dodgy Dropbox style "opps we actually store the keys and decrypt to do de-file duplication server side"... which is great until there is an security breach (like when Dropbox got hacked last year)

Personally I wouldn't trust this service for anything important yet until we know more about how it works.






4668 posts

Uber Geek
+1 received by user: 857

Trusted
Subscriber

  Reply # 748029 21-Jan-2013 00:42
Send private message

Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.



You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. 




____________________________________________________
I'm on a high fibre diet. 

 

High fibre diet


2242 posts

Uber Geek
+1 received by user: 353

Trusted
Subscriber

  Reply # 748039 21-Jan-2013 06:54
Send private message

Linuxluver:
Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.



You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services. 


It's no longer hosted in the US...

As far as deduplication goes, I'm pretty sure both Mozy and Crashplan use client side dedupe over secure tunnels, which is now fairly common in the backup space so I wouldn't expect this to be any different.

On our Enterprise Backup platform at work we get roughly 20:1 dedupe ratios, so they'd be looking for some disk savings too.

In other news their site seems to be dead / overloaded

730 posts

Ultimate Geek
+1 received by user: 61


  Reply # 748066 21-Jan-2013 08:59
Send private message

Linuxluver: I joined. 

Noting the free accounts have a 50KB/sec upload limit. 

 


Where did you read that ?

gzt

9093 posts

Uber Geek
+1 received by user: 1252


  Reply # 748070 21-Jan-2013 09:09
Send private message

In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.

14705 posts

Uber Geek
+1 received by user: 3704

Trusted
Subscriber

  Reply # 748072 21-Jan-2013 09:18
Send private message

Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)

822 posts

Ultimate Geek
+1 received by user: 52


  Reply # 748075 21-Jan-2013 09:19
Send private message

I cant access it this morning can anyone else?

488 posts

Ultimate Geek
+1 received by user: 80

Trusted

  Reply # 748076 21-Jan-2013 09:24
Send private message

Nah. Never had a reply to registration email or interest email, ever. Since Friday, the site has not been able to load at all, no front page, just times out. Tested with IE, FF, Ch on Slingshot, Voda and 2deg.

It's pretty dissappointing so far for me.

730 posts

Ultimate Geek
+1 received by user: 61


  Reply # 748091 21-Jan-2013 09:53
Send private message

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.


networkn: Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)


Before I register can anyone confirm whether they get more than 50KBs upload with a free account

153 posts

Master Geek
+1 received by user: 9


  Reply # 748096 21-Jan-2013 10:07
Send private message

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.


If you tick the "fixed", you are able to change 50KBS to any other figure you want 

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | ... | 23
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Vocus New Zealand on the block as Aussies bail
Posted 23-Oct-2017 17:06


Vodafone TV — television in the cloud
Posted 17-Oct-2017 19:29


Nokia 8 review: Classy midrange pure Android phone
Posted 16-Oct-2017 07:27


Why carriers might want to embrace Commerce Commission study, MVNOs
Posted 13-Oct-2017 09:42


Fitbit launches Ionic, its health and fitness smartwatch
Posted 12-Oct-2017 15:52


Xero launches machine learning automation to improve coding accuracy for small businesses
Posted 12-Oct-2017 15:45


Bank of New Zealand uses Intel AI to detect financial crime
Posted 12-Oct-2017 15:39


Sony launches Xperia XZ1, a smartphone with real-time 3D capture
Posted 11-Oct-2017 10:26


Notes on Nokia’s phone comeback
Posted 10-Oct-2017 10:06


Air New Zealand begins Inflight Wi-Fi rollout
Posted 9-Oct-2017 20:16


The latest mobile phones in perspective
Posted 9-Oct-2017 18:34


Review: Acronis True Image 2018 — serious backup
Posted 8-Oct-2017 11:22


Lenovo launches ThinkPad Anniversary Edition 25
Posted 7-Oct-2017 23:16


Less fone, more tech as Vodafone gets brand make-over
Posted 6-Oct-2017 08:16


API Talent Achieves AWS MSP Partner Status
Posted 5-Oct-2017 21:20



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.