Kim Dotcom's Mega plan

Forums › IT Pro and developers › Kim Dotcom's Mega plan

1 | ... | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | ... | 23

2984 posts

Uber Geek
+1 received by user: 397

Trusted

#747988 20-Jan-2013 22:17

gareth41:
PottsyNZ: Watching the livestream...jebus..hardout...go Tiki Tane!

stream seems to have gone dead, can anyone else access it? I had it going before then it cut out during music after the questions/answers.

It's ended already.

Sony

sonyxperiageek

2984 posts

Uber Geek
+1 received by user: 397

Trusted

#747989 20-Jan-2013 22:19

Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..

Sony

gareth41

742 posts

Ultimate Geek
+1 received by user: 79

#747997 20-Jan-2013 22:30

sonyxperiageek: Anyway, looks like I can access Mega now, and I had to register with an email address OTHER than Hotmail, but uploading a small file is still not working.. I imagine it should be sorted out by tomorrow..

I was able to upload a 120mb mp3 straight away.

hopefully its a genuine fault that other files dont upload or have trouble?

caldazar

459 posts

Ultimate Geek
+1 received by user: 10

#748011 20-Jan-2013 23:10

dkedr: For those asking how the encryption is done, I found this https://mega.co.nz/#developers

In addition to the symmetric key, each user account has a 2048 bit RSA key pair to securely receive data. Its private component is stored encrypted with the user's symmetric master key.

And

Each user account uses a symmetric master key to ECB-encrypt all keys of the nodes it keeps in its own trees. This master key is stored on MEGA's servers, encrypted with a hash derived from the user's login password.

I'm not an expert in this area.... but if they are storing the key pairs and using the master account hash (generated from the user's password) then in theory, can't they gain access to the files? I guess... if Mega discard the hash at the end of each authenticated session (so only use it for authentication), then they can't gain access.

Or am I incorrect / misguided in my interpretation? If I'm wrong, some of my comments below might also be wrong ;-)

I guess for the intended purpose, it seems it is designed so that people can upload encrypted files and download again (in a convenient manner). They can expect that their data can't be looked at by others and it's not searchable/accessible, so a legal authority would have to go to further lengths to get access to the data. E.g. most likely a search warrant against a specific individual to even get access to a particular account's encrypted files. (Where as in the past.. they could search Megaupload just like anyone else)...

If Mega is not keeping the original password hash on file, then the end user would have to cough up their password (or brute force would be required...). Perhaps with the right search warrant/court order (tin-foil hat), Mega could be asked to store the hash for a user account on next login?. (I'm not a lawyer... so I don't know if that could ever happen).

Maybe a service like this has a place. Even as a tool to more securely send files to a colleague, client, friend. I guess time will tell. Obviously, you wouldn't likely see it being used to store secret government files, hospital patient data etc... Well.. I hope not anyway... but perhaps nothing would truly surprise me... ;-)

Linuxluver

5833 posts

Uber Geek
+1 received by user: 1639

Trusted

Subscriber

#748015 20-Jan-2013 23:35

I joined.

Noting the free accounts have a 50KB/sec upload limit.

The Pro 1 accounts are €9.90 / month. Not too bad for what you get (500GB of space and 1 TB of data transfer/month)

_____________________________________________________________________

I've been on Geekzone over 16 years..... Time flies....

Ragnor

8279 posts

Uber Geek
+1 received by user: 585

Trusted

#748025 21-Jan-2013 00:25

Talkiet:

I hear what you're saying but I don't believe it applies to duplicates within your own uploads. For deduplication to make sense it needs to be across all users (or all users housed at a node or whatever)

Whatever the situation, that quoted condition very very clearly says to me that they have the ability to determine if 2 files uploaded by different users are the same. Now I would imagine there's a clever way to do this by comparing hashes, but I'd like a real explanation of how this happens.

Cheers - N

If the encryption is done client side before upload it should not be possible to do file de-duplication on the server end. The same file from two different users after encryption should be different and shouldn't hash to the same thing.

Most likely they are doing the dodgy Dropbox style "opps we actually store the keys and decrypt to do de-file duplication server side"... which is great until there is an security breach (like when Dropbox got hacked last year)

Personally I wouldn't trust this service for anything important yet until we know more about how it works.

Apple TV

Stream your favourite shows now on Apple TV (affiliate link).

Linuxluver

5833 posts

Uber Geek
+1 received by user: 1639

Trusted

Subscriber

#748029 21-Jan-2013 00:42

Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.

You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services.

_____________________________________________________________________

I've been on Geekzone over 16 years..... Time flies....

insane

3325 posts

Uber Geek
+1 received by user: 1006

ID Verified

Trusted

2degrees

Subscriber

#748039 21-Jan-2013 06:54

Linuxluver:
Ragnor:

Personally I wouldn't trust this service for anything important yet until we know more about how it works.

You can at least know the US can't directly spy on your files as they routinely do on US-based cloud services. You're a "foreigner" so you have no right to privacy on any US-based services.

It's no longer hosted in the US...

As far as deduplication goes, I'm pretty sure both Mozy and Crashplan use client side dedupe over secure tunnels, which is now fairly common in the backup space so I wouldn't expect this to be any different.

On our Enterprise Backup platform at work we get roughly 20:1 dedupe ratios, so they'd be looking for some disk savings too.

In other news their site seems to be dead / overloaded

xlinknz

1141 posts

Uber Geek
+1 received by user: 168

Trusted

#748066 21-Jan-2013 08:59

Linuxluver: I joined.

Noting the free accounts have a 50KB/sec upload limit.

Where did you read that ?

gzt

18689 posts

Uber Geek
+1 received by user: 7827

Lifetime subscriber

#748070 21-Jan-2013 09:09

In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.

networkn

Networkn
32871 posts

Uber Geek
+1 received by user: 15468

ID Verified

Trusted

Lifetime subscriber

#748072 21-Jan-2013 09:18

Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)

Lego

Shop now for Lego sets and other gifts (affiliate link).

myopinion

939 posts

Ultimate Geek
+1 received by user: 112

#748075 21-Jan-2013 09:19

I cant access it this morning can anyone else?

gundar

488 posts

Ultimate Geek
+1 received by user: 80

Trusted

#748076 21-Jan-2013 09:24

Nah. Never had a reply to registration email or interest email, ever. Since Friday, the site has not been able to load at all, no front page, just times out. Tested with IE, FF, Ch on Slingshot, Voda and 2deg.

It's pretty dissappointing so far for me.

xlinknz

1141 posts

Uber Geek
+1 received by user: 168

Trusted

#748091 21-Jan-2013 09:53

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.

networkn: Yah I couldn't get my head around a max 50K upload, you surely wouldn't bother :)

Before I register can anyone confirm whether they get more than 50KBs upload with a free account

zhuyan

177 posts

Master Geek
+1 received by user: 13

#748096 21-Jan-2013 10:07

gzt: In account settings upload speed is set to 'automatic' by default. There is a greyed out 'fixed' option which is set at 50KBs by default. That could be the source of the confusion here.

If you tick the "fixed", you are able to change 50KBS to any other figure you want

1 | ... | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | ... | 23