Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Kim Dotcom's New Mega Encrypted Cloud Storage

forbes.com

Post reply on HN
Print view View original

51–60 of 98 posts

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#51

Post by codesuela »

TheEskimo wrote: post #49
WA wrote: post #31

MEGA could be the only cloud storage I'd actually start trusting. I don't use Dropbox, I don't use Google Drive or anything else, because I'm not interested in other people being able to peep at my data. While I don't perceive Dotcom as a trustable character, his incentive to NOT store any encryption keys on the servers is much higher than any of his competitors.

Use SpiderOak[0] then. They assure strong zero-knowledge privacy and, while the client isn't technically open source, much of it is completely unobfuscated python. I definitely trust SpiderOak with my data. It also has more features than Dropbox or Drive... You can set syncs as between a subset of all devices, create an arbitrary number of syncs, and create some backups which aren't syncs too. It's quite nice. Anothe…

you forgot Wuala, which has a client for every OS (Java).

http://www.wuala.com/en/learn/technology

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#52

Post by davorak »

seferphier wrote: post #18
eps wrote: post #14

I'm getting a blank page with a simple Access Denied when trying to access https://mega.co.nz . Is anyone else getting the same?

same. I can't wait until this service is launched.

I thought they lost that domain and the forbes author was just made a mistake. All of the recent links have pointed to kim.com or kim.com/mega

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#53

Post by TheEskimo »

batgaijin wrote: post #35
WA wrote: post #31

MEGA could be the only cloud storage I'd actually start trusting. I don't use Dropbox, I don't use Google Drive or anything else, because I'm not interested in other people being able to peep at my data. While I don't perceive Dotcom as a trustable character, his incentive to NOT store any encryption keys on the servers is much higher than any of his competitors.

But Dropbox is a YC company. Why do you need the assurance of some fancy acronym like AES?

I do hope this is a joke. "some fancy acronym like AES"... I can't tell if this is a failed attempt to be funny through saying something so ridiculously stupid or if you're serious. There are lots of acronyms that are BS, but AES isn't one of them. It's mathematically backed and has been thoroughly tested to be strong.

Dropbox being a YC company means absolutely zero other than that YC liked their idea and supported them. That doesn't give me any assurance that they won't make a mistake or that an employee won't sell my data.

In fact, Dropbox, despite being a YC company, already slipped up majorly once to the point that every account was completely passwordless. You could just type in random emails at the web login and view some stranger's files. Story here: http://techcrunch.com/2011/06/20/dropbox-security-bug-made-p...

On the other hand, AES has yet to slip up. My AES encrypted data will take a significant fraction of the life of the universe to crack and, YC or no, a single programmer error won't break it.

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#54

Post by TheEskimo »

neumann_alfred wrote: post #47
WA wrote: post #31

MEGA could be the only cloud storage I'd actually start trusting. I don't use Dropbox, I don't use Google Drive or anything else, because I'm not interested in other people being able to peep at my data. While I don't perceive Dotcom as a trustable character, his incentive to NOT store any encryption keys on the servers is much higher than any of his competitors.

As long as a limit of 2GB is okay for you, you can have both the privacy and the "trustability": https://spideroak.com/faq/category/privacy__passwords/

They also give you +1GB per referral which is quite big. It's a little unethical, but you could invite yourself a couple times to double the storage space. Or get actual referrals.

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#55

Post by cdash »

racbart wrote: post #44
ninetax wrote: post #36

So this says all files will be encrypted with RSA, doesn't that mean who ever wants to access them needs the key? Is this just not a successor to Megaupload then? How will sharing files publicly work? Or will it at all?

You could do that if there is a per-file key. But you'd need some client software to store and manage keys for individual files for easy exporting urls including these keys, and I read that MEGA is managed only via web (at least now).

This is built in as I understand it, there is a master key that is used to encrypt a key database that is stored on the server for each user.

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#56

Post by chops »

TheEskimo wrote: post #53
batgaijin wrote: post #35

Earlier quoted context omitted.

But Dropbox is a YC company. Why do you need the assurance of some fancy acronym like AES?

I do hope this is a joke. "some fancy acronym like AES"... I can't tell if this is a failed attempt to be funny through saying something so ridiculously stupid or if you're serious. There are lots of acronyms that are BS, but AES isn't one of them. It's mathematically backed and has been thoroughly tested to be strong. Dropbox being a YC company means absolutely zero other than that YC liked their idea and supported…

Pretty sure it was a joke.

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#57

Post by DanBC »

gregd wrote: post #45
DanBC wrote: post #37

Earlier quoted context omitted.

There's a bunch. Some are better than others. Here's a list, taken from ( http://www.kimpl.com/1297/secure-online-backup-file-sync-ser... ) which also has some reviews. ( https://www.sugarsync.com/ ) ( https://www.dropbox.com/ ) ( https://www.wuala.com/ ) ( https://www.syncplicity.com/ ) ( https://mozy.com/ ) As others say, there's a difference between syncing and hosting; between levels of security; between ease of…

There aren't a bunch. Sugarsync and Dropbox only offer encrypted transport of your files. To actually encrypt the files/folders themselves requires a 3rd party piece. Mega offers everything wrapped in encryption, so presumably, his company will have plausible deniability (zero knowledge) of the files/folders that his service is being used for. From a technical standpoint, I also believe it makes de-duplication imposs…

Dropbox offers encrypted storage of files.

(https://www.dropbox.com/help/27/en)

> Dropbox uses modern encryption methods to both transfer and store your data.

Sure, you're right that the difference is that dropbox holds the keys and mega doesn't. But you're also ignoring the fact that Dotcom has had considerable interest from law enforcement in the past, and that some companies have cooperated with law enforcement by pushing malformed client software to some customers.

(http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/)

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#58

Post by gregd »

gregd wrote: post #45
DanBC wrote: post #37

Earlier quoted context omitted.

There's a bunch. Some are better than others. Here's a list, taken from ( http://www.kimpl.com/1297/secure-online-backup-file-sync-ser... ) which also has some reviews. ( https://www.sugarsync.com/ ) ( https://www.dropbox.com/ ) ( https://www.wuala.com/ ) ( https://www.syncplicity.com/ ) ( https://mozy.com/ ) As others say, there's a difference between syncing and hosting; between levels of security; between ease of…

There aren't a bunch. Sugarsync and Dropbox only offer encrypted transport of your files. To actually encrypt the files/folders themselves requires a 3rd party piece. Mega offers everything wrapped in encryption, so presumably, his company will have plausible deniability (zero knowledge) of the files/folders that his service is being used for. From a technical standpoint, I also believe it makes de-duplication imposs…

Thanks for the clarification on Dropbox. So it appears that the "key" (pun intended) is who has the key. Dropbox offering "encrypted" storage while holding the key, isn't really encrypted storage now is it. :)

Re: Kim Dotcom's New Mega Encrypted Cloud Storage

#60

Post by WA »

TheEskimo wrote: post #49
WA wrote: post #31

MEGA could be the only cloud storage I'd actually start trusting. I don't use Dropbox, I don't use Google Drive or anything else, because I'm not interested in other people being able to peep at my data. While I don't perceive Dotcom as a trustable character, his incentive to NOT store any encryption keys on the servers is much higher than any of his competitors.

Use SpiderOak[0] then. They assure strong zero-knowledge privacy and, while the client isn't technically open source, much of it is completely unobfuscated python. I definitely trust SpiderOak with my data. It also has more features than Dropbox or Drive... You can set syncs as between a subset of all devices, create an arbitrary number of syncs, and create some backups which aren't syncs too. It's quite nice. Anothe…

Thanks for the recommendations. I'll check them out.
Post reply on HN