Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mega has launched

mega.co.nz

Post reply on HN
Print view View original

51–60 of 272 posts

Re: Mega has launched

#51

Post by dabeeeenster »

gjulianm wrote: post #48

I just found a weird things on they ToS [1] ... 8. Our service may automatically delete a piece of data you upload or give someone else access to where it determines that that data is an exact duplicate of original data already on our service. In that case, you will access that original data. Duplicate check, I get that. But, how do they do it? They say the files are encrypted on the browser, so if I upload file X an…

Something doesn't smell right regarding the browser-based private key encryption. What I think is happening is that they could theoretically decrypt all your content, but the fact that they dont, and would have to jump through some technical hoops to do so, is maybe enough for them to argue that they don't know what is being uploaded?

Re: Mega has launched

#53

Post by dabeeeenster »

beala wrote: post #49
micheljansen wrote: post #40

Does anyone understand how their implementation of client-side encryption is actually supposed to make my data safer? After logging in for the first time, a 2048-bit RSA key pair was generated, but it seems that every time I log in I just use a username (email) and password. Does that mean the RSA private key is stored on MEGA's servers? If so, doesn't that render the whole "client side encryption" bit moot? If MEGA…

According to the help page, no keys (except the public key) ever leave the client [1]. [1] https://mega.co.nz/#help_security EDIT: The senario in the posts above sound more likely. The exact text of the help is "No usable encryption keys ever leave the client computers (with the exception of RSA public keys)." So they probably store an encrypted version of the keys server side.

In that case if I log in with a different browser, how do I access my stuff?

How do other people access my stuff?

Doesn't work...

Re: Mega has launched

#54

Post by markshead »

It appears you can upload a file without creating an account. So without generating a key first. Or at least without generating a key that is somehow protected by a password.

Re: Mega has launched

#55

Post by dexter313 »

gjulianm wrote: post #48

I just found a weird things on they ToS [1] ... 8. Our service may automatically delete a piece of data you upload or give someone else access to where it determines that that data is an exact duplicate of original data already on our service. In that case, you will access that original data. Duplicate check, I get that. But, how do they do it? They say the files are encrypted on the browser, so if I upload file X an…

The user's javascript that encrypted the file can also make a hash send it to mega, and then they check if they already have that.

EDIT: They never get to see your key or what is in the file.

Re: Mega has launched

#56

Post by micheljansen »

frewsxcv wrote: post #27
micheljansen wrote: post #21

After signing up, MEGA suggested that I download Google Chrome to use the service (I was using Safari). I was expecting some affiliate link there, but there wasn't any.

Well, why do you use Safari?

I use iCloud to sync bookmarks and open tabs between my Mac and iDevices (Chrome is not nearly as good as Safari yet on iOS).

Re: Mega has launched

#57

Post by zalew »

"Warning: You are using an outdated browser, which adversely affects your file transfer performance. Please upgrade to Google Chrome."

is this a joke? I'm on FF19

Re: Mega has launched

#58

Post by alexqgb »

prezjordan wrote: post #16
alexqgb wrote: post #13

The clean interface makes the tagline (lifted from Daft Punk w/o credit) that much more conspicuous. Clearly, some things haven't changed.

I do not believe Daft Punk has exclusive rights to /\w+er\.? better\.? faster\.? stronger/, but I could be wrong.

Separate from the realm of rights, witholding credit is a dick move. I mean, the guy can afford a dozen cars and a helicopter, but he won't hire a decent copywriter?

Fucker.

Re: Mega has launched

#59

Post by csomar »

Kudos wrote: post #11

They're not caching any of their static resources, that might explain the amount of bandwidth use Dotcom is apparently seeing. Edit: They're not gzipping any of the 2.5MB in static resources either. I realise that probably doesn't impact their API calls that are failing, but it's still a big oversight.

If you are opening their app for the first time, it doesn't matter since you are going to download the content anyway. He has only one page, so navigation doesn't reload the content.

Not using Gzip is obviously a big mistake.

Post reply on HN