Seems like people who care about encryption when using the service are essentially putting their faith in Kim Dotcom's hands. If the FBI, e.g. were to break the encryption, people would probably lose trust in the service. Dotcom is carrying a lot of weight on his shoulders in acting as the security agent.
Mega has launched
111–120 of 272 posts
Re: Mega has launched
#112I like the web design. But its a wait and see how far they will get along. Any idea where their servers are hosted?
server farm?
Re: Mega has launched
#113It looks like debug can be activated in the javascript console: type "d=true", navigate, look at your console.
Re: Mega has launched
#114And embraces flat design apparently :p
Re: Mega has launched
#115I just found a weird things on they ToS [1] ... 8. Our service may automatically delete a piece of data you upload or give someone else access to where it determines that that data is an exact duplicate of original data already on our service. In that case, you will access that original data. Duplicate check, I get that. But, how do they do it? They say the files are encrypted on the browser, so if I upload file X an…
From dev docs it looks like file integrity (and thereby duplicate check) is done with CBC-MAC:
"File integrity is verified using chunked CBC-MAC. Chunk sizes start at 128 KB and increase to 1 MB, which is a reasonable balance between space required to store the chunk MACs and the average overhead for integrity-checking partial reads."
Re: Mega has launched
#116Earlier quoted context omitted.
I'm not entirely sure what they mean by a "magic cookie" here. The document does say it uses public/private keys for data transfer. You would not usually use public/private for data storage because of the huge keysizes required.
I think the cookie bit is just an authorization credential. If they use asymmetric encryption for data transfer, then how does that work as part of a convergent encryption scheme? Wouldn't all of the file hashes be different at that point?
I would assume the asymmetric crypto is just for the transfer. In other words you encrypt the data and then send it wrapped in another layer of public/private crypto. Not entirely sure though.
Re: Mega has launched
#117The clean interface makes the tagline (lifted from Daft Punk w/o credit) that much more conspicuous. Clearly, some things haven't changed.
Funny of you to name a crew of sample-based musicians as exemplars of copyright law...
Do you honestly think that any major artist works with unlicensed, uncleared samples? After "Paul's Boutique", I mean?
Re: Mega has launched
#118I just found a weird things on they ToS [1] ... 8. Our service may automatically delete a piece of data you upload or give someone else access to where it determines that that data is an exact duplicate of original data already on our service. In that case, you will access that original data. Duplicate check, I get that. But, how do they do it? They say the files are encrypted on the browser, so if I upload file X an…
"Each file and each folder node uses its own randomly generated 128 bit key. File nodes use the same key for the attribute block and the file data, plus a 64 bit random counter start value and a 64 bit meta MAC to verify the file's integrity."
Not sure I understand this, how can you deduplicate if every file is encrypted via a random key?
Re: Mega has launched
#119Re: Mega has launched
#120Earlier quoted context omitted.
I do not believe Daft Punk has exclusive rights to /\w+er\.? better\.? faster\.? stronger/, but I could be wrong.
Separate from the realm of rights, witholding credit is a dick move. I mean, the guy can afford a dozen cars and a helicopter, but he won't hire a decent copywriter? Fucker.
Everyone knows that it's Daft Punk. Credit isn't needed. What do you want?
"Bigger. Better. Faster. Stronger. Safer. Thanks Daft Punk for all the music!"
Daft Punk sold out by their second album anyway, they're hardly underground geniuses in want of credit now.
Nonetheless, I think it's just more grandiosity and find it irritating that he riffed on the chorus at all.