That loading/cloud symbol reminds me of something... (https://stripe.com)
Mega has launched
151–160 of 272 posts
Re: Mega has launched
#152Earlier quoted context omitted.
> Megaupload was selling access to content Google and Co is also selling... your content whenever is legal or not
Can you go to google.com/somethingyouwantforfree and just download it? No, no you can't. There is a wildly obvious difference here and unless you're being deliberately dishonest, you'd have to be a complete idiot not to see it.
Dropbox public folders?
Re: Mega has launched
#153I just found a weird things on they ToS [1] ... 8. Our service may automatically delete a piece of data you upload or give someone else access to where it determines that that data is an exact duplicate of original data already on our service. In that case, you will access that original data. Duplicate check, I get that. But, how do they do it? They say the files are encrypted on the browser, so if I upload file X an…
I guess that is generally done using "convergent encryption". There are many variations and they were done by some peer-to-peer DHT filesystem (I was kinda involved in some "skunk" projects developing it).
The idea is simple: if you have data, then you can generate the key from data itself to encrypt and decrypt than data. Then you use hash of encrypted data to look up if server (or just other side) has the same data. If hash exists, no need to send to server - just tell server to bump references. If hash does not exists, just upload data. The key derived from data needs to be stored locally - if you lose it, you will lose data too.
Re: Mega has launched
#154I just found a weird things on they ToS [1] ... 8. Our service may automatically delete a piece of data you upload or give someone else access to where it determines that that data is an exact duplicate of original data already on our service. In that case, you will access that original data. Duplicate check, I get that. But, how do they do it? They say the files are encrypted on the browser, so if I upload file X an…
"A node token ("magic cookie") grants access to a subtree of the issuing user's filesystem. An associated symmetric key is required to decrypt and/or store decryptable data." https://mega.co.nz/#developers Apparently, they use unsalted symmetric key encryption which allows them to discover [hash(file), password] duplicates. By comparison, the old Megaupload would apparently deduplicate based on [hash(file)] matches.…
To be fair, if there's any chance that your password is the same as someone else's, then you have a terrible password.
Re: Mega has launched
#155Re: Mega has launched
#156I just found a weird things on they ToS [1] ... 8. Our service may automatically delete a piece of data you upload or give someone else access to where it determines that that data is an exact duplicate of original data already on our service. In that case, you will access that original data. Duplicate check, I get that. But, how do they do it? They say the files are encrypted on the browser, so if I upload file X an…
I guess that is generally done using "convergent encryption". There are many variations and they were done by some peer-to-peer DHT filesystem (I was kinda involved in some "skunk" projects developing it). The idea is simple: if you have data, then you can generate the key from data itself to encrypt and decrypt than data. Then you use hash of encrypted data to look up if server (or just other side) has the same data…
And deduplication would work since the 2nd person would derive the same key for the data and thus can decrypt it?
Re: Mega has launched
#157hum, is it just me or is there really no way to change the email address and/or the account password?
Re: Mega has launched
#158Earlier quoted context omitted.
Can you go to google.com/somethingyouwantforfree and just download it? No, no you can't. There is a wildly obvious difference here and unless you're being deliberately dishonest, you'd have to be a complete idiot not to see it.
Dropbox public folders?
If they're of any appreciable size, they're paid for by the people hosting, not downloading. You do know this, right?
Re: Mega has launched
#159Earlier quoted context omitted.
"A node token ("magic cookie") grants access to a subtree of the issuing user's filesystem. An associated symmetric key is required to decrypt and/or store decryptable data." https://mega.co.nz/#developers Apparently, they use unsalted symmetric key encryption which allows them to discover [hash(file), password] duplicates. By comparison, the old Megaupload would apparently deduplicate based on [hash(file)] matches.…
To be fair, if there's any chance that your password is the same as someone else's, then you have a terrible password.
Unfortunately for a lot of mundane (non hacker) users, this is very likely.