Slashdot: News for Nerds


Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Mega's New Encrypted Cloud May Be Full Of Holes

Sparrowvsrevolution (1926150) writes | about a year and a half ago

Encryption 0

Sparrowvsrevolution (1926150) writes "Kim Dotcom's embattled company Mega relaunched over the weekend with a new promise that the upload service would encrypt all user data end-to-end. But the crypto community has started auditing Mega's code, and the response has generally been a collective facepalm. Among the problems in Mega's crypto implementation: It uses only browser-based encryption, which has generally been dismissed as insecure and would allow Mega or anyone who breaks its SSL to read users' plaintext at any time; It has no mechanism for allowing users to change a compromised password without losing access to their data permanently; It uses weak 1024-bit encryption keys in certain places, and several other potential problems.

Some in the security community have pointed out that Mega's intentions may not be legitimate security so much as plausible deniability--It only needs enough encryption to claim it can't see whether its users are uploading copyrighted content. But users should nonetheless wary of the site's inflated security claims."

Link to Original Source

cancel ×


Check for New Comments
Slashdot Account

Need an Account?

Forgot your password?

Don't worry, we never post anything without your permission.

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>
Create a Slashdot Account