west13OP
#1
megaupload is back enjoy
Forum archive
Back to General News
You won't know they been watching you until they come knocking at your door inviting you for tea and cookies at their cubical.Have you read the article? Mega is full of holes. It's so called 'air-tight' security been compromised from day 1. It's just as "secure" as the others.
DisclosureYour data is encrypted by you before upload to our system and therefore we do not and cannot access that content unless we are provided with the decryption key. You may give access to others by providing them with a link and decryption key and you shall be responsible for their compliance with this Policy.If we think it is necessary or we have to by law in any jurisdiction then we are entitled to give your information to the authorities. We reserve the right to assist any law enforcement agency with investigations, including and limited to by way of disclosure of information to them or their agents. We also reserve the right to comply with any legal processes, including but not limited to subpoenas, search warrants and court orders. We may disclose your information to enforce or apply our Terms or any other agreement we have with you; or to protect the rights, property, or safety of us or our other users or the operation of our services and the website.We will not sell or otherwise provide your personal information to a third party other than our authorised resellers and service providers, or make any other use of personal information for any purpose which is not specifically allowed under this Policy or our Terms or is not incidental to the normal use of our services.We strongly urge you to use robust anti virus and firewall protection as we cannot guarantee the security of transmission from and to your computer over the Internet and thus cannot guarantee there will be no unauthorised access. Also, if you lose or otherwise allow access to your encryption keys, you will lose the security of your data. In addition if you misplace or forget your encryption keys we have no ability to recover them for you, you will lose access to your data.
[/quote]The above is just the disclosure portion from the privacy page, you can read the entire privacy from the link as quoted, and their term of use from https://mega.co.nz/#terms.I think it's a normal matter, instead of the usual getting generated a download and an erase links (for example as like the one incorporated by Ziddu.com), or the ability to restrict download by enabling password to trigger the download (such as used by MediaFire), or use password to execute the decompression of a compressed file (such as used by WINRAR/WINZIP). This one generate a download link + encryption/decryption key. Where you must provide both to any one wanting to download your file. Otherwise no access. Same case with yourself to access your already uploaded files must use that key to gain access to it.Troublesome, yes. Security leak proof, no. All you need to remember is to keep a log of your uploaded files.But I don't see this as anything new. In fact it's quite normal, in every website, if you forgot your username, password, secret question, of cause you'll be locked out. But I don't think changing your password will result to loss of your files. Won't make any sense. While also, if you think about the times you upload files to say MultiUpload or MirrorCreator, etc. or any free file sharing sites. If you loss the link generated, for sure you loss access to your already uploaded files. Same case with the method applied by Mega. So I don't see this as a big deal. Just troublesome. As for them deleting your files without prior notice, it's something many of you had experience sharing files through MediaFire. Again, nothing new about it.Your main concern should be regarding these (but not limited to just these);
1. The encryption-decryption key is generated online while you upload it. It's easy for a hacker to breech the security.
Anyone with sufficient know-how should be able to intercept.
It would have been more secured, if the site provide a program to use offline to encrypt it before uploading specifically to their site.
2. The term of use arbitrary agreement is subjected to New Zealand Law. Do you know what their cyber law policies are?
Does the New Zealand law have any affiliation to international law or your countries? In regard to term of use, privacy, etc.
Does the New Zealand law goes in accordance to your country's law? Does your country have any arbitrary bilateral agreement with
New Zealand? How does the New Zealand law protect you and your activity while using Mega's services?
3. The term of use stated if there is any law suit caused by your activity, you are subjected to take full responsibility. For yourself
and for Mega's. That includes as a result of anyone using your uploaded files that you shared.
Such include any law suit expenses that resulted from the action taken; all the bills are on you.
4. Mega has the right to collect your personal data from filling their forms, cookies embedded in your computer, etc. for whatever
purpose they deem necessary.
5. Mega is awarded the right to use and share/disclose your personal database if deem required to submit to authorities,
to generate financial benefit to cover for the service provided to your disposal, including the service provided due to your sharing
the links to your uploaded files and to maintain it's existence in their service.
6. Mega is granted the rights to duplicate, redistribute, disclose the files you uploaded using their service for their benefit.
If any infringement to intellectual copy rights, again....the blame and fault is on you and you agree to release Mega from any
responsibility resulted.To understand fully on what your ultimate concerns should be, I strongly suggest you guys read their privacy and term of use document properly, make sure you'd understand fully about it's content, meaning, and implication. See how you'll perceive their terms. For me, losing access to any files that I upload due to misplacing the encryption key is the least of my concern.
Indicted Megaupload founder opens new sharing site
Duncan Idaho
#2
name of the website?
necr0
#3
It's called MEGA.
https://mega.co.nz
https://mega.co.nz
west13OP
#4
heard it is a setup to bust people enjoy from inside fbi told me in email
Duncan Idaho
#5
eh 50 GB of free storage, but weakass Encrypting and stupid password set up? eh... (if you account gets hacked or your password gets lost/forgotten you lose all your files)
necr0
#6
west13 · #4heard it is a setup to bust people enjoy from inside fbi told me in emailI highly doubt that.
Loonylion
#7
west13 · #4heard it is a setup to bust people enjoy from inside fbi told me in emailI very much doubt the fbi would tell you anything.
necr0
#8
I'd go further. I don't think the FBI knows he exists.
Neon32
#9
i also read that people wont be able to track what files are stored in MEGA or viceversa
read this:http://www.forbes.com/sites/andygreenberg/2013/01/21/researchers-warn-megas-new-encrypted-cloud-cant-keep-its-megasecurity-promises/
read this:http://www.forbes.com/sites/andygreenberg/2013/01/21/researchers-warn-megas-new-encrypted-cloud-cant-keep-its-megasecurity-promises/
Prectorian
#10
necr0 · #8I'd go further. I don't think the FBI knows he exists.Anything floating around on the internet bound to get sniff by the cyber crime division.
You won't know they been watching you until they come knocking at your door inviting you for tea and cookies at their cubical.Have you read the article? Mega is full of holes. It's so called 'air-tight' security been compromised from day 1. It's just as "secure" as the others.
Duncan Idaho
#11
i pointed this out, and it's horrible in the sense if you lose the password or your account gets hacked and you change the password you lose all the files you have uploaded.
nex26
#12
necr0 · #6I highly doubt that.because it has never happened before. nope, not once
necr0
#13
Prectorian · #10You won't know they been watching you until they come knocking at your door inviting you for tea and cookies at their cubical.Happened to me once already.
Prectorian
#14
Duncan Idaho · #11i pointed this out, and it's horrible in the sense if you lose the password or your account gets hacked and you change the password you lose all the files you have uploaded.Is this below what you were concern about?[quote author=https://mega.co.nz/#privacy]
DisclosureYour data is encrypted by you before upload to our system and therefore we do not and cannot access that content unless we are provided with the decryption key. You may give access to others by providing them with a link and decryption key and you shall be responsible for their compliance with this Policy.If we think it is necessary or we have to by law in any jurisdiction then we are entitled to give your information to the authorities. We reserve the right to assist any law enforcement agency with investigations, including and limited to by way of disclosure of information to them or their agents. We also reserve the right to comply with any legal processes, including but not limited to subpoenas, search warrants and court orders. We may disclose your information to enforce or apply our Terms or any other agreement we have with you; or to protect the rights, property, or safety of us or our other users or the operation of our services and the website.We will not sell or otherwise provide your personal information to a third party other than our authorised resellers and service providers, or make any other use of personal information for any purpose which is not specifically allowed under this Policy or our Terms or is not incidental to the normal use of our services.We strongly urge you to use robust anti virus and firewall protection as we cannot guarantee the security of transmission from and to your computer over the Internet and thus cannot guarantee there will be no unauthorised access. Also, if you lose or otherwise allow access to your encryption keys, you will lose the security of your data. In addition if you misplace or forget your encryption keys we have no ability to recover them for you, you will lose access to your data.
[/quote]The above is just the disclosure portion from the privacy page, you can read the entire privacy from the link as quoted, and their term of use from https://mega.co.nz/#terms.I think it's a normal matter, instead of the usual getting generated a download and an erase links (for example as like the one incorporated by Ziddu.com), or the ability to restrict download by enabling password to trigger the download (such as used by MediaFire), or use password to execute the decompression of a compressed file (such as used by WINRAR/WINZIP). This one generate a download link + encryption/decryption key. Where you must provide both to any one wanting to download your file. Otherwise no access. Same case with yourself to access your already uploaded files must use that key to gain access to it.Troublesome, yes. Security leak proof, no. All you need to remember is to keep a log of your uploaded files.But I don't see this as anything new. In fact it's quite normal, in every website, if you forgot your username, password, secret question, of cause you'll be locked out. But I don't think changing your password will result to loss of your files. Won't make any sense. While also, if you think about the times you upload files to say MultiUpload or MirrorCreator, etc. or any free file sharing sites. If you loss the link generated, for sure you loss access to your already uploaded files. Same case with the method applied by Mega. So I don't see this as a big deal. Just troublesome. As for them deleting your files without prior notice, it's something many of you had experience sharing files through MediaFire. Again, nothing new about it.Your main concern should be regarding these (but not limited to just these);
1. The encryption-decryption key is generated online while you upload it. It's easy for a hacker to breech the security.
Anyone with sufficient know-how should be able to intercept.
It would have been more secured, if the site provide a program to use offline to encrypt it before uploading specifically to their site.
2. The term of use arbitrary agreement is subjected to New Zealand Law. Do you know what their cyber law policies are?
Does the New Zealand law have any affiliation to international law or your countries? In regard to term of use, privacy, etc.
Does the New Zealand law goes in accordance to your country's law? Does your country have any arbitrary bilateral agreement with
New Zealand? How does the New Zealand law protect you and your activity while using Mega's services?
3. The term of use stated if there is any law suit caused by your activity, you are subjected to take full responsibility. For yourself
and for Mega's. That includes as a result of anyone using your uploaded files that you shared.
Such include any law suit expenses that resulted from the action taken; all the bills are on you.
4. Mega has the right to collect your personal data from filling their forms, cookies embedded in your computer, etc. for whatever
purpose they deem necessary.
5. Mega is awarded the right to use and share/disclose your personal database if deem required to submit to authorities,
to generate financial benefit to cover for the service provided to your disposal, including the service provided due to your sharing
the links to your uploaded files and to maintain it's existence in their service.
6. Mega is granted the rights to duplicate, redistribute, disclose the files you uploaded using their service for their benefit.
If any infringement to intellectual copy rights, again....the blame and fault is on you and you agree to release Mega from any
responsibility resulted.To understand fully on what your ultimate concerns should be, I strongly suggest you guys read their privacy and term of use document properly, make sure you'd understand fully about it's content, meaning, and implication. See how you'll perceive their terms. For me, losing access to any files that I upload due to misplacing the encryption key is the least of my concern.
Duncan Idaho
#15
@prectorian yes, given that windows has the habit of failing on me i am concerned that if i try to store some pf my private files there i am F***ed since the agreement makes it clear that with no encryption no dice (this is more troublesome on the end that whenever windows fails me i need to do a clean install losing all data, unles EASUS recovery data wizard can salvage the data )
Showing posts 1–15 of 15 · This discussion is archivedBack to top