A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service

hackaday.com 29 Jan '13, 10pm

A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service

MEGA is a new, encrypted cloud storage system founded by [Kim Dotcom] of MegaUpload fame. They’re selling privacy in that the company won’t have the means to decrypt the data stored by users of its service. As with any software project, their developers are rapidly making improvements to the user interface and secure underpinnings. But it’s fun when we get some insight about possible security problems. It sounds like the issue [Marcan] wrote about has been fixed, but we still had a great time reading his post . The article focuses on the hashes that the website uses to validate data being sucked in from non-SSL sources using some JavaScript. Those insecure sources are a CDN so this type of verification is necessary to make sure that the third-party network hasn’t been compromised as part of an attack on the MEGA site. The particular security issue came when the hashes were...

Full article: http://hackaday.com/2013/01/29/a-look-at-the-now-patched-...

Tweets

@haventfoundme » 30 Jan '13, 10pm
RT @geeknik: A look at the (now patched) #security of [Kim Dotcom's] MEGA cloud storage service [link]
@vpnprotected » 30 Jan '13, 3am
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage s [link] #VPNSecurity [link]
@_yOurbOo » 30 Jan '13, 2am
RT @hackaday: New post: A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service [link]
@IoTFeed » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service: MEGA is a new, encrypte... [link] #iot
@lilithlela » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service #privacy [link]
@GeekHugger » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service [link] via @hackaday
@MossadBlackWolf » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service: MEGA is a new, encrypted clo... [link]
@hackaday » 29 Jan '13, 10pm
New post: A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service [link]
@followed » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service [link]
@DIYEngineering » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service [link]
@SuprayCyber4rt » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service [link]
@imcyberteam » 29 Jan '13, 10pm
A look at the (now patched) security of [Kim Dotcom's] MEGA cloud storage service [link]