Re: [liberationtech] Mega

2013-02-01 Thread Petter Ericson
Seems like the good mr. Bubbles is at least partially putting his money where his mouth is. http://thenextweb.com/insider/2013/02/01/kim-dotcom-puts-up-13500-bounty-for-first-person-to-break-megas-security-system/ Have a go, everyone! Best /P On 23 January, 2013 - Bernard Tyers - ei8fdb

Re: [liberationtech] Mega

2013-01-27 Thread Brad Beckett
Mega needs an optional Chrome and Firefox plugin -- what Crypto.cat did, but it could be optional. They also need a desktop client like Dropbox so I can encrypt my files automatically prior to uploading. On Sun, Jan 27, 2013 at 1:56 AM, Jerzy Ɓogiewa jerz...@interia.eu wrote: More danger with

Re: [liberationtech] Mega

2013-01-27 Thread scarp
Randolph D.: *www.cloudfogger.com* or: http://retroshare.sf.net 2013/1/27 Brad Beckett bradbeck...@gmail.com Mega needs They also need a desktop client like Dropbox so I can encrypt my files automatically prior to uploading. I believe Cyphertite will encrypt your files prior to

Re: [liberationtech] Mega

2013-01-27 Thread Brad Beckett
Yes exactly what I was thinking, but MegaUpload needs to come up with Mac, PC, and Linuxdesktop clients -- stat. On Sun, Jan 27, 2013 at 2:20 AM, scarp sc...@tormail.org wrote: Randolph D.: *www.cloudfogger.com* or: http://retroshare.sf.net 2013/1/27 Brad Beckett bradbeck...@gmail.com

Re: [liberationtech] Mega

2013-01-23 Thread Rich Kulawiec
On Mon, Jan 21, 2013 at 11:48:38PM +, Jacob Appelbaum wrote: I'm not clear on most of the Retroshare design. Is there a threat model? I share this lack of clarity. One of the things that I perceive as a significant threat to software like this is full compromise of a trusted party's system

Re: [liberationtech] Mega

2013-01-23 Thread Andreas Bader
On 01/23/2013 03:41 AM, Alex Comninos wrote: Cracking tool milks weakness to reveal some Mega passwords Dotcom's Mega aids crackers by sending password hashes in plain-text e-mail. Really! http://arstechnica.com/security/2013/01/cracking-tool-milks-weakness-to-reveal-some-mega-passwords/

Re: [liberationtech] Mega

2013-01-23 Thread Eugen Leitl
On Wed, Jan 23, 2013 at 07:40:13AM -0500, bbrewer wrote: Andreas Bader noergelpi...@hotmail.de wrote: Mega seems also to have an exploitable bug for email spaming. A lot of bloggers report this. All the money in the world, and still, so many listed problems on this new service.

Re: [liberationtech] Mega

2013-01-23 Thread bbrewer
Eugen Leitl eu...@leitl.org wrote: You don't seem to know Kim dotcom Schmitz well. I remember seeing him on the gum ball (3000) rallies (in video, not lucky enough to partake) , I believe before he was 'dotcom'' and realizing how arrogant he is/was/etc. I just think it'd be a way better

Re: [liberationtech] Mega

2013-01-23 Thread Andreas Bader
On 01/23/2013 01:40 PM, bbrewer wrote: Andreas Bader noergelpi...@hotmail.de wrote: Mega seems also to have an exploitable bug for email spaming. A lot of bloggers report this. All the money in the world, and still, so many listed problems on this new service. Malicious intent, or just

Re: [liberationtech] Mega

2013-01-23 Thread Bernard Tyers - ei8fdb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 23 Jan 2013, at 12:45, Eugen Leitl wrote: On Wed, Jan 23, 2013 at 07:40:13AM -0500, bbrewer wrote: All the money in the world, and still, so many listed problems on this new service. Malicious intent, or just complete rush to give the

Re: [liberationtech] Mega

2013-01-21 Thread Brad Beckett
It would be nice if it actually worked. I cannot successfully upload nor can anybody I know. It appears almost no better then OwnCloud. Big disappointment as of now, but I'm going to wait and see what is later developed. Brad Beckett On Mon, Jan 21, 2013 at 4:06 AM, Sam de Silva

Re: [liberationtech] Mega

2013-01-21 Thread Griffin Boyce
From what I've seen, it uses insecure means of encryption -- using Math.random and mouse input to encrypt documents. ~Griffin On Mon, Jan 21, 2013 at 8:02 AM, SAM ANDERSON blackeduca...@mac.com wrote: From what I have read, Mega is still being built. It's supposed to be ready for the public a

Re: [liberationtech] Mega

2013-01-21 Thread Steve Weis
Mega is using server-side Javascript for crypto, so you're trusting them just like you'd trust Dropbox. Other people have reported issues with their implementation, including using weak randomness. I skimmed through their implementation and found some portions that indicate they don't know what

Re: [liberationtech] Mega

2013-01-21 Thread Nadim Kobeissi
Hasn't Retroshare also been under criticism for a lack of audit? NK On Mon, Jan 21, 2013 at 2:42 PM, Randolph D. rdohm...@gmail.com wrote: the secure alternative is htp://retroshare.sf.net without payment, without google chrome sponsoring, without central servers. a full alternative.

Re: [liberationtech] Mega

2013-01-21 Thread Jacob Appelbaum
micah anderson: Nadim Kobeissi na...@nadim.cc writes: Hasn't Retroshare also been under criticism for a lack of audit? I've always wondered why something like Mega gets a lot of attention and people audit it pretty much immediately, but something like Retroshare, which has been around for

Re: [liberationtech] Mega

2013-01-21 Thread Andreas Bader
On 01/21/2013 08:42 PM, Randolph D. wrote: the secure alternative is htp://retroshare.sf.net http://retroshare.sf.net without payment, without google chrome sponsoring, without central servers. a full alternative. 2013/1/21 Sam de Silva s...@media.com.au mailto:s...@media.com.au Hi