from the all-a-mpaa-front-anyhow dept.
Kim Dotcom launched his new project Mega on Sunday, claiming it was to be ‘the privacy company.’ But it might not be so private after all, as security professionals have ripped it to shreds. There are numerous problems with how encryption is handled, an XSS flaw and users can’t change their passwords, they say. But there are suspicions Mega is handing out encryption keys to users and touting strong security to cover its own back. After all, if Kim Dotcom and Co don’t know what goes on the site, they might not be liable for copyright prosecutions, as they were for Megaupload, Mega’s preprocessor.
UPDATE:
Recently, Slashdot posted about how cloud storage company Mega was ‘riddled’ with security holes. Freezenet points out that Mega has issued a response to some of these criticisms including one which criticized its use of SSL. Mega responded saying that if you could break SSL, you could break things much more interesting than Mega.
