January 21, 2013, 10:44 PM — Kim Dotcom's bold new venture, the file-storage and sharing service Mega, is drawing criticism as security researchers analyze how the site protects users' data. In short, they advise: don't trust it.
Dotcom threw a large launch party for Mega on Sunday at his mansion outside of Auckland. The service is the successor to Megaupload, the file-sharing site that Dotcom and his colleagues were indicted for in the U.S. in January 2012 on copyright infringement charges.
The flamboyant Dotcom is assuring Mega's users that the site's encryption will protect their privacy and data, but the implementation of that encryption scheme is fundamentally flawed, observers say.
The problem is that SSL has long been recognized as a weak point on the web. In 2009, security researcher Moxie Marlinspike created a tool called SSLstrip, which allows an attacker to intercept and stop an SSL connection. The attacker can then spy on whatever data the user sends to the fake website.
Since Mega fundamentally relies on SSL, "there is really no reason to be doing client-side encryption," Marlinspike said in an interview Monday. "These kind of schemes are vulnerable to all of the problems with SSL."
"Every time you open the website, the encryption code is sent from scratch," Kobeissi said "So if one day I decide I want to disable all encryption for you, I can just serve your username different code that doesn't encrypt anything and instead steals your encryption keys."
A safer way would be for Mega to use a signed browser extension to encrypt the data, which would prevent tampering by an attacker, Marlinspike said. Alternatively, an installed software client would accomplish the same end, he said, without exposing a user to the insecurities of SSL.