context: https://twitter.com/kennyog/status/1539352663770509314 https://twitter.com/kennyog/status/1539352663770509314 > We show that MEGA's system does not pr

context: https://twitter.com/kennyog/status/1539352663770509314 https://twitter.com/kennyog/status/1539352663770509314 > We show that MEGA's system does not protect its users against a malicious server and present five distinct attacks, which together allow for a full compromise of the confidentiality of user files. Additionally, the integrity of user data is damaged to the extent that an attacker can insert malicious files of their choice which pass all authenticity checks of the client. We built proof-of-concept versions of all the attacks, showcasing their practicality and exploitability.