3 ms·
What I got from this is that the code is intended to be set up so you don't have to trust the CDN, however due to an error in the way it's coded, it turns out y
by kybernetikos 14y ago
What I got from this is that the code is intended to be set up so you don't have to trust the CDN, however due to an error in the way it's coded, it turns out you do have to trust the CDN. Given that CDNs are reasonably trustworthy in the absence of government intervention, I expect that Mega will fix this before there are any exploits.
It's good work by fail0verflow, but as long as Mega addresses it soon, I don't think it's a big deal. In fact, it's a good test case for how seriously they take this kind of problem.