4 ms·
Hello there, Gianluca from Wuala here. First, this is how Wuala works: You as an user place a file in the client. The file gets encrypted (including using your
by iHypnos 13y ago
Hello there, Gianluca from Wuala here.
First, this is how Wuala works: You as an user place a file in the client. The file gets encrypted (including using your password and username) and then gets uploaded and split into different pieces. We are currently using AES-256 for encryption (and RSA 2048 fpr signature and key exchange when sharing a folder and SHA-256 for integrity checks). The password does NOT get transmitted and there is nothing like a master key or similar. That means in worst ever case if someone would have access to our servers somehow, they'd get a piece of encrypted data which is not readable and not decryptable (not even for us as the provider.
Secondly, some people tend to confuse security with anonymity. Wuala is secure, but how about anonymity? We have your email address, your username and we know how much storage space you have. As you see, that is not anonymous, but has nothing to do with the security of your files.
Are we planning to open source the code? Eventually yes, but as we already stated, this takes a lot of time and effort. Oh and yes, we are nice guys. Not because we're Swiss, but in general :)
- nodata 13y agoAre you planning on allowing camera upload? I can't get people using your product without it...
- iHypnos 13y agowe are planning camera upload yes :)
- jasonzemos 13y agoHey Gianluca, I was under the impression the latest major revision of Wuala removed all distribution features, so files are no longer split into difference pieces. Instead they are now stored on your central servers.
- iHypnos 13y agoNo. We split our files and store them redundantly in our datacenters in Switzerland, France and Germany.
- plouc 13y agoHi Gianluca, What about when files/folders are shared? Is encryption dropped so anybody with a link can have access?
- iHypnos 13y agoNo, you can read everything regarding this matter here http://wualablog.blogspot.ch/2011/05/wualas-encryption-revisited.html http://wualablog.blogspot.ch/2011/05/wualas-encryption-revis.... Regarding your question, you'll find your answer here http://www.wuala.com/blog/2011/04/wualas-encryption-for-dummies.html http://www.wuala.com/blog/2011/04/wualas-encryption-for-dumm... (3. Sharing)
- plouc 13y agoSo basically the encryption key for the specific folder is in the shared url, and wuala servers decrypt the content to the user's browser. If sharing is disabled then a new key is created and used locally to decrypt/encrypt directly from the client. Thanks!