MEGA Security Update
https://blog.mega.io/mega-security-update
Today, MEGA has released software updates that fix a critical vulnerability reported by researchers at one of Europe’s leading universities, ETH Zurich, Switzerland. Further updates addressing less severe identified issues will follow in the near future. MEGA is not aware of any user accounts being compromised by these vulnerabilities.
Who is potentially affected?
Customers who have logged into their MEGA account at least 512 times (the more, the higher the exposure). Note that resuming an existing session does not count as a login. While all MEGA client products use permanent sessions by default, some third-party clients such as Rclone do not, so their users may be exposed.
Who could have exploited the vulnerability?
Very few: An attacker would have had to first gain control over the heart of MEGA’s server infrastructure or achieve a successful man-in-the-middle attack on the user’s TLS connection to MEGA.
What could have been the outcome?
Once a targeted account had made enough successful logins, incoming shared folders, MEGAdrop files and chats could have been decryptable. Files in the cloud drive could have been successively decrypted during subsequent logins. Furthermore, files could have been placed in the account that appear to have been uploaded by the account holder (a “framing” attack).
#mega #cloud #vulnerability
https://blog.mega.io/mega-security-update
Today, MEGA has released software updates that fix a critical vulnerability reported by researchers at one of Europe’s leading universities, ETH Zurich, Switzerland. Further updates addressing less severe identified issues will follow in the near future. MEGA is not aware of any user accounts being compromised by these vulnerabilities.
Who is potentially affected?
Customers who have logged into their MEGA account at least 512 times (the more, the higher the exposure). Note that resuming an existing session does not count as a login. While all MEGA client products use permanent sessions by default, some third-party clients such as Rclone do not, so their users may be exposed.
Who could have exploited the vulnerability?
Very few: An attacker would have had to first gain control over the heart of MEGA’s server infrastructure or achieve a successful man-in-the-middle attack on the user’s TLS connection to MEGA.
What could have been the outcome?
Once a targeted account had made enough successful logins, incoming shared folders, MEGAdrop files and chats could have been decryptable. Files in the cloud drive could have been successively decrypted during subsequent logins. Furthermore, files could have been placed in the account that appear to have been uploaded by the account holder (a “framing” attack).
#mega #cloud #vulnerability
Mega Blog
MEGA Security Update - Mega Blog
Company and product updates of MEGA Cloud storage. Access the world's most trusted, protected cloud storage.
NoGoolag
NEW: Major emergency as heavy rains and floods hit UAE Follow @insiderpaper
UAE to boost rainfall using AI in cloud seeding operations
Deep learning algorithm to learn from thousands of examples drawn from historical data
The National Centre of Meteorology (NCM) has announced the start of its latest project to boost rainfall. The project will use artificial intelligence (AI) to achieve enhanced rainfall prediction.
The project's focal point will be the creation of an AI research and operations testbed in the UAE. An AI framework will be built to combine satellite observations, ground-based weather radar data, rain gauges, and numerical weather prediction estimates to determine optimal cloud seeding timings and locations.
https://www.khaleejtimes.com/weather/uae-to-boost-rainfall-using-ai-in-cloud-seeding-operations
#cloud #seeding #geoengineering
Deep learning algorithm to learn from thousands of examples drawn from historical data
The National Centre of Meteorology (NCM) has announced the start of its latest project to boost rainfall. The project will use artificial intelligence (AI) to achieve enhanced rainfall prediction.
The project's focal point will be the creation of an AI research and operations testbed in the UAE. An AI framework will be built to combine satellite observations, ground-based weather radar data, rain gauges, and numerical weather prediction estimates to determine optimal cloud seeding timings and locations.
https://www.khaleejtimes.com/weather/uae-to-boost-rainfall-using-ai-in-cloud-seeding-operations
#cloud #seeding #geoengineering
Khaleej Times
UAE to boost rainfall using AI in cloud seeding operations
The National Centre of Meteorology (NCM) has announced the start of its latest project to boost rainfall. The project will use artificial intelligence (AI)..
🇨🇳 China plans #cloud #seeding to protect grain crop from drought
China says it will try to protect its grain harvest from record-setting drought by using chemicals to generate rain, while factories in the southwest waited Sunday to see whether they would be shut down for another week due to shortages of water to generate hydropower.
Authorities will "try to increase rain" by seeding clouds with chemicals and spraying crops with a "water retaining agent" to limit evaporation, Tang's ministry said on its website. It gave no details of where that would be done.
🔗 Article
#geoengineering
China says it will try to protect its grain harvest from record-setting drought by using chemicals to generate rain, while factories in the southwest waited Sunday to see whether they would be shut down for another week due to shortages of water to generate hydropower.
Authorities will "try to increase rain" by seeding clouds with chemicals and spraying crops with a "water retaining agent" to limit evaporation, Tang's ministry said on its website. It gave no details of where that would be done.
🔗 Article
#geoengineering
Google Whistleblower Ariel Koren Rejects Project Nimbus
Ariel Koren
No tech for apartheid israel
Google whistleblower Ariel Koren rejects project Nimbus by google, amazon and israel government
https://www.mintpressnews.com/google-whistleblower-ariel-koren-rejects-israel-project-nimbus/281940/
In this episode of The Watchdog, former Google employee Ariel Koren joins Lowkey and articulates her experience at the big tech giant, claiming it has gradually developed an institutionalised pro-Israeli bias. She also reveals ways in which employees attempting to hold the company accountable for unethical contracts, such as that of Project Nimbus, are being targeted and intentionally silenced.
#Google, alongside #Amazon, has signed a contract worth $1.2 billion, titled “Project #Nimbus”, which will provide a #cloud system service for both the Israeli military and the israeli government.
#palestine #zionism #apartheid #censorship #gov #why #bds
Google whistleblower Ariel Koren rejects project Nimbus by google, amazon and israel government
https://www.mintpressnews.com/google-whistleblower-ariel-koren-rejects-israel-project-nimbus/281940/
In this episode of The Watchdog, former Google employee Ariel Koren joins Lowkey and articulates her experience at the big tech giant, claiming it has gradually developed an institutionalised pro-Israeli bias. She also reveals ways in which employees attempting to hold the company accountable for unethical contracts, such as that of Project Nimbus, are being targeted and intentionally silenced.
#Google, alongside #Amazon, has signed a contract worth $1.2 billion, titled “Project #Nimbus”, which will provide a #cloud system service for both the Israeli military and the israeli government.
#palestine #zionism #apartheid #censorship #gov #why #bds
Proton Drive is now available for all
https://news.itsfoss.com/proton-drive-available/
@itsfoss_official
#cloud #storage #protonmail
https://news.itsfoss.com/proton-drive-available/
@itsfoss_official
#cloud #storage #protonmail
It's FOSS News
Proton Drive is Out of Beta, Available for Everyone
Proton Drive is available as an end-to-end encrypted solution with all the goodies of Proton ecosystem.
NoGoolag
Photo
Ouisync
Store, sync, and share files across devices anywhere.
Secure, open source, peer-to-peer file-sharing.
https://ouisync.net
https://github.com/equalitie/ouisync-app/releases
- Easily share content with your audiences
Need to share news, event documents, videos or educational material to your audiences without relying on centralized platforms that are easily blocked? With Ouisync, you can quickly upload media and share Read-only access to content via QR codes, shortlinks, or other messaging platforms. Ouisync is 100% free and open source, and will never share or sell your data to third parties.
- Quickly share files with a friend
Share a Ouisync repository using Write permissions to allow multiple users to add or edit files within a repository, even in conditions of limited connectivity. Keep data in sync between your personal devices, collaborate on team projects, and create group photo albums. All data in Ouisync is end-to-end encrypted for your peace of mind.
- Securely store sensitive documents
Want to securely back up your data on other devices and make it inaccessible to anyone else? Share your Ouisync repositories in Blind mode. Your friend offers you their spare computer for storage of your data? Let your friends be your cloud! It takes just a couple of taps in Ouisync to securely store your data in Blind mode and you never again have to worry about losing your phone - your data is safely stored for whenever you need it.
- Secure
Data (including metadata such as file name, size or location) is encrypted both in transit and at rest, and can be shared as read/write, read-only, or blind.
- Resilient
Ouisync users are able to share files despite conditions of limited or no internet connectivity, when the centralised servers most apps rely upon may not be reachable.
- You're in control
Easily create encrypted repositories for your data and then distribute the link to friends, audiences, or between devices for effective, decentralized publication and/or backup storage.
@dcntr
#cloud #file #transfer #share #sync #bittorrent #p2p
Store, sync, and share files across devices anywhere.
Secure, open source, peer-to-peer file-sharing.
https://ouisync.net
https://github.com/equalitie/ouisync-app/releases
- Easily share content with your audiences
Need to share news, event documents, videos or educational material to your audiences without relying on centralized platforms that are easily blocked? With Ouisync, you can quickly upload media and share Read-only access to content via QR codes, shortlinks, or other messaging platforms. Ouisync is 100% free and open source, and will never share or sell your data to third parties.
- Quickly share files with a friend
Share a Ouisync repository using Write permissions to allow multiple users to add or edit files within a repository, even in conditions of limited connectivity. Keep data in sync between your personal devices, collaborate on team projects, and create group photo albums. All data in Ouisync is end-to-end encrypted for your peace of mind.
- Securely store sensitive documents
Want to securely back up your data on other devices and make it inaccessible to anyone else? Share your Ouisync repositories in Blind mode. Your friend offers you their spare computer for storage of your data? Let your friends be your cloud! It takes just a couple of taps in Ouisync to securely store your data in Blind mode and you never again have to worry about losing your phone - your data is safely stored for whenever you need it.
- Secure
Data (including metadata such as file name, size or location) is encrypted both in transit and at rest, and can be shared as read/write, read-only, or blind.
- Resilient
Ouisync users are able to share files despite conditions of limited or no internet connectivity, when the centralised servers most apps rely upon may not be reachable.
- You're in control
Easily create encrypted repositories for your data and then distribute the link to friends, audiences, or between devices for effective, decentralized publication and/or backup storage.
@dcntr
#cloud #file #transfer #share #sync #bittorrent #p2p
ouisync.net
Store, sync, and share files across devices anywhere with Ouisync. Secure, open source, peer-to-peer file-sharing
In-Q-Tel, the venture-capital arm of the #CIA, is an undisclosed investor in hot cloud-computing startups Mesosphere and Docker, reports The Intercept.
-2016
https://www.businessinsider.com/cia-in-q-tel-docker-mesosphere-2016-4
#cloud #inqtel #why
-2016
https://www.businessinsider.com/cia-in-q-tel-docker-mesosphere-2016-4
#cloud #inqtel #why
Business Insider
The CIA secretly invested in two of Silicon Valley's hottest startups
Mesosphere and Docker are very well-funded San Francisco-based companies, with valuations that are said to be at or above $1 billion.
Say Goodbye to #Cloud Anonymity? New #USA Regulations Demand User Identification
The US Department of Commerce is seeking to end the right of users of cloud services to remain anonymous.
The proposal first emerged in January, documents show, detailing new rules (National Emergency with Respect to Significant Malicious Cyber-Enabled Activities) for Infrastructure as a Service (IaaS) providers, which include Know Your Customer (KYC) regulation, which is normally used by banks and financial institutions.
But now, the US government is citing concerns over “malicious foreign actors” and their usage of these services as a reason to effectively end anonymity on the cloud, including when only signing up for a trial.
Another new proposal from the notice is to cut access to US cloud services to persons designated as “foreign adversaries.”
As is often the case, although the justification for such measures is a foreign threat, US citizens inevitably, given the nature of the infrastructure in question, get caught up as well. And, once again, to address a problem caused by a few users, everyone will be denied the right to anonymity.
That would these days be any government’s dream, it appears, while the industry itself, especially the biggest players like Amazon, can implement the identification feature with ease, at the same time gaining a valuable new source of personal data.
The only losers here appear to be users of IaaS platforms, who will have to allow tech giants yet another way of accessing their sensitive personal information and risk losing it through leaks.
Meanwhile, the actual malicious actors will hardly give up those services – leaked personal data that can be sold and bought illegally, including by those the proposal says it is targeting.
Until now, providers of cloud services felt no need to implement a KYC regime, instead allowing people to become users, or try their products, simply by providing an email, and a valid credit card in case they signed up for a plan....
🔗SOURCE ➡️ ReclaimTheNet
Related: Related: 5/20 — Belgium and Hungary Launch Controversial Digital IDs, Vaccine Passport, Ahead of EU Regulations
It's All a Trap (Prod. Pendo46) — Rap by The Mcgwire / PsyopDaily
Soon you'll need a digital id for everything and anything you order...
It's all a trap - biometric IDs, CBDCs, and agenda 2030, for the greater good bitch please...
5/11 — Whitney Webb: Can Trump Supporters Not see That They Are Being Manipulated Into Consenting to the Same Digital ID Biometric Hell That Was Trialed Out During COVID?
3/17 — World Bank and Verizon Chiefs Say Digital ID Part of “Social Contract” Between Government and Citizens
2/22 — Canada’s Conservatives Realize They Can’t Be Anti Digital ID and Pro Online Age Verification
Follow us on Minds / X / Substack
Follow ➡️ @PsyopDaily
The US Department of Commerce is seeking to end the right of users of cloud services to remain anonymous.
The proposal first emerged in January, documents show, detailing new rules (National Emergency with Respect to Significant Malicious Cyber-Enabled Activities) for Infrastructure as a Service (IaaS) providers, which include Know Your Customer (KYC) regulation, which is normally used by banks and financial institutions.
But now, the US government is citing concerns over “malicious foreign actors” and their usage of these services as a reason to effectively end anonymity on the cloud, including when only signing up for a trial.
Another new proposal from the notice is to cut access to US cloud services to persons designated as “foreign adversaries.”
As is often the case, although the justification for such measures is a foreign threat, US citizens inevitably, given the nature of the infrastructure in question, get caught up as well. And, once again, to address a problem caused by a few users, everyone will be denied the right to anonymity.
That would these days be any government’s dream, it appears, while the industry itself, especially the biggest players like Amazon, can implement the identification feature with ease, at the same time gaining a valuable new source of personal data.
The only losers here appear to be users of IaaS platforms, who will have to allow tech giants yet another way of accessing their sensitive personal information and risk losing it through leaks.
Meanwhile, the actual malicious actors will hardly give up those services – leaked personal data that can be sold and bought illegally, including by those the proposal says it is targeting.
Until now, providers of cloud services felt no need to implement a KYC regime, instead allowing people to become users, or try their products, simply by providing an email, and a valid credit card in case they signed up for a plan....
🔗SOURCE ➡️ ReclaimTheNet
Related: Related: 5/20 — Belgium and Hungary Launch Controversial Digital IDs, Vaccine Passport, Ahead of EU Regulations
It's All a Trap (Prod. Pendo46) — Rap by The Mcgwire / PsyopDaily
Soon you'll need a digital id for everything and anything you order...
It's all a trap - biometric IDs, CBDCs, and agenda 2030, for the greater good bitch please...
5/11 — Whitney Webb: Can Trump Supporters Not see That They Are Being Manipulated Into Consenting to the Same Digital ID Biometric Hell That Was Trialed Out During COVID?
3/17 — World Bank and Verizon Chiefs Say Digital ID Part of “Social Contract” Between Government and Citizens
2/22 — Canada’s Conservatives Realize They Can’t Be Anti Digital ID and Pro Online Age Verification
Follow us on Minds / X / Substack
Follow ➡️ @PsyopDaily
Reclaim The Net
Say Goodbye to Cloud Anonymity? New US Regulations Demand User Identification
New rules aim to combat malicious actors but risk compromising the privacy of everyday users.