New Browser Tool Claims to Reveal MEGA Users’ Master Key

http://torrentfreak.com/new-browser-tool-claims-to-reveal-mega-user-master-key-130903/


This is pretty much exactly what I warned about here.

And as I said here, this "the cloud storage provider encrypts your data with private keys so that even they don't have access" stuff is basically just another nice layer of protection (albeit with specific known holes) that you don't have to do anything extra to implement. Just don't count on it. It may make it more difficult for an external attacker to read your files (e.g. someone who breaks into MEGA's storage)...but don't be fooled into thinking the storage owner couldn't decrypt your files if it wanted (or was legally compelled) to.

If you want something encrypted, do it yourself locally, and upload only encrypted files.

 

Absolutely.

 

Amen to that!