Skip to content

Comment on MEGApwn - Bookmarklet to recover your secret MEGA master keyparent

Comments

While they are the same class of attacks they are fundamentally different in the level of complexity required.

There's no 20 line piece of code that any user can run to get your TrueCrypt key, you're looking at an OS exploit to get kernel access, plus the code to find the key, and/or freezing the computer in liquid nitrogen and then reading the contents of memory directly.

It also mean that any of your Chrome / Firefox extension can access it when you open mega.co.nz

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.