Wednesday, July 28, 2010

Wuala's Security in a Nutshell

One of the main aspects that distinguish Wuala from other services is our focus on privacy. We believe that your data is yours and should only be accessible to you.

Instant Encryption
In order to protect your privacy, Wuala encrypts your data directly on your computer before it is uploaded. This is in stark contrast to other services, which only encrypt the transmission process and not the files itself. Our encryption guarantees that your files are encrypted, not just during the upload process, but also while being stored on our servers and in the Wuala network, always keeping your files confidential.

For added security your password is never transmitted so that no one - not even the employees at Wuala or LaCie- can access your private fies. This approach clearly distinguishes us from other services, which in most cases have access to your files. Therefore, it is very important that you do not forget your password and set a password hint when signing up. If you want to know which services could technically access your data, there's a rule of thumb: If a service offers a 'password recovery' function, then their employees could technically access your data.



Selective Sharing
Though your files are encrypted, you can decide to share them with specific friends. There are three levels of sharing, each of them respecting your specific sphere of privacy:

1. Private: Wuala's encryption process ensures that only friends who are explicitly granted permission can access the files. This is the most secure option.
2. Link: Only friends who know the link can access the files directly in the web.
3. Public on the web: Anyone can access the files in the web.

With Wuala's sharing options you can decide with whom you want to share your files, giving you full control over your data.

Designed to protect
If you're interested in how Wuala manges encryption, simply have a look at our publication on Cryptree or read our technology page.

7 Kommentare:

  1. Thanks for the post. You stress how the password never leaves the source workstation. How is it then possible to share the files, unencrypted?

    ReplyDelete
  2. That's the difficult part: All files are _not_ encrypting using your wuala password but using the hash value of the file. Your wuala password grants you access to those keys. When you share a file, you grant other people access to these keys so that they are now able to decrypt your file.

    That's a really short summary of the whole process.

    ReplyDelete
  3. I hate to be the grammar nazi again, but a TO is missing after "...which in most cases have access..."

    Still, the explanation is very useful. I have many friends and colleagues who are sceptical about Wuala because the file fragments are stored on other peoples' PCs. Windows Live Sync is OK for them though... *rolleyes*

    ReplyDelete
  4. @LifeScienTology Thanks for the copywriting. Next time, I'll just send it to you before posting it :)

    ReplyDelete
  5. The video was removed.

    ReplyDelete
  6. @cpp Thanks for the hint. I have updated the video now.

    ReplyDelete
  7. Very interesting, pleased to hear that you guys are taking so seriously. How does Wuala compare to alternatives such as Spideroak?

    What about file names? If I have a file name system that is important to me, yet at the same time, tells much about the contents of the files, will my files names and file meta-data be protected in the same way as the contents of my files?

    Thanks in advance.

    Regards,
    Mattieu

    ReplyDelete