Recently active topics in Wuala tagged with security

hi there,

most of the times there are quite a number of new builds of wuala for certain platforms, sometimes several new builds daily and there are a lot of days where there isnt any changelog nor releasenotes to be found.

many times only days after the actual updates/patches or only several patches/releases later there is an updated releaselog.

this is a high risk of getting some "updates" for wuala from man-in-the-middle and similar risks.

i wish that the wuala team would really announce their changes immediately, write some official buildnumber/list and maybe even some hashcode, signature or way to make sure that the wuala installation is the official code.

as wuala becomes more widespread and common out there, the probability of suffering attacks and tampered updates/patches becomes more likely.

thanks for listening.

hi there,

during my recent upload tests via filesystem integration method (see other thread http://getsatisfaction.com/wuala/topi... ) i somewhen realized that there are hugeloads of files in %temp%\wuala\ which wasnt the case in former builds of wuala.

there are also two directories in there (download and upload)

in the actual %temp%\wuala\ folder there seem to be a very big number of "original" files which i was trying to upload into the wuala store it seems.

the filenames have been changed somewhat to

hexnumber-originalfilename.extension

example:
f3edab22-mypicture.jpg
(hexnumber is maybe some hash/crc/crc32 or something)
the files are unencrypted, so i can actually use them with the appropriate application as they all hold the actual data (pictures, and so on....)

is this some bug? anyway related to my other thread? i suppose this is a huge security risk as even with reboots, wuala clients shutdown/restart these folders dont seem to go away or dont get empied nor cleaned up and the files can be seen by "anybody" who has access to the physical machine.

this is really weird. anyone else having this behaviour? win32/winxp that is. wuala426