PrivateSphare

PrivateSphare PrivateSphare 是一个安全、匿名、零知识的文件存储与共享平台。用户可上传文件并获取一个人类可读的 24 词密码短语用于检索。无需账户、无追踪，且任何未加密数据都不会触及服务器的持久存储。 🛡️ 关键特性 后量子安全 ：文件采用量子安全混合 方案（Kyber1024 + AES-256-GCM）加密，可抵御未来量子计算机的威胁。 零知识加密 ：文件在浏览器上下文中（客户端意图）使用从 24 词 BIP-39 密码短语派生的密钥进行加密。 元数据隐私 ：文件名和 MIME 类型在存入数据库前已加密。 透明存储 ：文件以随机 UUID 密钥存储于...

CVE-2026-2974

A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS. This vulnerability affects unknown code of the file sharedprefs/aliasvault.xml of the component Backup Handler. The manipulation of the argument accessToken/refreshToken/metadata/keyderivationparams/authmethods leads to...

Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers

Zero Knowledge Encryption is a term widely used by vendors of cloud-based password managers. Although it has no strict technical meaning, the term conveys the idea that the server, who stores encrypted password vaults on behalf of users, is unable to learn anything about the contents of those...

Study Uncovers 25 Password Recovery Attacks in Major Cloud Password Managers

A new study has found that multiple cloud-based password managers, including Bitwarden, Dashlane, and LastPass, are susceptible to password recovery attacks under certain conditions. "The attacks range in severity from integrity violations to the complete compromise of all vaults in an...