In the old days (mainframes) security was PHYSICAL; if you didn't want someone to access your data, you locked up the tape…

Thank you very much for stopping by and for leaving the detailed information regarding MemoPal's security infrastructure. We will take a look at your service and evaluate it for inclusion on our comparison of online backup services.

Thanks again,
Joe

In Memopals' infrastructure every connection to a server having an un-trusted
certificate is refused by the client to prevent the Man in the middle attack.
Memopal is constantly evolving its security model to assure a high level standard of
data security.

In Memopals' infrastructure, all the connection between client and server are SSLencrypted
using server-side certificate and every connection to a server having an
un-trusted certificate is refused by the client to prevent the Man in the middle attack.
The authentication phase starts only after a valid SSL connection is established, so
when a fake certificate is proposed to the client no username or password is sent
from the client to the server.

Moreover, to install the Memopal client is necessary to gain a privileged user
account, so nobody may have installed Memopal on your PC to steal your data.
Data are transferred encrypted from the client to the server, and are stored in an
encrypted FS also distributed in chunks with a RAID-5 like policy.
Watching inside the MGFS (Memopal Global File System) it's impossible to know
who owned the backuped file and the original filename. So if someone takes a
storage unit from the Memopal infrastructure, he never has access to a common
sense information to disclose it.
The data structure contains the associations between the file and the owner is also
encrypted and not accessible to the support people during the support phase.
In the current beta-release we are testing a client-side certificate validation to prevent
possible server-side attack.

Memopal is online backup and online storage software that archives your files in realtime
to a remote server. It doesn't matter how many times you change computers:
You will always know where your data is. You can browse all your files from any
internet location or internet-ready cell phone. You can share with friends and coworkers
files that are too big to send through email.

Andrea Cecchetti
Chief Information Security Officer – Memopal