MIT desenvolve navegação segura na internet

26/03/14 • 15:54

http://olhardigital.uol.com.br/noticia/41042/41042

Siga o Jornal GGN no Google e receba as principais notícias do Brasil e do Mundo

Seguir no Google

Pesquisadores criam plataforma antiespionagem para internet

Pesquisadores do MIT (Instituto de Tecnologia de Massachusetts) desenvolveram um software capaz de impedir qualquer interferência na navegação dos internautas criptografando toda informação usada por eles durante o acesso.

O trabalho do software, Mylar, consiste em manter os dados codificados em todos os momentos da navegação, decifrando-os apenas no computador. Dessa forma, ressalta a pesquisadora Raluca Popa, mesmo que um governo pedisse informações aos provedores, estes não conseguiriam atender à requisição.

“Você não percebe qualquer diferença, mas seus dados são criptografados usando sua senha dentro do navegador antes de entrar no servidor”, explicou ela.

Há anos pesquisadores trabalham com ideias semelhantes, o diferencial do Mylar é que ele é prático e pode ser usado para o desenvolvimento de ferramentas hoje. Ainda mais porque foi projetador para trabalhar com a ferramenta de construção para web Mateor, que é bem popular.

O principal problema desse sistema é que, se alguém perde a chave de acesso, talvez fique permanentemente sem rever suas informações.

http://www.technologyreview.com/news/525651/new-approach-could-stop-websites-from-leaking-or-stealing-your-data/

New Approach Could Stop Websites from Leaking or Stealing Your Data

A system called Mylar makes it possible to build online services that can never decrypt or leak your data.

By Tom Simonite on March 25, 2014

Why It Matters

Online services frequently have user data stolen, or are required to hand it over to authorities.

Reminders that data entrusted to online services can easily be leaked or stolen aren’t hard to find. Major companies commonly have passwords and other data taken by attackers, while governments have their own ways to get hold of user data.

Researcher Raluca Popa of MIT thinks many online services should and could be redesigned to guard against that. “Really, there’s no trusting a server,” she says. Popa has led the development of a system called Mylar for building Web services that puts that philosophy into practice. Services built using it keep data on their servers encrypted at all times and only ever decrypt it on a person’s computer.

“You don’t notice any difference, but your data gets encrypted using your password inside your browser before it goes to the server,” Popa says. “If the government asks the company for your data, the server doesn’t have the ability to give unencrypted data.” Popa developed the software with colleagues from MIT and a Web development software company, Meteor Development Group. A paper on Mylar will be presented at the Usenix Symposium on Networks Systems Design and Implementation next month.

The idea of designing Web services that always keep data encrypted while it resides on their servers has been around for years, and researchers have developed tools to demonstrate how it might be done. But Popa says Mylar is more practical than previous efforts and could even be used to build services today.

The software is designed to work with a popular Web service building tool called Meteor, to make it easy for Web developers to use. Mylar’s design has code running inside a person’s browser take on most of the processing and presenting of information—work that a conventional service would do on its servers. But Mylar also includes some new cryptographic tricks that allow a server to do useful things with user data without having to descramble it. It is possible for a service built with Mylar to search across encrypted data stored on its servers, for example, so a person could search documents they had uploaded to a file storage service.

Mylar also lets individuals share data with other users, thanks to a system that can distribute the necessary encryption key in a way that protects it from ever being disclosed either to the server or to someone monitoring communications. An optional browser extension can be used to protect against the server stealing the key needed to decrypt a person’s data, in the event it has been taken over by an attacker or malicious insider.

A small group of patients at Newton-Wellesley hospital in Boston are already using a website built using Mylar to collect medical history information. The information a patient enters is only decrypted when viewed by the patient or his doctor. If that small trial is successful, it will be rolled out more widely, says Popa. She says using Mylar for a real use case shows it can be practical. “All they had to change is 28 lines of code out of 3,659 to secure their application,” she says. Popa and colleagues have also built chat, photo sharing, and calendar Web services to test their idea.

Ariel Feldman, a researcher at the University of Pennsylvania, says that Mylar manages to combine several useful features for an encrypted Web service not packaged together before. However, he notes that the chance of many Web companies opting to embrace encryption so thoroughly look slim.

“It would be a watershed moment if any of these types of systems actually got deployed to millions of users,” he says. “The real obstacles to adoption are usability and the business case for deploying them.”

A big usability challenge is that if anyone loses their password, they can permanently lose access to their information if the server can’t decrypt it, says Feldman. Although Popa says that the design of Mylar allows for the addition of a secure system for password recovery. Business challenges range from the added expense of building a more secure system, to the fact that many online companies rely on being able to crunch user data to make money from ads, says Feldman. He says Mylar may catch on in places where protecting data is seen as critical. “Enterprises or governments may be willing to pay for extra security,” he says.

Popa remains optimistic that the Wellesley trial will be only the first real-world use case of Mylar. She points to how she previously led development of a system called CryptDB, software that allows databases to be fully encrypted, which has since been adopted by Google and the business software giant SAP. “I think Mylar will be at least as useful, if not more,” she says.

Redação

Curadoria de notícias, reportagens, artigos de opinião, entrevistas e conteúdos colaborativos da equipe de Redação do Jornal GGN

Assine a nossa Newsletter e fique atualizado!

As mais comentadas

Colunistas

Ana Gabriela Sales

Repórter do GGN há 9 anos. Especializada em produção de conteúdo para as redes sociais.

Camila Bezerra

Graduada em Comunicação Social – Habilitação em Jornalismo pela Universidade. com passagem pelo Jornal da Tarde e veículos regionais. É...

Carla Castanho

Carla Castanho é repórter no Jornal GGN e produtora no canal TVGGN

Ver Todos

...

Faça login para comentar ou registre-se.

4 de junho de 2026

Menu

ASSINE

MIT desenvolve navegação segura na internet

Siga o Jornal GGN no Google e receba as principais notícias do Brasil e do Mundo

Seguir no Google

Pesquisadores criam plataforma antiespionagem para internet

New Approach Could Stop Websites from Leaking or Stealing Your Data

Redação

Assine a nossa Newsletter e fique atualizado!

Assine a nossa Newsletter e fique atualizado!

Mais lidas

As mais comentadas

Colunistas

Ana Gabriela Sales

Camila Bezerra

Carla Castanho

Deixe um comentário Cancelar resposta

Recomendados para você

Recomendados

Ver mais

Brasil 2026: retrato de um país vulnerável, por Luís Nassif

Câmara dos EUA aprova resolução para limitar ação militar de Trump

OCDE alerta para impacto duradouro da crise no Oriente Médio

Do datacenter popular à geopolítica: TV GGN discute soberania digital para governo Lula 4.0

Redes sociais

Faça uma assinatura solidária

Principais Categorias

Institucional

Anuncie

Projeto Brasil

Redes sociais