BUZZHEAVIER

Simple fast anonymous file sharing for everyone.

Buzzheavier Security Update

TL;DR

  1. A large volume of child porn was recently uploaded to leading to an investigation and seizure of proxy servers by authorities.
  2. Our storage provider has also placed our account on hold.
  3. You can't access old buzzheavier files until the storage provider removes account hold.
  4. I am not able to access my account? - You can use your account id to log in at our mirror site trashbytes.net, but you won't be able to access the files until the matter is not resolved

Overview of How BuzzHeavier Works

BuzzHeavier prioritizes user privacy by employing multiple layers of security, including proxy servers to protect user identities.

Account Security and File Handling

1. Account Security:

When a user signs up, only a hashed version of their account ID is stored in our database, ensuring the actual ID remains private unless reset. And that hash used to encrypt/decrypt all the files on raw storage

2. File Upload Process:

  1. Users request an upload through our server.
  2. The server retrieves the account ID hash from AWS RDS.
  3. Files are encrypted using the account ID hash plus an internal secret key.
  4. Files are then stored securely with a third-party storage provider.

3. File Download Process:

  1. Users initiate a download request.
  2. The server fetches the account ID hash linked to the file, retrieves it, and decrypts it with the account id hash + secret key.

Secret Key Security Protocol

Our encryption keys are stored with strict protocols:

  1. We build binaries on a secure local machine and deploy to our proxy servers.
  2. After the proxy starts, the binary is deleted.
  3. Our encryption secret is stored with an offshore provider, which only Buzzheavier can decrypt.
  4. Each proxy startup retrieves and decrypts the secret key before it’s used for file encryption/decryption.

Entities Involved in BuzzHeavier’s Operations

Event Timeline

  1. Oct 31 - Nov 3: Approximately 9TB of illegal content was uploaded.
  2. These files were reported to the authorities.
  3. Authorities began monitoring our servers and services.
  4. Received notice from the storage provider that our account was on hold.
  5. Shortly afterward, we received a notification from our proxy provider.

Moving Forward and Future of BuzzHeavier

Buzzheavier is fully cooperating with authorities to resolve this matter while prioritizing user privacy. Here’s what we’re implementing moving forward:

We’ll continue to keep you updated as we make further progress. Thank you for your understanding and support.