Deathbob's dashboard

You will have better luck at http://forum.wuala.com I'm not sure whats causing this but it probably isn't just you. – Deathbob, on January 25, 2010 16:25

We are aware of the problem & are working to correct it.
http://bugs.wuala.com/view.php?id=805

tldr;
The hash is of the encrypted data.
The same data is always encrypted the same way.
You cannot know how to decrypt the file unless you knew the contents at some point (you uploaded it) or were given the key (groups,friends).
The decryption key is stored inside your encrypted account data that is only decrypted on the client (Caleido cannot decrypt this) (This is also why you cannot "reset" your password).

The security rick becomes this: Someone who ALREADY has an EXACT BIT-FOR-BIT copy of the file could in theory locate someone else who has the file. I'm not sure how the maintenance procedure works, but this would require them to poison the network and place themselves as a storage node for a piece of the file. Then wait for the file to be downloaded. But if I'm remembering correctly, this could also result in false positives do to some autonomous activity of the network.