fcremo

I might be wrong, but it seems to me that the encryption key for the file is the truncated SHA256 hash of the file itself. This is not how you want to generate an encryption key.

Edit: also, password protection is enforced server side, and has nothing to do with encryption

I have a neat idea: someone should implement a VPN-over-"video", so that all traffic (or at least server to phone) is not counted against data caps.