3 ms·
Key is in the hash. Check 0bin.net. We use the same trick to encrypt the pastebin content. The sources are available so you can see the gist of it. It's a ver
by sametmax 9y ago
Key is in the hash. Check 0bin.net. We use the same trick to encrypt the pastebin content. The sources are available so you can see the gist of it. It's a very simple code.
- sarabande 9y agoCurious why in your FAQ at 0bin.net you say: But JavaScript encryption is not secure! Is there something inherently insecure about the JS crypto library you're using (https://github.com/bitwiseshiftleft/sjcl https://github.com/bitwiseshiftleft/sjcl)?
- e1ven 9y agoI'd imagine it's similar to the arguments at https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/august/javascript-cryptography-considered-harmful/ https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...
- tdeitch 9y ago"Javascript Cryptography Considered Harmful" has been posted on here and lays things out nicely, as e1ven mentions. Here's the original discussion: https://news.ycombinator.com/item?id=2935220 https://news.ycombinator.com/item?id=2935220
- sametmax 9y agoJs crypto make the client trust the server. As i host 0bin, i can inject code whenever i want in the page if i change my mind.
- bluejekyll 9y agoIs this a common practice? It seems brilliantly simple and reproduceable.
- sametmax 9y agoI stole the idea from php zerobin. I know mega used to do it. Not common but not new.