3 ms·

How interesting! I wrote an encrypted pastebin that uses IPFS: https://hardbin.com/ https://hardbin.com/ I run a public gateway for it on the hardbin.com doma

How interesting! I wrote an encrypted pastebin that uses IPFS: https://hardbin.com/ https://hardbin.com/ I run a public gateway for it on the hardbin.com domain to make it easy for beginners to use without running their own IPFS node. Earlier today I got my first ever takedown request for a hardbin paste! CERT-Bund ("the national cyber security authority in Germany") gave me a link to a paste with encryption key and asked me to take it down. I have blocked the link in my nginx config, but I don't know whether that was the right thing to do or not. I'm interested in hearing opinions either way. Obviously it can still be accessed through other IPFS nodes. The paste contained a bunch of German political party names, alongside links to RAR files, which I presume contained this leaked data.

LinuxBender 8y ago
In my humble opinion, you did the right thing. Whether or not providing access to the dump is legal or ethical, you would certainly receive substantial legal attention should you not comply. It is on the leaker to find methods to share files that can not be easily traced to a public server or a named owner. This is no different than if someone running one of the many reverse tor proxies (public to hidden network) were told to block access to something. They risk losing their server, domain, accounts and much worse. When dealing with embarrassment of government officials, laws get a little muddy and some people will look the other way.
- gammateam 8y ago
  But did that government agency do the right thing? It seems more like a waste of public resources to take down links to encrypted files on a distributed file system? The nodes dont even know what theyre hosting and the cataloger to the pointers has pure discretion
  - LinuxBender 8y ago
    They have to make a best effort to protect their people, as futile as it may seem. If the archive really contained home addresses, their family members lives may be at risk.
    - gammateam 8y ago
      Was this the best effort or simply an effort
blattimwind 8y ago
Given that this is now a criminal investigation it is likely best to preserve any evidence while limiting public access to it.

LinuxBender 8y ago

In my humble opinion, you did the right thing. Whether or not providing access to the dump is legal or ethical, you would certainly receive substantial legal attention should you not comply. It is on the leaker to find methods to share files that can not be easily traced to a public server or a named owner. This is no different than if someone running one of the many reverse tor proxies (public to hidden network) were told to block access to something. They risk losing their server, domain, accounts and much worse. When dealing with embarrassment of government officials, laws get a little muddy and some people will look the other way.

gammateam 8y ago
But did that government agency do the right thing? It seems more like a waste of public resources to take down links to encrypted files on a distributed file system? The nodes dont even know what theyre hosting and the cataloger to the pointers has pure discretion
- LinuxBender 8y ago
  They have to make a best effort to protect their people, as futile as it may seem. If the archive really contained home addresses, their family members lives may be at risk.
  - gammateam 8y ago
    Was this the best effort or simply an effort

blattimwind 8y ago

Given that this is now a criminal investigation it is likely best to preserve any evidence while limiting public access to it.