4 ms·

I ll be honest here: I litreally did this because i was getting tired of not being able to find a platform where i can be confident that: Yes, from an end to en

by jassra 5y ago

I ll be honest here: I litreally did this because i was getting tired of not being able to find a platform where i can be confident that: Yes, from an end to end there is no middleman snooping etc. I ll publish the code on github too. The idea is that on every startup, system generates a new keys to encrypt data. This site is hosted on a single docker instance and there is no output (logs etc) for now. I dont intend to capture anything at all from this. Litreally. The dictionary lives in memory and there is a background service on the same docker that new(s) the Dictionary every 24 hours.

premek 5y ago
well now you have your platform where you can be confident that no one is snooping but if anyone else would like to use one too, they would have to make it themselves (or deploy your source code when you publish them)
Tepix 5y ago
What's wrong with the cryptpads? Anyway, a bit of feedback: 1. You really need a privacy policy 2. Instead of very long hexadecimal UUIDs use shorter IDs with more valid characters. Do you really need 128 bits for something that has to be brute forced and only lives for a limited time? Perhaps 64 bits are sufficient?
- loa_in_ 5y ago
  2) what would shorter IDs accomplish?
  - quickthrower2 5y ago
    Typing URL onto mobile?
    - vort3 5y ago
      Can't you just scan the QR code?
      - IYasha 5y ago
        Did it ever occur to you there are devices without cameras/QR scanners? Just FYI.
mdotshell 5y ago
Very cool. I did something similar a while back too https://github.com/mdotshell/wastebin https://github.com/mdotshell/wastebin
BiteCode_dev 5y ago
Unless I missing something, there are a ton of open source client side encrypted pastebins around. E.G: 0bin.net (https://0bin.net/ https://0bin.net/), with a lot of good faith in the FAQ (https://0bin.net/faq/ https://0bin.net/faq/), a basic and open source code (https://github.com/Tygs/0bin https://github.com/Tygs/0bin), zero JS stats on the main instance and alternative instances already in the wild. It does feature self destruct.

by jassra 5y ago

premek 5y ago

well now you have your platform where you can be confident that no one is snooping but if anyone else would like to use one too, they would have to make it themselves (or deploy your source code when you publish them)

Tepix 5y ago

What's wrong with the cryptpads? Anyway, a bit of feedback: 1. You really need a privacy policy 2. Instead of very long hexadecimal UUIDs use shorter IDs with more valid characters. Do you really need 128 bits for something that has to be brute forced and only lives for a limited time? Perhaps 64 bits are sufficient?

loa_in_ 5y ago
2) what would shorter IDs accomplish?
- quickthrower2 5y ago
  Typing URL onto mobile?
  - vort3 5y ago
    Can't you just scan the QR code?
    - IYasha 5y ago
      Did it ever occur to you there are devices without cameras/QR scanners? Just FYI.

mdotshell 5y ago

Very cool. I did something similar a while back too https://github.com/mdotshell/wastebin https://github.com/mdotshell/wastebin

BiteCode_dev 5y ago

Unless I missing something, there are a ton of open source client side encrypted pastebins around. E.G: 0bin.net (https://0bin.net/ https://0bin.net/), with a lot of good faith in the FAQ (https://0bin.net/faq/ https://0bin.net/faq/), a basic and open source code (https://github.com/Tygs/0bin https://github.com/Tygs/0bin), zero JS stats on the main instance and alternative instances already in the wild. It does feature self destruct.