5 ms·
Sweet hack. Would be cool if there was a way to make it secure as well...
by aba_sababa 15y ago
Sweet hack. Would be cool if there was a way to make it secure as well...
- kijin 15y agoWhat kind of security risk do you have in mind?
- wavephorm 15y agoTake a look at this: http://www.vincentcheung.ca/jsencryption/ http://www.vincentcheung.ca/jsencryption/ A lot of ciphers have been ported to JavaScript now: http://code.google.com/p/crypto-js/ http://code.google.com/p/crypto-js/
- Ralith 15y agoAnd what benefit do you imagine that conferring?
- wavephorm 15y agoBy encrypting the data before turning into a URL neither the server, nor anyone who obtains that URL would be able to read the message without knowing the password.
- prurigro 15y agoKinda like how ezcrypt works? https://ezcrypt.it/ https://ezcrypt.it/
- lucaspiller 15y agoAs I understand it this is exactly how Zerobin works. The server stores the encrypted data, and the key is passed in the URL only.
- derleth 15y agoPrevious discussion about cryptography implemented in Javascript: http://news.ycombinator.com/item?id=2935220 http://news.ycombinator.com/item?id=2935220 It links here: http://www.matasano.com/articles/javascript-cryptography/ http://www.matasano.com/articles/javascript-cryptography/
- kijin 15y agoWhy would you want a pastebin app to encrypt your stuff for you? A pastebin is a place where you just post something for random folks to view. It's like imgur for text. Yeah, there's ezcrypt, but I honestly don't see the point. If you want to password-protect your paste, you are free to pass it through GPG before posting it. Much better security than trusting a third party's JS library which may have been modified in transit or even contain a back door.