Hacker News new | ask | show | jobs
by jassra 1846 days ago
I ll be honest here: I litreally did this because i was getting tired of not being able to find a platform where i can be confident that: Yes, from an end to end there is no middleman snooping etc.

I ll publish the code on github too. The idea is that on every startup, system generates a new keys to encrypt data. This site is hosted on a single docker instance and there is no output (logs etc) for now. I dont intend to capture anything at all from this. Litreally. The dictionary lives in memory and there is a background service on the same docker that new(s) the Dictionary every 24 hours.

4 comments

Unless I missing something, there are a ton of open source client side encrypted pastebins around.

E.G: 0bin.net (https://0bin.net/), with a lot of good faith in the FAQ (https://0bin.net/faq/), a basic and open source code (https://github.com/Tygs/0bin), zero JS stats on the main instance and alternative instances already in the wild. It does feature self destruct.

well now you have your platform where you can be confident that no one is snooping but if anyone else would like to use one too, they would have to make it themselves (or deploy your source code when you publish them)
What's wrong with the cryptpads?

Anyway, a bit of feedback:

1. You really need a privacy policy

2. Instead of very long hexadecimal UUIDs use shorter IDs with more valid characters. Do you really need 128 bits for something that has to be brute forced and only lives for a limited time? Perhaps 64 bits are sufficient?

2) what would shorter IDs accomplish?
Typing URL onto mobile?
Can't you just scan the QR code?
Did it ever occur to you there are devices without cameras/QR scanners? Just FYI.
Very cool. I did something similar a while back too

https://github.com/mdotshell/wastebin