Paaster – Secure by default end to end encrypted pastebin

Re:Paaster – Secure by default end to end encrypted pastebin by dane-pgp on Friday March 18, 2022 @01:23AM (#30718995)

> Can I trust a instance of paaster not hosted by me?

> No. Anyone could modify the functionality of paaster to expose your secret key to the server. We recommend using a instance you host or trust.

That's refreshingly honest, but I hope that some day a technology like WhatsApp / Cloudflare's recently released "Code Verify" extension helps to solve this.

https://inside.com/campaigns/inside-dev-2022-03-11-31674/sec...

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by derefr on Friday March 18, 2022 @04:31AM (#30719816)

AFAICT you could permanently trust a webapp loaded from an IPFS-scheme URI (as e.g. Brave can do), after it’s been audited once.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by fastball on Friday March 18, 2022 @04:43AM (#30719886)

But then if you're using an IPFS gateway instead of hosting your own instance then the gateway could serve you different content, no?

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by fwtf on Friday March 18, 2022 @05:18AM (#30720049)

Since you request data by a hash, and your software should verify the downloaded data has the same hash, no.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @05:36AM (#30720143)

If you're using a gateway, you have to trust the gateway.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by arlort on Friday March 18, 2022 @05:53AM (#30720244)

You could probably have a pretty light wrapper around the gateway which verifies the hash.

It wouldn't be as easy as simply using a gateway but still much easier than hosting/implementing an IPFS node locally

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @05:55AM (#30720257)

Well, to use the node locally you just run a binary, it's not like there's much to it.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by fastball on Friday March 18, 2022 @06:22AM (#30720399)

No, but getting at content can sometimes take a while if it's not very actively seeded, e.g. I've had to wait hours for images to load on IPFS.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by stavros on Friday March 18, 2022 @06:32AM (#30720456)

Yes, definitely. Discovery with IPFS is abysmal.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by jimsi on Friday March 18, 2022 @03:13AM (#30719402)

I think that providing API to be used by standalone clients is far more better approach

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by Biganon on Friday March 18, 2022 @08:02AM (#30721087)

https://0bin.net/ has existed for quite some time now

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by amir734jj on Friday March 18, 2022 @02:21AM (#30719195)

I wish there was a way to create a link which doesn't contain the password so I can send the password separately.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by bennyp101 on Friday March 18, 2022 @03:52AM (#30719615)

Looking at https://github.com/WardPearce/paaster/blob/Development/paast... the link is just concatenated with # - navigate(`/${pasteId}#${paste.clientSecret}`)}

So you could just copy the link as everything before the # and send the rest as the password separately

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by fastball on Friday March 18, 2022 @04:44AM (#30719889)

Yep, that's exactly how it works.

It's the same concept as how mega.nz do their E2EE.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by bts4 on Friday March 18, 2022 @02:06AM (#30719147)

Pinterest open sourced a similar tool a few years back - Snappass: https://github.com/pinterest/snappass

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by est on Friday March 18, 2022 @02:33AM (#30719241)

Might as well use WebRTC to establish realtime e2e p2p pasting.

[ Parent | on HN ]

Re:Paaster – Secure by default end to end encrypted pastebin by indigodaddy on Friday March 18, 2022 @01:27AM (#30719009)

Text input seems to be broken on mobile? (iOS Chrome)

[ Parent | on HN ]