Client side encrypted pastebin
dimanche 20 octobre 2013 à 02:07 CAFAI, le 20/10/2013 à 02:07
0bin is a client side encrypted pastebin that can run without a database.
0bin allows anybody to host a pastebin while welcoming any type of content to be pasted in it. The idea is that one can (probably...) not be legally entitled to moderate the pastebin content as he/she has no way to decrypt it.
It's an Python implementation of the zerobin project under the WTF licence. It's easy to install even if you know nothing about Python.
For now tested with IE9, and the last opera, safari, chrome and FF.
There is a good doc, but in short:
pip install zerobin
zerobin
For now, 0bin targets Python 2.7 only. Python 3 supports is planned.
How it works
When creating the paste:
the browser generates a random key;
the pasted content is encrypted with this key using AES256;
the encrypted pasted content is sent to the server;
the browser receives the paste URL and adds the key in the URL hash (#).
When reading the paste:
the browser makes the GET request to the paste URL;
because the key is in the hash, the key is not part of the request;
browser gets the encrypted content end decrypts it using the key;
the pasted decrypted content is displayed and sourcecode is highlighted.
Key points:
because the key is in the hash, the key is never sent to the server;
therefore it won't appear in the server logs;
all operations, including code coloration, happen on the client-side;
the server is no more than a fancy recipient for the encrypted data.
Other features
automatic code coloration (no need to specify);
pastebin expiration: 1 day, 1 month or never;
burn after reading: the paste is destroyed after the first reading;
clone paste: you can't edit a paste, but you can duplicate any of them;
code upload: if a file is too big, you can upload it instead of using copy/paste;
copy paste to clipboard in a click;
get paste short URL in a click;
own previous pastes history;
visual hash of a paste to easily tell it apart from others in a list;
optional command-line tool to encrypt and paste data from shell or scripts.
===============================================================================
la version python de zerobin
(Permalink)
0bin is a client side encrypted pastebin that can run without a database.
0bin allows anybody to host a pastebin while welcoming any type of content to be pasted in it. The idea is that one can (probably...) not be legally entitled to moderate the pastebin content as he/she has no way to decrypt it.
It's an Python implementation of the zerobin project under the WTF licence. It's easy to install even if you know nothing about Python.
For now tested with IE9, and the last opera, safari, chrome and FF.
There is a good doc, but in short:
pip install zerobin
zerobin
For now, 0bin targets Python 2.7 only. Python 3 supports is planned.
How it works
When creating the paste:
the browser generates a random key;
the pasted content is encrypted with this key using AES256;
the encrypted pasted content is sent to the server;
the browser receives the paste URL and adds the key in the URL hash (#).
When reading the paste:
the browser makes the GET request to the paste URL;
because the key is in the hash, the key is not part of the request;
browser gets the encrypted content end decrypts it using the key;
the pasted decrypted content is displayed and sourcecode is highlighted.
Key points:
because the key is in the hash, the key is never sent to the server;
therefore it won't appear in the server logs;
all operations, including code coloration, happen on the client-side;
the server is no more than a fancy recipient for the encrypted data.
Other features
automatic code coloration (no need to specify);
pastebin expiration: 1 day, 1 month or never;
burn after reading: the paste is destroyed after the first reading;
clone paste: you can't edit a paste, but you can duplicate any of them;
code upload: if a file is too big, you can upload it instead of using copy/paste;
copy paste to clipboard in a click;
get paste short URL in a click;
own previous pastes history;
visual hash of a paste to easily tell it apart from others in a list;
optional command-line tool to encrypt and paste data from shell or scripts.
===============================================================================
la version python de zerobin
(Permalink)