Paaster – Secure by default end to end encrypted pastebin(github.com)
github.com
Paaster – Secure by default end to end encrypted pastebin
https://github.com/WardPearce/paaster
17 comments
AFAICT you could permanently trust a webapp loaded from an IPFS-scheme URI (as e.g. Brave can do), after it’s been audited once.
But then if you're using an IPFS gateway instead of hosting your own instance then the gateway could serve you different content, no?
Since you request data by a hash, and your software should verify the downloaded data has the same hash, no.
If you're using a gateway, you have to trust the gateway.
You could probably have a pretty light wrapper around the gateway which verifies the hash.
It wouldn't be as easy as simply using a gateway but still much easier than hosting/implementing an IPFS node locally
It wouldn't be as easy as simply using a gateway but still much easier than hosting/implementing an IPFS node locally
I think that providing API to be used by standalone clients is far more better approach
https://0bin.net/ has existed for quite some time now
I wish there was a way to create a link which doesn't contain the password so I can send the password separately.
Looking at https://github.com/WardPearce/paaster/blob/Development/paast... the link is just concatenated with # - navigate(`/${pasteId}#${paste.clientSecret}`)}
So you could just copy the link as everything before the # and send the rest as the password separately
So you could just copy the link as everything before the # and send the rest as the password separately
Yep, that's exactly how it works.
It's the same concept as how mega.nz do their E2EE.
It's the same concept as how mega.nz do their E2EE.
Pinterest open sourced a similar tool a few years back - Snappass: https://github.com/pinterest/snappass
Might as well use WebRTC to establish realtime e2e p2p pasting.
Text input seems to be broken on mobile? (iOS Chrome)
> No. Anyone could modify the functionality of paaster to expose your secret key to the server. We recommend using a instance you host or trust.
That's refreshingly honest, but I hope that some day a technology like WhatsApp / Cloudflare's recently released "Code Verify" extension helps to solve this.
https://inside.com/campaigns/inside-dev-2022-03-11-31674/sec...