/ Recent blog posts on 73 HB9ERY QSL Hugo (https://gohugo.io) en-gb jma@mbuf.net (jma) jma@mbuf.net (jma) Sat, 24 Sep 2022 00:00:00 Z /posts/pastebin/ Sat, 24 Sep 2022 00:00:00 Z jma@mbuf.net (jma) # Requirements It must encrypt on the client side (js code) the contents before sending to the server. Server has no way of reading decrypted contents. Project must be actively maintained. Small footprint: we don&amp;rsquo;t want a whole complex JVM for such task. We can select expiry. We can set a password: The URL contains the key, if url is stolen, contents are readable. A password provides 2FA. Syntax highlighting is nice to have but mandatory Can we use from shell? like cli client # Candidates Name/URL client-side encryption maintained language expiry password syntax highlighting cli client comment 0bin aes256 not actively, last commit Mar 2021 js, python yes no yes no seems abandonned: github comment says We cannot accept contributions for the moment, and will ignore PR. paaster aes356-cbc yes, last commit 21.08.2022 js, python yes no yes yes documentation about client-side and server-side secrets are confusing somehow.. it copy-paste bin, not an editor privatebin aes256-gcm yes actively js, php yes yes yes no QR code generation, file upload, discussions board purritobin yes no, last commit 11 Apr 2021 c++ yes no no yes made for cli friendly and minimalistic ## 0bin It surely was an interesting project. However, the project seems nearly abandonned. There is no cli client. There is no password protection. <h2 id="requirements" > <div> <a href="#requirements"> # </a> Requirements </div> </h2> <ul> <li>It must encrypt on the client side (js code) the contents before sending to the server. Server has no way of reading decrypted contents.</li> <li>Project must be actively maintained.</li> <li>Small footprint: we don&rsquo;t want a whole complex JVM for such task.</li> <li>We can select expiry.</li> <li>We can set a password: The URL contains the key, if url is stolen, contents are readable. A password provides 2FA.</li> <li>Syntax highlighting is nice to have but mandatory</li> <li>Can we use from shell? like cli client</li> </ul> <h2 id="candidates" > <div> <a href="#candidates"> # </a> Candidates </div> </h2> <table> <thead> <tr> <th>Name/URL</th> <th>client-side encryption</th> <th>maintained</th> <th>language</th> <th>expiry</th> <th>password</th> <th>syntax highlighting</th> <th>cli client</th> <th>comment</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/Tygs/0bin" target="_blank" rel="noopener noreferrer">0bin</a></td> <td>aes256</td> <td>not actively, last commit Mar 2021</td> <td>js, python</td> <td>yes</td> <td>no</td> <td>yes</td> <td>no</td> <td>seems abandonned: github comment says We cannot accept contributions for the moment, and will ignore PR.</td> </tr> <tr> <td><a href="https://github.com/WardPearce/paaster" target="_blank" rel="noopener noreferrer">paaster</a></td> <td>aes356-cbc</td> <td>yes, last commit 21.08.2022</td> <td>js, python</td> <td>yes</td> <td>no</td> <td>yes</td> <td>yes</td> <td>documentation about client-side and server-side secrets are confusing somehow.. it copy-paste bin, not an editor</td> </tr> <tr> <td><a href="https://privatebin.info/" target="_blank" rel="noopener noreferrer">privatebin</a></td> <td>aes256-gcm</td> <td>yes actively</td> <td>js, php</td> <td>yes</td> <td>yes</td> <td>yes</td> <td>no</td> <td>QR code generation, file upload, discussions board</td> </tr> <tr> <td><a href="https://github.com/PurritoBin/PurritoBin" target="_blank" rel="noopener noreferrer">purritobin</a></td> <td>yes</td> <td>no, last commit 11 Apr 2021</td> <td>c++</td> <td>yes</td> <td>no</td> <td>no</td> <td>yes</td> <td>made for cli friendly and minimalistic</td> </tr> </tbody> </table> <h3 id="0bin" > <div> <a href="#0bin"> ## </a> 0bin </div> </h3> <p>It surely was an interesting project. However, the project seems nearly abandonned. There is no cli client. There is no password protection.</p> <p>I do not recommend this project anymore.</p> <h3 id="privatebin" > <div> <a href="#privatebin"> ## </a> Privatebin </div> </h3> <p>Actively maintained project. Client-side is managed by javascript and server-side with PHP. Interesting features: password protection, QR code generation, discussion board, file attachments. No cli client is the missing feature.</p> <p>Interesting to use for common case. Good project.</p> <h3 id="paaster" > <div> <a href="#paaster"> ## </a> Paaster </div> </h3> <p>Actively maintained project. Client-side is managed by javascript and server-side with Python. Interesting features: direct bin for copy-paste, no editing. API for client, expiry selection.</p> <p>Recommended where cli client is of a good need. Fewer features than privatebin, but if cli client and API integration is your need, get this one.</p> <h4 id="purritobin" > <div> <a href="#purritobin"> ### </a> Purritobin </div> </h4> <p>Not really an active project, while a c++ server and client exist. Very minimalistic application, no password, no file attachment. json api exist for the client and encryption is optionnal.</p> <p>Give a try but not actively developped is missing sign of evolution.</p> pastebin security security /posts/pastebin/